Last updated 10 Nov 2026 · Operated by [Registered business name] (trading as Excavatornet)
1. Who is responsible
[Registered business name], trading as Excavatornet, is responsible for your personal data. Contact: [email protected].
2. What we collect
- Account details: name, email, password (stored only as a secure hash), phone number and city if you add them.
- Orders and payments: what you bought, amounts, receipts; for payments, the method, the mobile number you entered for JazzCash/Easypaisa, the payment reference and the account title our payment provider reports. We never receive your PIN, OTP, card number or banking password.
- Project information: briefs, files and messages you send us to deliver a service.
- Support: messages you send us and our replies.
- Security logs: IP address, browser type, sign-in times and actions on your account, to keep accounts and payments safe.
Marketplace activity: your profile and sample drawings, gigs, project posts, proposals, contract messages, delivered drawings and files, and reviews.
Freelancer verification: legal name, CNIC, date of birth, address, mobile number, CNIC photos and a selfie, and payout account details — see the marketplace section below.
3. Why we use it (and our legal basis)
- To provide what you ordered and support you (performing our contract with you).
- To take payments, prevent fraud and money laundering, and keep records for tax and accounting (legal obligations and legitimate interests).
- To keep the Site secure and working (legitimate interests).
- To send you news or offers — only if you opted in. You can opt out at any time from your profile or any such email.
4. Who we share it with
- Our payment provider and the banks/wallets involved, to process payments and refunds and payouts.
- Our hosting and email providers, who store and send data for us under contract.
- Professional advisers (lawyers, accountants, auditors) where needed.
- Authorities, when the law requires it — for example tax authorities or the Financial Monitoring Unit.
We don’t sell your personal data or share it for advertising.
5. How long we keep it
- Account data: while your account is open. When you delete your account we remove or anonymise your profile.
- Order, invoice and payment records: for the period tax and anti-money-laundering laws require (generally up to 10 years), even after you delete your account.
- Security logs: up to 12 months. Support messages: up to 3 years.
6. Your rights
You can access, correct, download (Account → Privacy & data → Download my data) or delete your data, object to marketing, and ask us questions about how we use it. If you’re not satisfied with our answer, you may complain to the relevant authority in Pakistan.
7. Security
We use HTTPS everywhere, hash passwords, encrypt sensitive data (such as payment credentials and identity documents) at rest, offer two-factor sign-in, and limit staff access to what they need. No system is perfectly secure; if we learn of a breach affecting you we will tell you without undue delay.
8. Cookies
We use only essential cookies. See our Cookie Policy.
9. Changes
We’ll post any changes here and update the date at the top. Significant changes will be emailed to account holders.
Marketplace: identity documents and payouts
If you work as a freelancer on Excavatornet we also collect your legal name, CNIC number, date of birth, residential address, mobile number, photos of your CNIC (front and back) and a selfie holding it, and your payout account (wallet number or IBAN) with the account title your bank or wallet reports.
- Why: to confirm you are who you say you are, to screen against sanctions and proscribed-persons lists, to stop fraud and money laundering, and to pay you only into an account in your own name. Our payment provider receives your payout account, account title, mobile number and (for JazzCash payouts) CNIC to send each payout.
- How we protect it: identity documents and account numbers are encrypted at rest and stored outside the website’s public folders. Only authorised staff can open documents, and every view is logged.
- How long: identity, payout and transaction records are kept for at least 5 years after our relationship ends, as anti-money-laundering rules require, even if you delete your account. Your public profile, gigs and messages are removed or anonymised when you delete your account.
- Clients and freelancers see each other’s display names, messages and delivered files on shared contracts. Clients never see a freelancer’s CNIC, address or payout details.
Questions about this policy? Email [email protected] or use our contact form.