Shaheen Estates is a real estate and investment consultancy based in Sargodha, Punjab, Pakistan. This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and how you can have it corrected or deleted.
It applies to our website at www.shaheenestates.com, our Facebook and Instagram pages and lead forms, our WhatsApp Business number, and to information we record when you visit or telephone our office.
1. Who we are
Shaheen Estates ("we", "us", "our") brokers residential and commercial plots, built property, housing-scheme files, farmhouse plots and agricultural land, and provides investment consultancy on the same. We are the data controller for the information described in this policy.
Office: [ office address, Sargodha ]
Phone: [ phone number ] · WhatsApp: [ WhatsApp number ]
Email: [ email address ]
2. What we collect
We collect only what we need in order to give you a considered recommendation and, where you go ahead, to complete a transaction properly.
| Category | What it includes |
|---|---|
| Contact details | Name, phone number, WhatsApp number, email address, city or country of residence |
| Requirement details | Budget or price range, purpose (own use, investment, construction), plot size, preferred areas or societies, timeline, whether you need an instalment plan |
| Enquiry record | Notes of what you asked, what we recommended, the risks we disclosed, properties shown, and follow-up dates |
| Transaction records (only if you proceed) |
CNIC or passport number and copy, next of kin or nominee details, payment and receipt records, token and transfer documents, society file and mutation paperwork, bank details where a payment is made by transfer |
| Communication records | WhatsApp, email and website-form messages; call notes. We do not record telephone calls. |
| Website & ad data | IP address, browser and device type, pages viewed, referring source, and identifiers set by advertising and analytics tools described in sections 5 and 6 |
We do not ask for, and you should never send us, your bank account password, ATM PIN, one-time passcode (OTP), or any card CVV. Nobody from Shaheen Estates will ever request these.
3. How we collect it
- Directly from you — in our office, on a phone call, on WhatsApp, or at a site visit.
- Website forms — enquiry and callback forms on www.shaheenestates.com.
- Facebook and Instagram lead forms — when you submit an Instant Form attached to one of our ads, Meta passes us the fields you filled in.
- Referrals — where a family member or existing client passes on your number so that we can contact you. If you would rather we did not, tell us and we will delete the record.
- Automatically — through cookies and advertising tools when you use our website (section 6).
4. Why we use it
- To understand your budget, purpose and timeline, and to shortlist properties that actually fit.
- To verify a property on your behalf — title, society approval status, development stage and last recorded transfer rate — and to put that verification in writing.
- To prepare a written recommendation, including the risks and the downside.
- To complete a transaction: token receipt, payment records, transfer, mutation and registry coordination.
- To stay in touch after the sale — possession updates, construction guidance, rental and resale support.
- To answer your messages and to keep an accurate record of what we advised and when.
- To meet our legal, tax and record-keeping obligations, and to comply with anti-money-laundering and property-transfer requirements where they apply.
- To send you property updates and market information — only where you have asked for them. You can stop these at any time by replying "STOP" on WhatsApp or emailing us.
We do not sell your personal information to any person, dealer, developer or marketing list — and we never have.
5. Facebook, Instagram & WhatsApp
We advertise on Meta platforms and we take enquiries through them, so this section explains that flow in plain terms.
Lead forms (Instant Forms)
When you submit one of our lead forms on Facebook or Instagram, Meta collects the fields shown on the form — typically your name, phone number, email address and your requirement — and makes them available to us. From that point the information sits in our own records and is handled under this policy. Meta's own handling of it is governed by the Meta Privacy Policy.
Meta Pixel and Conversions API
Our website uses the Meta Pixel, and we may send equivalent events to Meta from our own server through the Conversions API. These tell us that an enquiry came from a particular ad and help Meta show our ads to people more likely to find them relevant. Where personal information is included in a server event, it is hashed before it leaves our systems — Meta receives a scrambled value, not your plain phone number or email address.
Custom and Lookalike Audiences
We may upload a hashed list of client contacts to Meta to show ads to existing clients, to exclude them from campaigns aimed at new clients, or to build a "lookalike" audience of similar people. Meta cannot read the underlying contact details from a hashed list.
Our WhatsApp Business number is where most conversations happen. Messages you send there are delivered through WhatsApp and are subject to WhatsApp's own terms; we keep the conversation as part of your enquiry record.
Your control on Meta
You can see why you were shown an ad, and limit ad personalisation, in your Facebook or Instagram Settings → Ads → Ad preferences. You can also opt out of our audiences by asking us to remove you — see section 11.
6. Cookies & website analytics
Our website uses a small number of cookies and similar technologies:
- Essential — needed for the site to load and for forms to work.
- Analytics — aggregate statistics on which pages and listings are viewed, so we know what is useful.
- Advertising — the Meta Pixel and any similar tools described in section 5.
You can block or delete cookies in your browser settings. Blocking essential cookies may stop enquiry forms from working.
7. Who we share it with
We share personal information only where it is necessary, and only with:
- The other side of a transaction — a seller, buyer or their representative — and only once you have asked us to proceed, and only what the transfer requires.
- Housing societies and developers — for file transfer, NOC and possession formalities on a property you have chosen.
- Government and revenue authorities — the registry, revenue office, patwari record and tax authorities, where a transaction or the law requires it.
- Banks and payment providers — where a payment is routed through them.
- Professional advisers — lawyers, surveyors or accountants engaged on your matter.
- Service providers who work for us — website hosting, our client-record system, email and messaging providers, and advertising platforms as described in section 5. They may process the information only on our instructions.
We do not publish a client's name, CNIC, file documents or personal details on social media or in any advertisement. A testimonial is published only with your explicit permission, and only in the form you approve.
8. How long we keep it
| Record | Kept for |
|---|---|
| Enquiry that did not proceed | Up to 3 years from your last contact with us, then deleted |
| Active client file | For as long as we act for you, and then as below |
| Completed transaction records | At least 10 years, because property, tax and title disputes can arise long after transfer |
| Marketing consent records | Until you withdraw consent, plus 1 year to evidence the withdrawal |
| Website analytics | Up to 26 months in aggregate form |
9. How we protect it
- Client records are held in access-controlled systems; only the consultants who need a file can open it.
- Documents containing a CNIC or payment detail are stored securely and are not circulated on open groups.
- Every payment we receive is issued a numbered, branded receipt — never a loose handwritten slip.
- Data sent to advertising platforms is hashed before transmission (section 5).
- Staff are instructed never to publish client documents, and never to request an OTP, PIN or password.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will tell you and explain what we are doing about it.
10. Your rights
At any time you may ask us to:
- Show you what personal information we hold about you.
- Correct anything that is wrong or out of date.
- Delete your information — see section 11.
- Stop marketing messages, while keeping your active file open.
- Remove you from our Meta Custom Audiences.
- Provide a copy of the records relating to your transaction.
We will not charge you for any of this, and we will not treat you differently for asking. We respond within 30 days. To confirm identity we may ask you to send the request from the phone number or email address already on your file.
11. Deleting your data
How to request deletion. Send a message from the phone number or email address on your file to [ WhatsApp number ] or [ email address ] with the words "Delete my data" and your full name.
We will confirm receipt, delete what we are able to delete, and tell you in writing within 30 days what was deleted and what had to be retained.
Deletion covers your contact details, requirement notes, enquiry history, marketing consent and any Custom Audience entry.
We may be unable to delete records we are legally required to keep — principally completed transaction, payment, tax and title records (section 8). Where that applies we will tell you which records were retained and why, and we will not use them for marketing.
If you submitted a lead form on Facebook or Instagram and want the copy held by Meta removed as well, you will need to make that request to Meta directly through your Facebook or Instagram account settings; we can only delete our own copy.
12. Overseas clients
If you are a Pakistani living abroad, your information will be processed in Pakistan and may be handled by service providers whose servers are outside Pakistan — for example our hosting and messaging providers. We take the same care with it wherever it is held, and we apply this policy to it in full.
Where we carry out a video walkthrough or site verification for you, the recording is kept as part of your file and is not published without your permission.
13. Children
Our services are intended for adults. We do not knowingly collect information about anyone under 18 except where a minor is named in a transaction as an owner, nominee or heir, and only as the documentation requires. If you believe we hold a child's information that we should not, contact us and we will remove it.
14. Governing law
This policy is governed by the laws of the Islamic Republic of Pakistan, including the Prevention of Electronic Crimes Act, 2016, and any data protection legislation as and when it is enacted and comes into force. The courts at Sargodha, Punjab, will have jurisdiction over any dispute arising from it.
15. Changes to this policy
We review this policy every six months, and whenever our services or the platforms we use change materially. The current version is always published at this address, with the effective date shown at the top. If a change materially affects how we use information we already hold, we will tell existing clients before it takes effect.
16. Contact us
Shaheen Estates — Real Estate & Investment Consultants
[ office address, Sargodha ]
Phone [ phone number ]
WhatsApp [ WhatsApp number ]
Email [ email address ]
If you are not satisfied with how we have handled a privacy request, write to us again marking it "For the attention of management". We take these seriously — our name has to survive in a city where everyone knows everyone.