Privacy Policy

When you register and use lawgat.pk, we collect the following types of information:

Account Information: Name, email address, and hashed password when you create an account. Authentication Data: If you sign in via Google, we receive your name, email, and profile picture from Google. Usage Data: Pages visited, tests attempted, scores, bookmarks, streaks, and other interaction data within the platform. Payment Information: We do not store payment card details. Manual payments (EasyPaisa/JazzCash) are processed outside our platform; we only record transaction references and amounts for account activation purposes. Device & Technical Data: IP address, browser type, device type, and operating system collected automatically for security and analytics.

We use the information collected for the following purposes:

To create and manage your account on the Platform. To personalise your study experience, track progress, and award badges. To send transactional emails (OTP verification, password reset) via our email service provider. To process subscription activation and maintain payment records. To improve Platform performance, fix bugs, and develop new features. To comply with applicable Pakistani laws and regulations. To protect the security and integrity of the Platform.

We do not sell, rent, or trade your personal information to any third party. We may share data only in the following limited circumstances:

Service Providers: Trusted third-party providers (e.g., our database host, email delivery service) who process data on our behalf under strict confidentiality obligations. Legal Requirements: If required by law, court order, or governmental authority in Pakistan. Business Transfers: In the event of a merger or acquisition, user data may be transferred as part of business assets, with prior notice given to users.

No data is shared with advertisers or marketing agencies.

We implement industry-standard security measures to protect your data, including:

Passwords are hashed using bcrypt and never stored in plain text. All connections are encrypted via HTTPS/TLS. Access to our database is restricted to authorised personnel only. Authentication tokens are short-lived and invalidated upon logout.

While we take every reasonable precaution, no internet transmission is 100% secure. We cannot guarantee absolute security of your data transmitted to or from the Platform.

lawgat.pk uses cookies and similar technologies to:

Maintain your login session (session cookies). Remember your preferences. Collect anonymous analytics data via Google Tag Manager to understand how users interact with the Platform.

You may disable cookies in your browser settings, but this may affect the functionality of the Platform. We do not use advertising or tracking cookies from third-party ad networks.

As a user of lawgat.pk, you have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you. Correction: Request correction of inaccurate or incomplete data. Deletion: Request deletion of your account and associated data by contacting us at support@lawgat.pk. Portability: Request your data in a portable format. Objection: Object to processing of your data where we rely on legitimate interests.

To exercise any of these rights, please contact us at the email provided below.

By registering on the Platform, you agree to receive essential transactional emails such as account verification, OTP codes, and password reset links. We may also send occasional product updates or announcements. You may opt out of non-essential communications at any time by contacting us. We will never send you unsolicited promotional emails from third parties.

lawgat.pk is not directed at children under the age of 16. We do not knowingly collect personal information from individuals under 16. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

We retain your personal data for as long as your account is active or as needed to provide you with services. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory compliance, fraud prevention, or dispute resolution.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a notice on the Platform. The date of the latest revision is always displayed at the top of this page. Continued use of the Platform after changes constitutes your acceptance of the updated policy.