Privacy
What we collect, where it is stored, and what you can ask us to do with it. Your business owns its records, and we never sell data.
Last updated:
doublesixOS is operated by WAHAB SPORTS SMC PRIVATE LIMITED, a company registered with the Securities and Exchange Commission of Pakistan (SECP), with its office in Lahore, Punjab, Pakistan. This policy explains what we collect, why we hold it, where it lives, and what you can ask us to do with it.
Two kinds of people appear in this policy. There is you, the business that subscribes to doublesixOS. And there are your customers, whose records you enter into the platform: your patients, clients, students, members, and guests. You decide what to record about them; we hold it for you.
We collect only what is needed to run the service for you. In short: your name, your business name, your phone number, your email address, and the business records you enter into the platform.
We use your data to provide the platform to you and for nothing else.
We do not use your customer records to build advertising profiles, and we do not use them to train models for anyone else's benefit.
Your data is held in an encrypted managed PostgreSQL database hosted on managed cloud infrastructure in the Asia Pacific region, with files and uploads held in the same managed cloud storage in that region. We chose a region close to Pakistan on purpose: it keeps the platform fast on local connections.
Data is encrypted in transit with TLS, and encrypted at rest by the hosting provider. The database is backed up daily, and the backups are encrypted and retained on a rolling basis so recent data can be restored after an incident.
Each business's workspace is isolated at the database level, so one business on doublesixOS cannot read another business's records. Inside your own workspace, what each staff member can see is controlled by the permissions you set.
Because the hosting region is outside Pakistan, your data is stored and processed outside Pakistan. We take reasonable steps to make sure it is protected to the standard set out in this policy wherever it is held, and our contracts with our providers require the same.
The records you enter into doublesixOS remain yours. We hold them on your behalf. You can export them, correct them, or ask us to delete them, and we will not withhold your data to pressure you into paying or staying.
If your subscription lapses, your workspace is locked but your data is kept, so you can pick up where you left off if you return.
The database is backed up daily by the hosting provider on the same managed cloud infrastructure in the Asia Pacific region, and these daily encrypted backups are retained on a rolling basis so that recent data can be restored after an incident. Backups are encrypted and are used only to restore the service.
Because backups are point in time copies, a record you delete may persist in a backup for a short period before it ages out of the retention window. It is not available to us or to you in the live product once deleted.
We never sell your data. We do not sell, rent, or trade your data or your customers' data to anyone, and we never will. We do not share it with advertisers or data brokers.
We share data only with the service providers needed to run the platform, only to the extent each one needs it, and only for that purpose.
We may also disclose data where the law of Pakistan requires it, where a court or regulator lawfully orders it, or to protect the safety of a person.
We keep your data for as long as your account is open, and for a reasonable period afterwards so that you can reactivate. We keep billing records for as long as the tax and company law of Pakistan requires.
If you ask us to delete your account, we delete your workspace and its records, other than what we are required by law to retain, and other than copies that remain in backups until they age out.
Access to the platform requires a password, and every request is checked against your permissions before any record is returned. Traffic is encrypted with TLS. Our staff do not browse tenant data; access to production systems is restricted and used only to fix a fault or answer a support request you have raised.
No system is perfectly secure. If a breach affects your data, we will tell you promptly and tell you what we are doing about it.
You have the right to ask us for a copy of your data, to have it corrected, and to have it deleted.
Write from the email address on your account so we know it is you, tell us what you want, and we will act on it within 30 days. There is no charge for an export or a deletion. The only things we keep after a deletion are records the law requires us to retain, and copies inside backups until they age out of the retention window.
If one of your customers asks you to delete their record, you can delete it yourself inside the platform. If you need help, ask us and we will help you do it.
We use a small number of cookies and similar browser storage, and only for these reasons.
We do not use advertising cookies, and we do not allow third parties to track you across other websites through us.
We will update this policy as the product and the law change, and we will tell you when we make a material change.
Questions, concerns, an export request or a deletion request: support@doublesixos.com, or WhatsApp +92 312 7566661. WAHAB SPORTS SMC PRIVATE LIMITED, Lahore, Punjab, Pakistan. See our contact page for full details.
نوٹ: یہ اردو خلاصہ صرف آسان فہمی کے لیے ہے۔ قانونی طور پر اوپر دیا گیا انگریزی متن ہی مستند اور نافذالعمل ہے۔
Questions about your data?
Contact us at support@doublesixos.com or via WhatsApp at +92 312 7566661.