1. Introduction
Welcome to Printlay ("Printlay", "we", "us", or "our"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our self-service printing kiosks, our website printlay.pk, or any related services (collectively, the "Services").
By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.
2. About Us
Printlay is a Pakistan-based business operating self-service document printing kiosks. Our kiosks allow you to print documents via QR code upload from your phone, USB drive, or built-in document scanner, and to pay using card (NFC tap), QR code, or cash. Printlay is registered as a partnership in Lahore, Pakistan.
3. Information We Collect
3.1 Information You Provide at the Kiosk
- Documents you upload, scan, or print: Temporarily processed in the kiosk's memory only for the duration of your print job.
- Print job details: Number of pages, color/black-and-white preference, paper size, orientation, copies, and similar print settings.
3.2 Payment Information
- Card and NFC payments: Processed by PayFast, our SBP-licensed payment gateway. Printlay does NOT store your full card number, CVV, or PIN.
- QR code payments: Processed through Raast, mobile wallets, or other authorised schemes via PayFast. We receive only a transaction reference, amount, and status.
- Cash payments: We collect no personal data when you pay in cash.
3.3 Information Collected Automatically
- On the website: IP address, browser type, device type, pages visited, referring URL, and similar standard web analytics data.
- On the kiosk: timestamp of transaction, kiosk identifier and location, transaction reference, and amount.
4. How We Use Your Information
- To deliver the printing service you request and operate the kiosk.
- To process your payment through PayFast and applicable payment schemes.
- To issue receipts and respond to refund or support requests.
- To respond to inquiries submitted via our website contact form.
- To maintain, troubleshoot, and improve our kiosks and Services.
- To detect, prevent, and investigate fraud, abuse, or security incidents.
- To comply with applicable Pakistani law, including PECA 2016, SBP regulations, and tax laws.
5. Document Privacy and Auto-Deletion
Your documents are private. Files you upload via QR or USB, and documents you scan at the kiosk, are stored only in temporary memory while the print job is being processed. All such files are automatically deleted from the kiosk immediately after the print job is completed, cancelled, or the session ends — whichever occurs first. Printlay does not transmit, copy, archive, or retain the content of your documents.
6. Sharing of Information
We do not sell your personal information. We share information only as follows:
- Payment processors: PayFast and the underlying card schemes, banks, or wallet providers necessary to process your transaction.
- Service providers: Trusted vendors who help us operate, host, or maintain our kiosks and website, bound by confidentiality obligations.
- Law enforcement and regulators: When required by valid legal process or applicable Pakistani law.
7. Data Retention
- Customer documents: Deleted immediately after the print job ends.
- Transaction records: Retained for up to five (5) years to comply with Pakistani tax and banking obligations.
- Contact form submissions: Retained for up to two (2) years for support purposes.
- Website analytics data: Retained in aggregated form for up to 26 months.
8. Security
We implement reasonable technical and organisational measures to protect your information, including:
- Encrypted transmission of payment data between the kiosk and PayFast.
- Restricted physical and software access to kiosk operating systems.
- Automatic deletion of user documents at the end of each print session.
- Regular software updates and maintenance of our kiosk fleet.
9. Your Rights
Subject to applicable Pakistani law, you may:
- Request information about whether we hold personal data about you.
- Request correction of inaccurate or outdated information.
- Request deletion of your contact form submissions.
- Withdraw consent for marketing communications.
To exercise any of these rights, contact us at printlay26@gmail.com. We will respond within a reasonable timeframe.