1Who we are and what this policy covers
OilShop.PK is a cloud-based point-of-sale (POS) and shop management software for oil change, lube, tyre and car wash shops in Pakistan. It is operated by Urban Soft Technologies, 21/16 CCD, Lake City Holdings, Raiwind Road, Lahore, Pakistan ("we", "us", "our").
This policy applies to:
- the website www.oilshop.pk and its demo and contact forms;
- the OilShop.PK software used by shops (our "Clients"), including each shop's own subdomain; and
- SMS, email and WhatsApp messages sent through the software to vehicle owners who visit those shops ("Shop Customers").
2Information we collect
| From | Information |
|---|---|
| Shop owners & staff | Name, shop name, phone number, email, address and city, login credentials, staff user accounts, billing and payment records, and settings you choose in the software. |
| Shop Customers (entered by the shop) | Name, mobile number, vehicle make and model, registration number, odometer readings, services performed, products used (for example engine oil grade and brand), invoices, and next-service due dates. |
| Phone numbers, message content and attachments (such as PDF invoices), delivery and read statuses, replies sent to the shop's WhatsApp number, and the WhatsApp profile name. See Section 4. | |
| Website visitors | Details you submit in the demo or contact forms (name, phone, email, shop name, city, message), plus usage data such as IP address, browser, device type, pages visited and referring site. |
We do not ask for and do not knowingly store national ID (CNIC) numbers, bank card numbers or other sensitive personal data in the POS. Please do not enter such data into free-text fields.
3How we use information
- To provide the service: creating invoices, keeping vehicle service history, managing stock, and producing reports for the shop.
- To send messages the shop requests: digital invoices, oil change and service reminders, and, where the customer has agreed, offers from that shop, by WhatsApp, SMS or email.
- To manage accounts and billing: setting up shops, handling subscriptions and sending account notices.
- To support you: answering demo requests, support questions and WhatsApp enquiries.
- To keep the service secure: preventing fraud, spam and misuse, and troubleshooting delivery problems.
- To improve the service: understanding, in aggregate, how features are used.
- To meet legal obligations: tax, accounting and lawful requests from authorities in Pakistan.
We do not use Shop Customer data to market OilShop.PK or any other business, and we do not combine one shop's customer list with another shop's.
4WhatsApp Business Platform (Meta)
OilShop.PK sends and receives WhatsApp messages using the WhatsApp Business Platform (Cloud API), provided by WhatsApp LLC and Meta Platforms, Inc. ("Meta"). We do not use unofficial WhatsApp tools, bulk-sending apps or automation of personal WhatsApp accounts.
4.1 What is shared with Meta
To deliver a message, the following is sent to Meta's servers:
- the recipient's WhatsApp phone number;
- the message content, such as invoice details, a service reminder, or an approved message template and its variables (customer name, vehicle number, due date, amount);
- attachments, such as a PDF invoice; and
- the sending business's WhatsApp phone number ID and account identifiers.
4.2 What we receive from Meta
Through Meta's webhooks we receive message delivery and read statuses, error codes, replies and media that customers send to the shop's WhatsApp number, the sender's phone number and WhatsApp profile name, and timestamps. We use this only to show conversations and delivery status to the shop, to handle opt-outs, and to troubleshoot problems.
4.3 Types of messages
| Type | Examples | When it is sent |
|---|---|---|
| Utility | Digital invoice after a service, oil change due reminder, booking confirmation | After the customer gives their number at the shop for invoices and reminders |
| Marketing | Discounts, seasonal offers from the shop | Only where the customer has agreed to receive offers, and never after they opt out |
| Service replies | Answers to a customer's own question | Within the 24-hour window after the customer messages the business |
4.4 Consent (opt-in)
WhatsApp messages are sent only to people who have given their mobile number to the shop and agreed to receive messages from that shop on WhatsApp, as required by the WhatsApp Business Messaging Policy. Each shop is responsible for collecting this consent and for telling customers which shop the messages will come from. Messages always identify the sending shop.
4.5 Opting out
To stop WhatsApp messages: reply STOP to the message, ask the shop to remove your number, or contact us at [email protected] or +92 317 8081821. You can also block the business number inside WhatsApp at any time.
Once we receive an opt-out we stop marketing messages to that number. A shop may still send a one-off invoice for a service you actually requested, unless you ask the shop not to.
4.6 How we treat WhatsApp and Meta data
- We use data received through Meta's platform only to provide the messaging features described here, in line with the Meta Platform Terms and WhatsApp Business Terms of Service.
- We do not sell, license or rent this data, use it for advertising profiles, share it with data brokers, or use it to make decisions about anyone's eligibility for credit, housing, employment or insurance.
- Access tokens and account identifiers for the WhatsApp Business Account are stored on our servers, are not exposed in the browser, and are used only to send and receive that shop's messages.
- We delete WhatsApp data when it is no longer needed for these purposes, when a shop closes its account, or when you ask us to (see Section 12).
4.7 Meta's own policies
Meta processes message data under its own terms, and WhatsApp messages are end-to-end encrypted in transit between the WhatsApp app and the WhatsApp Business Platform. When you use WhatsApp, Meta's policies also apply to you:
OilShop.PK is not owned by, endorsed by or affiliated with Meta or WhatsApp. "WhatsApp" and "Meta" are trademarks of their respective owners.
5SMS and email communications
- Transactional messages include invoices, service reminders, account security notices and billing notices. These are part of the service.
- Marketing messages are sent only with consent. You can unsubscribe through the link in an email, by replying STOP to an SMS, or by contacting us.
- SMS and email are delivered through third-party telecom and email delivery providers, who receive only the number or address and the message needed to deliver it.
6Zero-tolerance anti-spam policy
We do not allow OilShop.PK to be used for unsolicited, misleading or irrelevant messages on any channel.
- Consent first: shops may message only customers who gave their number to that shop and agreed to hear from it. Purchased, scraped or shared contact lists are not allowed.
- Monitoring: we watch sending volumes, block rates and quality ratings reported by Meta, and pause sending that looks like spam.
- Enforcement: we may suspend messaging for any shop that breaks this policy or Meta's policies.
- Report it: if you receive a message you did not agree to, tell us at [email protected] and we will investigate.
9Data retention
- Shop and customer records are kept while the shop's account is active, so the shop can see vehicle service history.
- After cancellation, the shop's data is deleted from our live servers, as described in our refund and cancellation policy. Backups are overwritten on their normal cycle.
- WhatsApp and SMS logs are kept only as long as needed to show message history, resolve delivery problems and handle billing disputes.
- Billing records may be kept longer where tax or accounting law requires it.
10Security
We use HTTPS encryption for data in transit, password-protected accounts with per-user permissions, restricted server access and regular backups. Each shop's data is kept separate from every other shop's. No system is completely secure, so if we learn of a breach that affects your data we will notify affected shops promptly and take steps to contain it.
11Your rights
Subject to applicable law in Pakistan, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data (see Section 12);
- stop sending you marketing messages; and
- withdraw consent you gave earlier. This does not affect messages sent before you withdrew it.
Shop owners can view and edit most of their data directly in the software. If you are a Shop Customer, you can ask the shop or contact us. We reply within 30 days.
12Data deletion instructions
To request deletion of your personal data, including WhatsApp data received through Meta:
- Email [email protected] with the subject "Data Deletion Request", or send the same request on WhatsApp to +92 317 8081821.
- Include the mobile number or email to be deleted and, if you know it, the shop name.
- We may contact you to confirm the request came from you.
- We will delete the data, or tell you why we must keep part of it (for example, tax records), within 30 days and confirm by email or WhatsApp.
Shop owners who want their whole account deleted can follow the cancellation steps in our refund and cancellation policy.
13Children
OilShop.PK is business software for shop owners and their staff. It is not directed at children under 13, and we do not knowingly collect their data. If you believe a child's data has been entered, contact us and we will delete it.
14International transfers
Some of our providers, including Meta, process data on servers outside Pakistan. When data is transferred, we use providers that apply recognised security measures, and we share only what is needed for the service.
15Changes to this policy
We may update this policy as the service or the law changes. The "Last updated" date at the top shows the latest version. For significant changes we will notify shop owners by email, WhatsApp or a notice in the software before the change takes effect.
16Contact us
Questions about this policy or your data? Contact Urban Soft Technologies:
