1. Who we are
This website, scepterix.com, and the products listed on it (OffOnMyCard, FlowCity, DiscountSplit, MedsForHalf and GoldMarketPK) are operated by [LEGAL ENTITY NAME] ("Scepterix", "we", "us"), a company registered in Pakistan (SECP registration no. [SECP REGISTRATION NO], NTN [NTN]), with its registered office at 780, Street 23, Block D, Top City-1, Islamabad, Pakistan[OFFICE ADDRESS]. Legal review
For any privacy question, contact us at hello@scepterix.com[EMAIL] or +92 312 5646537[PHONE].
2. Information we collect
Information you give us
- Contact and enquiry data: name, email, phone number, company, subject and message when you use our contact or waitlist forms.
- Account data (when our products launch): name, email, mobile number, password hash, and profile preferences.
- Transaction data: the amount, date, parties, status and gateway reference of payments made through our products. We do not receive or store full card numbers, CVV or PINs (see section 5).
- Verification data (marketplace sellers and service providers only): CNIC details or other identity documents where needed to prevent fraud or to meet regulatory requirements. Legal review
- Listing content: product photos, descriptions, batch and expiry details that sellers upload.
Information collected automatically
- Device and browser type, IP address, pages viewed, referring page and approximate location (city level), collected through server logs and privacy-respecting analytics.
- For FlowCity government deployments: aggregated traffic data supplied by the city. FlowCity is designed to work with aggregated or anonymised data, not with individuals' identities.
3. How we use information
- To reply to enquiries, arrange demos, and onboard merchants and partners.
- To provide, run, secure and improve our products.
- To process payments, escrow holds, releases, refunds and disputes through our licensed payment-gateway partners.
- To verify users and listings, and to prevent fraud, money laundering and misuse.
- To send service messages and, where you have agreed, product updates. You can opt out of marketing at any time.
- To meet legal, tax, accounting and regulatory obligations, including requests from the State Bank of Pakistan, DRAP, FBR or law-enforcement agencies where the law requires it.
4. Legal basis & consent Legal review
We process personal data with your consent (for example, when you submit a form and tick the consent box), where we need to in order to provide a service you asked for, to comply with Pakistani law (including the Prevention of Electronic Crimes Act, 2016, and applicable SBP regulations), or for our legitimate interests in securing and improving our services. When Pakistan's personal data protection law comes into force, we will update this policy to match it.
5. Payments & card data
Card payments are processed by SBP-licensed payment gateways and their acquiring banks, such as [GATEWAY PARTNER NAME]. Card details are entered on the gateway's secure, PCI DSS-compliant pages. Scepterix never sees or stores your full card number, CVV or PIN. We receive only a transaction reference, status, amount and, where the gateway provides it, a masked card number (for example, the last four digits) for reconciliation and support.
For escrow-based payments, the licensed gateway holds the funds, not Scepterix, and pays each party directly under that gateway's own terms and privacy policy.
6. Who we share information with
We do not sell personal data. We share it only as needed with:
- Payment gateways and banks, to process, hold, pay out and refund payments.
- Service providers who work on our behalf under confidentiality obligations: website hosting ([HOSTING PROVIDER]), form delivery (Web3Forms), email, customer support, courier partners (marketplace) and cloud infrastructure.
- Counterparties to a transaction, such as the service provider or buyer you are dealing with, limited to what's needed to complete it.
- Authorities, when required by law, court order or regulatory direction.
- A successor business, if Scepterix is involved in a merger, acquisition or restructuring, subject to this policy.
7. Cookies & similar technologies
This website uses only the storage it needs to work. Some pages load third-party resources: Google Fonts (typography), jsDelivr (the 3D graphics library) and Google Maps (the embedded map on the Contact page). These providers may receive your IP address and set their own cookies under their own privacy policies. If we add analytics or marketing cookies, we will ask for your consent first. Legal review
8. How long we keep information
| Data | Retention |
|---|---|
| Enquiries and waitlist sign-ups | Up to 24 months after our last contact, or until you ask us to delete them |
| Account data | For as long as your account is active, plus 12 months |
| Transaction and payment records | At least as long as tax, accounting and SBP record-keeping rules require Legal review |
| Server and security logs | Up to 12 months |
9. Security
We use encryption in transit (HTTPS/TLS), access controls based on staff roles, least-privilege access, secure development practices and regular reviews. No system is completely secure. If a data breach is likely to put you at risk, we will notify you and the relevant authorities as the law requires.
10. Your rights and choices
You can ask to access, correct, update or delete your personal data, withdraw your consent, or opt out of marketing. Email hello@scepterix.com[EMAIL] and we will reply within 30 days. We may need to confirm your identity first, and we may keep some records where the law requires us to.
11. Children
Our products are not intended for people under 18, and we do not knowingly collect their personal data. If you think a child has given us information, contact us and we will delete it.
12. International transfers
Some of our service providers (for example, hosting and email providers) may store data outside Pakistan. Where that happens, we choose providers with strong security and contractual safeguards, and we follow any data-localisation requirements that apply to payment data. Legal review
13. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, let you know by email or with a notice on the site.
14. Contact
[LEGAL ENTITY NAME]
780, Street 23, Block D, Top City-1, Islamabad, Pakistan[OFFICE ADDRESS]
Email: hello@scepterix.com[EMAIL] · Phone: +92 312 5646537[PHONE]