Your data, handled like your stock.

1. Who we are

RapidXpk ("we", "us", "our") is an ecommerce fulfillment and delivery company based in Karachi, Pakistan. We store stock for brands, pick and pack orders, pick up parcels from shops, and deliver to customers across Karachi, usually within 24 hours.

This policy explains what information we handle when you visit rapidxpk.com, contact us, use our client portal, track a parcel, or receive a delivery from us.

2. Who this policy covers

• Website visitors who browse our site or fill in a quote or contact form.
• Merchants: the brands, sellers and agencies that use our services, and their staff who use our client portal.
• Recipients: the customers of our merchants who receive parcels from us or use our tracking page.

3. Information we collect

Information you give us

• Quote and contact forms: brand name, your name, WhatsApp or phone number, email, city, and your expected order volume.
• Merchant onboarding: business name, contact persons, business address, billing and payout details, and agreed rates.
• Messages you send us on WhatsApp, email or phone.

Information merchants give us about their customers

• Recipient name, phone number, delivery address, order and product details, order value and cash-on-delivery (COD) amount.

Information created while we deliver

• Tracking numbers, order status, delivery attempts, timestamps, delivery outcome, COD collection records and returns.
• Inventory records: units received, stock levels, SKUs and movements.

Information collected automatically

• Basic technical data when you use our website or portal, such as IP address, browser type, device, pages visited and the time of your visit.
• Login and activity records in the client portal, kept for security and auditing.

4. How we use it

• To receive, fulfil, deliver and return orders, and to collect and settle COD payments.
• To send recipients delivery updates and tracking links by WhatsApp.
• To run the client portal: inventory, orders, billing, statements and reconciliation.
• To respond to quote requests and questions, and to send merchants service-related updates.
• To prevent fraud, investigate failed deliveries or disputes, and keep our systems secure.
• To improve our routing, services and website.
• To meet legal, tax and accounting obligations under the laws of Pakistan.

We do not sell personal information, and we do not use it for purposes unrelated to the service it was given for.

5. Merchant customer data

We use recipient information only to deliver the order, collect payment, handle returns, and send status updates about that order. We never use a merchant's customer data for our own marketing, and we never share one merchant's customer data with another merchant.

For questions about how a brand uses your information, please contact that brand directly. We will help them respond where we can.

6. Who we share it with

We share information only where needed to provide the service:

• Our riders and warehouse staff, who see only what they need to pack and deliver an order.
• The merchant whose order it is, through the client portal and statements.
• Service providers that host our website, database and portal, or deliver our messages (for example cloud hosting, database and WhatsApp messaging providers). They process data on our instructions and may not use it for their own purposes.
• Authorities, where the law requires it, or to protect the rights, property or safety of RapidXpk, our merchants, recipients or others.
• A successor business, if RapidXpk is merged, acquired or restructured, under the same protections as this policy.

Some of our providers may store data on servers outside Pakistan. Where that happens, we choose providers that apply recognised security standards.

7. Cookies and analytics

Our website and portal use cookies and similar browser storage to keep you signed in, remember your preferences and keep the site secure. We use Google Analytics to understand, in aggregate, which pages are useful and which ones lead to quote requests. It counts page visits and taps on our WhatsApp and phone links; it never receives the contents of our forms, your name or your phone number, and Google advertising features are switched off.

You can block or delete cookies in your browser settings. The public website will still work, but you will need cookies enabled to sign in to the client portal.

8. How long we keep it

• Order, delivery and COD records: for as long as needed to settle payments and resolve disputes, and as required by tax and accounting law.
• Merchant account data: for the length of our relationship, and for a reasonable period after it ends to complete reconciliation and meet legal obligations.
• Quote and enquiry details: until the enquiry is closed, or for up to 24 months if we stay in touch about our services.

When we no longer need information, we delete it or anonymise it.

9. How we protect it

• Client portal access is protected by individual logins, and every merchant can only see their own data.
• Database access is restricted with row-level permissions, and data is encrypted in transit.
• Staff and riders get access only to the information their job requires.
• Our public tracking page shows order status only, not the recipient's full details. Once a parcel is out for delivery it also shows the rider's name, phone number and live location, so the recipient can reach them.

No system is perfectly secure. If we become aware of a breach that affects your information, we will notify affected merchants and take steps to contain it.

10. Your choices and rights

Subject to applicable law, you can ask us to:

• Tell you what information we hold about you, and give you a copy.
• Correct information that is wrong or incomplete.
• Delete your information, where we are not required to keep it.
• Stop sending you marketing messages.

Email info@rapidxpk.com with your request. We may need to confirm your identity first, and we aim to reply within 15 working days. If you are a recipient, we may refer your request to the merchant whose order it was.

11. Children

Our services are meant for businesses and adults. We do not knowingly collect information from children through our website. If you think a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our services change. The date at the top shows the latest version. If a change significantly affects how we use merchant data, we will tell merchants directly.

13. Contact us

Questions about privacy or your data? Email info@rapidxpk.com or message us on WhatsApp at +92 317 2683055, Monday to Saturday, 10 am to 10 pm.

RapidXpk, Karachi, Pakistan. See also our Service terms for merchants.