Privacy
Privacy Policy
Last updated: 11 July 2026
GoldShops.pk is a discovery platform. We show you designs from local jewelers and hand you off to their shop. We never take a payment, so we never hold a card number, a bank detail or a CNIC.
What we collect
Only what the site needs to work:
If you make an account
- Your name, email address, and phone number if you give one.
- Your password, stored only as a bcrypt hash. We cannot read it, and neither can anyone who steals the database.
- Whether you are a buyer or a jeweler, so we know what to show you.
If you register a shop
- Shop name, owner name, address, city, phone, WhatsApp number, business type, and anything you write in your description.
- Your exact map location, only if you choose to give it.
- Business licence and certificates you upload, so we can check the shop is real before approving it.
Almost all of this is meant to be public. That is the point: a buyer has to be able to find you and walk in.
As you use the site
- The designs you save to your favourites.
- Reviews you write. Your name is shown next to them, publicly.
- The city you pick, kept in your browser so we do not ask you again. It never leaves your device.
Where the photos go
Product and document images are stored on IPFS through Pinata. You should understand what that means before you upload anything: IPFS is a public, content-addressed network. Anyone who has the hash of a file can fetch it, and once a file has been shared on the network we cannot promise it is gone everywhere, even after we unpin it.
So: upload photos of jewelry. Do not upload anything you would not want a stranger to see.
Who else is involved
- MongoDB Atlas hosts the database.
- Pinata / IPFS stores the images, as described above.
- A market data provider gives us the live gold and silver rates. It receives no information about you.
- WhatsApp, your phone app, and Google Maps take over the moment you tap Message, Call or Directions. What happens after that is between you, the jeweler, and those companies, under their own privacy policies. We do not see or store your conversation.
What we never do
- We do not sell your data. Not to anyone, not ever.
- We do not take payments, so we hold no financial information about you at all.
- We do not pass your phone number to jewelers. When you tap WhatsApp, you are the one starting the conversation, and you decide what to say.
- We do not send you marketing you did not ask for.
Your data is yours
Email us and we will act on any of these, free, within a reasonable time:
- Tell you what we hold about you.
- Correct anything that is wrong.
- Delete your account, your favourites and your reviews. Shop listings come down with the shop.
The one thing we cannot fully undo is an image already spread across IPFS. See above.
Children
GoldShops.pk is not meant for anyone under 18. We do not knowingly create accounts for children. If you believe a child has made one, tell us and we will remove it.
Changes to this policy
If we change what we collect or who we share it with, we will change the date at the top of this page. If the change is significant, we will say so plainly rather than hide it in an update.
Ask us anything
A real person reads this address.
See also our Terms of Service.