Privacy Policy

At Doralox, we collect several types of information to provide you with our digital asset management services. Understanding what information we gather helps you make informed decisions about using our platform.

We also collect information automatically when you use our services, including cookies and similar tracking technologies that help us remember your preferences and analyze how our platform is used.

Your information serves multiple purposes in delivering our digital asset management services effectively and securely. We process your data based on legitimate business interests and legal obligations under Pakistani law.

• Providing account management and digital asset services
• Verifying your identity and preventing fraudulent activities
• Processing transactions and maintaining accurate financial records
• Communicating important account updates and service notifications
• Improving our platform based on user feedback and usage patterns
• Complying with financial regulations and reporting requirements
• Providing customer support and resolving technical issues

While we maintain strict control over your personal information, certain circumstances require us to share data with trusted partners and regulatory authorities.

We share information with financial institutions for payment processing, regulatory bodies for compliance reporting, and technology partners who help maintain our platform security. All third-party relationships are governed by strict data protection agreements.

In cases where we're legally required to disclose information — such as court orders or regulatory investigations — we'll notify you unless prohibited by law. We may also share aggregated, non-identifiable data for research and analysis purposes.

Under Pakistani data protection laws and our commitment to privacy, you have several rights regarding your personal information:

To exercise these rights, contact us using the information provided at the end of this policy. We'll respond within 30 days of receiving your verified request.

Protecting your information is fundamental to our operations. We implement multiple layers of security measures to safeguard your data against unauthorized access, alteration, or disclosure.

Our security framework includes encryption for data in transit and at rest, regular security audits, multi-factor authentication, and restricted access controls. We also maintain comprehensive incident response procedures and regularly update our security protocols.

All employees and contractors with access to personal information undergo background checks and privacy training. We monitor our systems continuously for suspicious activities and maintain detailed access logs for audit purposes.

While we implement robust security measures, no system is completely immune to threats. We encourage users to maintain strong passwords and report any suspicious account activity immediately.

We retain your personal information only as long as necessary for providing our services and meeting legal obligations. Different types of data have varying retention periods based on regulatory requirements and business needs.

Account information and transaction records are typically retained for seven years after account closure to comply with Pakistani financial regulations. Marketing preferences and communication logs are deleted within two years of account inactivity.

When data reaches the end of its retention period, we securely delete or anonymize it using industry-standard methods. Some information may be retained longer if required by ongoing legal proceedings or regulatory investigations.

While Doralox primarily operates within Pakistan, some of our technology partners and service providers may process data internationally. We ensure all international transfers comply with Pakistani data protection laws and include appropriate safeguards.

Any data transferred outside Pakistan is protected through contractual arrangements that maintain the same level of protection required under local law. We regularly review these arrangements to ensure ongoing compliance.

Our platform uses cookies and similar technologies to enhance your experience and maintain security. These technologies help us remember your preferences, analyze site usage, and prevent fraudulent activities.

You can control cookie settings through your browser preferences, though disabling certain cookies may affect platform functionality. We use both session cookies that expire when you close your browser and persistent cookies that remain on your device for specified periods.

We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated through email notifications and prominent notices on our platform.

Minor updates may be posted without individual notification, so we encourage you to review this policy regularly. The "Last Updated" date at the top indicates when the most recent changes were made.