Privacy Policy

Effective date: September 7, 2026
Last updated: September 7, 2026

Rishta Pakistan ("Rishta Pakistan", "we", "us", or "our") is committed to protecting the privacy and personal data of every person who visits or uses https://ahmedraza.space, together with any related pages, mobile applications, and services we operate (collectively, the "Service"). This Privacy Policy (the "Policy") describes the categories of personal data we process, the purposes and legal bases for that processing, the parties with whom we share it, the safeguards we apply, and the rights available to you under applicable data-protection laws.

Please read this Policy carefully. By registering an account, submitting personal data, or otherwise using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, you should discontinue use of the Service.

1. Scope and definitions

This Policy applies to personal data processed by Rishta Pakistan through the Service, including data collected from members, matchmakers, wedding-service partners, prospective users, and visitors.

For the purposes of this Policy:

• "Personal data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on personal data, whether automated or manual.
• "Member" means a natural person who has registered a matrimonial profile on the Service.
• "Applicable law" includes the Pakistan Personal Data Protection Bill (once enacted), the EU/UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA"), and other laws that apply to us or to you.

2. Data controller and contact details

Rishta Pakistan acts as the "data controller" (or equivalent) in respect of the personal data described in this Policy. Requests, complaints, and data-subject enquiries should be addressed to:

• Privacy enquiries: privacy@ahmedraza.space
• General support: support@ahmedraza.space
• Website: https://ahmedraza.space

We will endeavour to acknowledge substantive requests within seven (7) business days and to resolve them within thirty (30) days, subject to any extensions permitted by applicable law.

3. Categories of personal data we collect

3.1 Information you provide directly

• Account credentials: full name, email address, mobile number, password (stored as a salted hash), and language preference.
• Matrimonial profile: date of birth, gender, marital status, sect, religion, cast, height, education, profession, employment status, income (optional), city, country, willingness to relocate, family details, guardian information, "about me" narrative, and partner preferences.
• Photographs: public and private profile photos, together with metadata such as approval status.
• Communications and interactions: messages exchanged with other members, interest requests, connection acceptances, appeals, moderation reports, contact-form submissions, and support tickets.
• Verification and identity documents: if you elect to verify your profile, we may process identity documents or attestations, retained only for the period necessary to complete verification.
• Billing information: if you subscribe to a paid membership or boost, our payment processors collect payment-instrument details. We do not store full card numbers on our servers.

3.2 Information collected automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen size, language settings, referring URLs, and crash logs.
• Usage data: pages viewed, features used, search queries, time spent, click paths, and error events.
• Cookies and similar technologies: as described in Section 7.

3.3 Information from third parties

• Social sign-in: if you register or log in through a third-party identity provider, we receive the profile fields you authorise (typically name, email, and avatar).
• Referral partners: where a matchmaker or affiliated partner refers you, we may receive attribution data such as a referral code and campaign source.
• Fraud-prevention providers: we may receive risk signals from payment and anti-abuse services to protect the Service and its members.

4. Purposes and legal bases for processing

We process personal data only where we have a lawful basis to do so. The principal purposes and corresponding legal bases are:

• Providing the Service — creating and securing your account, displaying your profile, powering matching, messaging, interests, connections, notifications, and safety tooling. Legal basis: performance of a contract with you.
• Identity verification and safety — verifying members, moderating content, preventing fraud, and enforcing our Terms of Service and Community Guidelines. Legal basis: legitimate interests and, where required, legal obligation.
• Payments and subscriptions — processing membership fees, refunds, invoices, and receipts. Legal basis: performance of a contract and legal obligation (tax, accounting).
• Communications — sending transactional emails, service updates, and (where permitted) marketing communications. Legal basis: performance of a contract, legitimate interests, or consent, as applicable.
• Analytics and improvement — measuring engagement, diagnosing errors, and improving features. Legal basis: legitimate interests or consent, depending on jurisdiction.
• Advertising — displaying advertisements, including personalised advertisements where you have not opted out (see Section 7). Legal basis: legitimate interests or consent, depending on jurisdiction.
• Legal and regulatory compliance — responding to lawful requests from authorities and defending legal claims. Legal basis: legal obligation and legitimate interests.

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Disclosure of personal data

We share personal data only in the circumstances described below, and always subject to appropriate contractual and security safeguards.

5.1 Other members

Your matrimonial profile is visible to other logged-in members in accordance with your privacy settings. Private photos, contact details, and income are hidden until you approve access. You control what is shared, and you may hide or delete your profile at any time.

5.2 Service providers and sub-processors

We engage carefully selected vendors to process personal data on our behalf, including hosting, content delivery, email and SMS delivery, analytics, payment processing, moderation, error monitoring, and customer support. Each service provider is bound by written obligations to process personal data only on our documented instructions and to maintain appropriate security measures.

5.3 Advertising and measurement partners

We share limited data with advertising partners (including Google) to display and measure advertisements. See Section 7 for details and opt-out choices.

5.4 Legal, safety, and regulatory disclosures

We may disclose personal data where we believe in good faith that such disclosure is:

• required by law, regulation, court order, or governmental request;
• necessary to enforce our Terms of Service or investigate potential violations;
• necessary to detect, prevent, or address fraud, security, or technical issues; or
• necessary to protect the rights, property, or safety of Rishta Pakistan, our members, or the public.

5.5 Corporate transactions

If we undergo a merger, acquisition, financing, reorganisation, bankruptcy, or sale of assets, personal data may be transferred as part of that transaction, subject to obligations of confidentiality and continuity of protections consistent with this Policy.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising in a manner that would require an opt-out right under CCPA/CPRA without providing that right.

6. International data transfers

Rishta Pakistan operates internationally. Your personal data may be transferred to, stored in, and processed in countries other than the country in which you reside. Where such transfers occur from a jurisdiction that restricts cross-border transfers (such as the EEA or UK), we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or equivalent mechanisms recognised under applicable law. Copies of the relevant safeguards may be obtained by contacting privacy@ahmedraza.space.

7. Cookies, similar technologies, and advertising

We use cookies, pixel tags, local storage, and similar technologies (collectively, "cookies") to operate the Service, remember your preferences, measure performance, protect against fraud, and deliver advertisements. You may control cookies through your browser settings and, where applicable, our in-product consent tools.

7.1 Categories of cookies we use

• Strictly necessary cookies — required to sign you in, maintain your session, and protect the Service against abuse. These cannot be disabled without impairing the Service.
• Functional cookies — remember preferences such as language, locale, and interface settings.
• Analytics cookies — help us understand how the Service is used so we can improve it.
• Advertising cookies — used to display and measure advertisements, including personalised advertisements where you have not opted out.

7.2 Google AdSense and third-party advertising

The Service may display advertisements delivered by Google AdSense and other third-party advertising vendors. In connection with these advertisements:

• Third-party vendors, including Google, use cookies to serve advertisements based on your prior visits to the Service and other websites on the Internet.
• Google's use of advertising cookies enables it and its partners to serve advertisements to you based on your visit to the Service and/or other sites on the Internet.
• You may opt out of personalised advertising by Google by visiting Google Ads Settings.
• You may opt out of a third-party vendor's use of cookies for personalised advertising by visiting the Digital Advertising Alliance opt-out page or, for users in Europe, Your Online Choices.
• Third-party vendors may use the Google DoubleClick DART cookie or similar identifiers to serve advertisements based on your visits to this and other sites.
• Google's advertising practices are further described in the Google Advertising & Privacy Policy and the Google Advertising Principles.

7.3 Analytics

We may use analytics providers, including Google Analytics, to understand aggregate usage patterns. These providers may set cookies and process pseudonymous identifiers on our behalf. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

8. Data retention

We retain personal data only for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. Retention periods are determined based on the following criteria:

• Active accounts: retained while your account remains active and for a reasonable period thereafter.
• Communications and moderation records: retained for the period necessary to safeguard members and enforce our Terms.
• Financial and tax records: retained for the periods mandated by applicable tax, accounting, and anti-money-laundering laws.
• Legal claims: retained for the duration of applicable limitation periods and any ongoing or reasonably anticipated litigation, regulatory investigation, or governmental request.

Upon expiry of the applicable retention period, personal data is deleted or irreversibly anonymised.

9. Security

We implement technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, and destruction. These measures include, at a minimum:

• encryption in transit using TLS;
• hashed and salted password storage;
• role-based access controls and least-privilege administration;
• segregated environments for development, staging, and production;
• logging, monitoring, and rate limiting to detect and mitigate abuse;
• regular backups and tested restoration procedures; and
• vendor due-diligence and written data-processing agreements.

While we take these measures seriously, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify affected members and relevant authorities in accordance with applicable law.

10. Your rights

Subject to applicable law and the exemptions provided for therein, you have the following rights in respect of personal data we hold about you:

• Right of access — to obtain confirmation of whether we process your personal data and to receive a copy of that data.
• Right to rectification — to correct inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing — to request that we limit the processing of your personal data in certain circumstances.
• Right to object — to object to processing based on legitimate interests, including profiling and direct marketing.
• Right to data portability — to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent — where processing is based on consent, to withdraw consent at any time.
• Right to lodge a complaint — with the data-protection authority in your jurisdiction.

Most of these rights can be exercised directly from your account settings. Alternatively, you may submit a request to privacy@ahmedraza.space. We may need to verify your identity before actioning a request.

10.1 Additional rights for California residents (CCPA/CPRA)

If you are a California resident, you have the right (subject to verification and legal exemptions) to know what personal information we collect, to delete personal information, to correct inaccurate personal information, to opt out of the sale or sharing of personal information for cross-context behavioural advertising, and to non-discrimination for exercising these rights. As stated in Section 5, we do not sell personal information.

11. Children's privacy

The Service is intended solely for individuals who are eighteen (18) years of age or older. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18 without verifiable parental consent, we will take reasonable steps to delete that data. If you believe a minor has provided us with personal information, please contact privacy@ahmedraza.space.

12. Third-party links and integrations

The Service may contain links to, or integrate with, third-party websites, applications, or services that are not operated by us. This Policy does not apply to those third parties, and we are not responsible for their content, privacy practices, or security. We encourage you to review the privacy notices of every third party that processes your personal data.

13. Automated decision-making

Some features of the Service, including profile ranking and matching suggestions, rely on automated processing. These processes are designed to assist rather than replace human judgement and do not produce legal or similarly significant effects on you. Where required by law, you may request human review of any decision that materially affects you.

14. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by prominent notice on the Service or by email prior to the change becoming effective. The "Effective date" at the top of this page indicates when the Policy was most recently revised. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

15. Governing law

This Policy is governed by the laws of the Islamic Republic of Pakistan, without regard to its conflict-of-laws principles. Where you reside in a jurisdiction that grants additional protections, those protections continue to apply to the extent required by law.

16. How to contact us

We welcome questions, concerns, and feedback about this Policy or our data-handling practices. Please contact us at:

• Privacy enquiries: privacy@ahmedraza.space
• Support: support@ahmedraza.space
• Website: https://ahmedraza.space

This document is provided for general informational purposes and does not constitute legal advice. If you require legal advice regarding your rights or obligations, please consult a qualified professional in your jurisdiction.