Privacy Policy

What we collect

Account details: your name, phone number, email address, installation address, area and the account number we give you.

Identity documents: a copy of your CNIC (front and back) and, where needed, a photo and the signed connection form. Internet service providers in Pakistan are required by the Pakistan Telecommunication Authority (PTA) to verify and keep this for every subscriber.

Service records: your package, bills, payments, receipts you upload, support tickets and the messages we send you.

Connection data: your PPPoE username, the IP address assigned to you, the MAC address of your router, the router and port you connect through, session start and end times, and how much data you use. We record data volumes, not the websites you visit or the content of your traffic.

Location of the connection: the map position of your installation, so technicians can find it.

Website and portal use: basic technical logs such as your IP address, browser and the time of a request, kept for security. The portal stores your sign-in and language choice in your browser; we do not use advertising cookies.

Why we use it

To connect you, keep your service running and fix faults.

To bill you, record your payments and suspend or restore service according to our terms.

To tell you about bills, payments, outages and your account by SMS, WhatsApp, email, push notification or in the portal. You can turn most of these off in the portal settings; messages about suspension of service are always sent.

To meet our legal duties to the PTA and other authorities, and to prevent fraud and misuse of our network.

Who we share it with

Your reseller: if your connection is provided by one of our authorised resellers, they see your account, bills and payments so they can serve you.

Service providers who work for us: SMS and WhatsApp messaging providers, payment providers such as JazzCash and Easypaisa when you pay through them, and our hosting and backup providers. They receive only what they need to do that job.

Authorities: the PTA, law enforcement or a court, when the law requires it, for example under the Prevention of Electronic Crimes Act 2016.

We do not sell your personal information to anyone.

How long we keep it

Account, billing and identity records are kept while you are a customer and for as long afterwards as the law and our tax and regulatory duties require.

Detailed connection session records are kept for 90 days; daily usage totals for longer, to show your usage history. Database backups are kept for a limited number of days and then deleted.

How we protect it

Access is limited to staff who need it, each with their own account and permissions, and every sensitive action is logged. Identity documents and receipts are stored privately and are never public. Passwords are stored in a form that cannot be read back, and connections to our website and portal are encrypted.

Your choices and rights

You can see and correct your contact details in the portal, choose which notices you receive, and ask us for a copy of the information we hold about you. You can ask us to delete information we are not required by law to keep. Contact us using the details below.

Changes to this policy

We may update this policy. The date at the top shows when it last changed; important changes will also be announced in the portal.

Contact us

Questions about your information? Contact KhassNet using the phone, WhatsApp or email shown at the bottom of this page, or through the contact page.