Legal Documentation

PRIVACY
POLICY

Effective: January 1, 2025
Last Updated: March 2026
Version 2.1
🇵🇰 Pakistan Jurisdiction
Company Rush Gaming (SMC-Private) Ltd
Reg. Rawalpindi, Punjab, Pakistan
Contact rushgamingstores@gmail.com
01
Introduction

Overview & Commitment

Welcome to Rush Gaming. We are Pakistan's premier gaming hardware and accessories store, operating at rushgaming.shop and through our WhatsApp ordering system. This Privacy Policy explains how Rush Gaming ("we", "us", "our") collects, uses, stores, shares, and protects your personal information when you shop with us — online, via WhatsApp, or in person.

By visiting our website, placing an order, or contacting us through any channel, you agree to the practices described in this Policy. If you do not agree, please do not use our services.

Our core commitment
We collect only what we need to fulfil your order and improve your experience. We never sell your personal data to third parties. We never share your data with advertisers or data brokers. Your privacy is a right we take seriously, not a checkbox.

This Policy applies to all users in Pakistan and internationally who access our website or services. It is written in plain language so you actually understand what we do with your data.

02
Collection

Data We Collect

We collect the following categories of personal information depending on how you interact with us:

👤
Identity Data
Full name, username or gaming tag you provide during checkout or account creation.
📍
Contact & Address
Email address, phone number (including WhatsApp), street address, city, province and postal code.
💳
Payment Data
Payment method type, last 4 digits of card (via Stripe). We never store full card numbers — Stripe does.
📦
Order Data
Items purchased, quantities, order value, shipping preferences, promo codes used and order history.
🌐
Technical Data
IP address, browser type, device type, operating system, referral URL and pages visited on our site.
💬
Communication Data
WhatsApp messages, emails, support inquiries, order notes and any feedback you send us.

Data you provide voluntarily: When you fill in our checkout form, contact us on WhatsApp, subscribe to deals, or use our Custom PC Builder, you actively provide us with your data.

Data collected automatically: When you browse our website, we automatically collect basic technical data through cookies and standard server logs to ensure the site works correctly and securely.

Data from third parties: If you pay via JazzCash, EasyPaisa, NayaPay or Stripe, those platforms may share transaction status data with us to confirm your payment. We do not receive your full financial credentials from these processors.

03
Purpose

How We Use Your Data

We use your data only for legitimate purposes directly related to our services. Here is exactly what we do and why:

  • Process & fulfil your orders — We use your name, address and contact details to pick, pack and deliver your gaming gear to you.
  • Payment processing — We pass the minimum required data to our payment partners (Stripe, JazzCash, EasyPaisa) to complete your transaction securely.
  • Order communication — We contact you via WhatsApp, SMS or email to confirm orders, share tracking info and resolve delivery issues.
  • Customer support — We use your data to respond to queries, handle returns, process warranty claims and resolve disputes.
  • Deals & promotions — Only if you opt in, we send exclusive deals, new product alerts and gaming news. You can unsubscribe at any time.
  • Site improvement — We use anonymised browsing data to understand which products are popular, fix bugs and improve performance.
  • Fraud prevention — We monitor for suspicious order patterns to protect you and our business from fraud.
  • Legal compliance — We retain certain records as required by Pakistani tax and commercial law (PERA, PTA regulations).
Legal basis for processing
We process your data on the basis of: contract fulfilment (to deliver your order), legitimate interest (to operate and improve our business), consent (for marketing communications), and legal obligation (for tax and compliance records).
04
Third Parties

Sharing Your Data

We share the minimum necessary data with only these trusted categories of third parties:

🚚
Delivery & Courier Partners
TCS, Leopards, M&P and local couriers receive your name, phone number and delivery address to complete your shipment. They are contractually bound to use this only for delivery.
💳
Payment Processors
Stripe (card payments), JazzCash, EasyPaisa and NayaPay process payments under their own privacy policies. We receive only transaction confirmation — not your full payment credentials.
📧
Email & Communication
We use EmailJS for transactional emails (order confirmations). WhatsApp communications go through Meta's infrastructure under their privacy policy.
☁️
Hosting & Infrastructure
Our website is hosted on secure servers. Standard server logs (IP, timestamps) are retained for up to 90 days for security purposes.
⚖️
Legal Authorities
We will disclose data if required by a valid court order, FBR tax audit, PTA direction or other lawful governmental request under Pakistani law.
We never sell your data
Rush Gaming does not and will never sell, rent, lease or trade your personal information to any advertiser, data broker, marketing company or third party for commercial gain. Period.
05
Tracking

Cookies & Tracking

We use a minimal set of cookies to make our website work correctly and to understand how it's being used. We do not use invasive advertising trackers.

Most of our data storage uses browser localStorage — not traditional cookies — which means your cart and wishlist are stored only on your device and are never sent to our servers unless you place an order.

You can clear localStorage at any time through your browser settings (Settings → Clear Site Data). Note that this will reset your cart and wishlist.

06
Protection

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or disclosure.

  • SSL/TLS encryption — All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols.
  • No card storage — We never store your credit or debit card numbers. Card processing is handled entirely by Stripe's PCI DSS-compliant infrastructure.
  • Limited access — Only authorised Rush Gaming staff who need your data to process orders or provide support can access customer information.
  • Secure communications — WhatsApp orders are transmitted through Meta's end-to-end encrypted messaging infrastructure.
  • Regular review — We periodically review our security practices and update them in line with industry standards.
  • Data minimisation — We collect and retain only the data strictly necessary for the purposes described in this policy.
In case of a data breach
In the unlikely event of a data breach affecting your personal information, we will notify affected customers within 72 hours of discovery via the email or phone number on file, and take immediate steps to contain the breach and prevent further harm.
07
Your Control

Your Rights

You have the following rights over your personal data. To exercise any of these, contact us at rushgamingstores@gmail.com and we will respond within 14 business days.

👁️
Right to Access
Request a copy of all personal data we hold about you. We will provide this in a readable format within 14 days.
✏️
Right to Rectification
If any of your data is inaccurate or incomplete, you can ask us to correct it at any time.
🗑️
Right to Erasure
Ask us to delete your personal data. We will do so unless we are legally required to retain it (e.g., tax records). Cart and wishlist data is stored only on your device.
🚫
Right to Restrict Processing
Ask us to pause processing your data in certain circumstances, such as while you contest its accuracy.
📤
Right to Portability
Request your data in a portable, machine-readable format so you can transfer it to another service.
📵
Right to Opt Out of Marketing
Unsubscribe from promotional messages at any time by replying STOP to any WhatsApp message, clicking unsubscribe in emails, or contacting us directly.
08
Age Policy

Children's Privacy

Rush Gaming's website and services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information without consent, please contact us immediately at rushgamingstores@gmail.com. We will promptly delete any such data upon verification.

Gaming products sold by Rush Gaming may be purchased by adults as gifts for minors. In such cases, the adult purchaser is responsible for the transaction and provides their own personal data — not the child's.

09
Financial Data

Payment Privacy

Rush Gaming uses several payment methods, each with their own privacy practices:

  • Stripe (Card Payments): Card details are processed directly by Stripe on their PCI DSS Level 1 certified servers. We receive only a payment confirmation token and the last 4 digits of your card. Stripe's privacy policy applies: stripe.com/privacy
  • JazzCash: JazzCash processes mobile wallet payments through Jazz's secure infrastructure. We receive only payment status confirmation. JazzCash's privacy policy applies.
  • EasyPaisa: Telenor Pakistan processes EasyPaisa payments. We receive payment confirmation only. EasyPaisa's privacy policy applies.
  • NayaPay: NayaPay processes digital wallet transactions. We receive payment confirmation only.
  • Cash on Delivery: No financial data is collected in advance. Our delivery rider collects cash and confirms delivery through our internal system.
  • Bank Transfer: You initiate the transfer directly through your bank. We receive your bank's payment notification and verify via screenshot you send us.
Data retention for payments
We retain order and payment confirmation records for 5 years as required by Pakistan's tax regulations (Federal Board of Revenue requirements). This includes order ID, amount, payment method and date — not your full financial credentials.
10
Messaging

WhatsApp Orders

Rush Gaming uses WhatsApp as a primary order communication channel. When you place an order via WhatsApp or our checkout triggers a WhatsApp message to you or us, the following applies:

  • WhatsApp messages are end-to-end encrypted by Meta's infrastructure — neither Rush Gaming nor Meta can read message content in transit.
  • Order details sent via WhatsApp (your name, address, items, total) are received and stored by our team for order fulfilment purposes.
  • Your WhatsApp number is used only to communicate about your order — we will not add you to group broadcasts without consent.
  • WhatsApp communications are subject to Meta's Privacy Policy in addition to this policy.
  • Order confirmations and receipts may be sent to your WhatsApp number after a successful purchase.
  • You can ask us to stop WhatsApp communications at any time by messaging "STOP" and we will honour this within 24 hours.
11
Updates

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the introduction of new services. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Post a notice on our website for at least 30 days before significant changes take effect.
  • Notify customers who have opted into communications via WhatsApp or email about material changes.
  • Maintain an archive of previous policy versions available on request.

Your continued use of Rush Gaming's website and services after policy changes constitutes acceptance of the updated terms. We encourage you to review this page periodically.

12
Get in Touch

Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Privacy Officer:

Rush Gaming Privacy Team
🏢 Rush Gaming (SMC-Private) Ltd, Rawalpindi, Punjab, Pakistan
🕐 Response time: Within 14 business days for data requests

If you are not satisfied with our response to a privacy concern, you may contact the Pakistan Telecommunication Authority (PTA) or seek legal recourse under Pakistani law. We are committed to resolving all privacy concerns fairly and transparently.