Privacy Policy

The data controller for the purposes of this Privacy Policy is:

Blood Konnector, Incorporated bloodkonnector.com Lahore, Punjab, Islamic Republic of Pakistan Email: info@bloodkonnector.com

We collect personal data in the following categories:

a) Data You Provide to Us

• Registration data: full name, email address, phone number, city/district, and password.
• Health-related data (sensitive): blood group, last donation date, any health declarations you voluntarily submit when registering as a donor.
• Profile data: profile picture (optional), donor status, availability preferences.
• Communications: messages, feedback, support requests, and other content you send to us.

b) Data Collected Automatically

• Usage data: pages visited, time spent, links clicked, and features used.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, and time zone.
• Cookies and similar technologies: as described in Section 6 below.

c) Data from Third Parties

We do not currently purchase data from third-party brokers. If we receive data about you from third parties (such as partner organizations), we will inform you promptly.

We process your personal data on the following legal grounds:

• Consent: For health-related (sensitive) data and for marketing communications, we rely on your explicit, freely given consent. You may withdraw consent at any time.
• Contract: Processing necessary to operate your account and provide the services you have requested.
• Legal obligation: Processing necessary to comply with applicable law, including PECA, court orders, or regulatory requirements.
• Legitimate interests: Processing for the purpose of improving our services, preventing fraud, and maintaining platform security, where such interests are not overridden by your rights.

We use the personal data we collect to:

• Create and manage your account.
• Match blood donors with recipients on the platform.
• Operate, maintain, and improve our websites and services.
• Administer the BK Rewards Program.
• Send you service-related notifications, including security alerts and account updates.
• Send you marketing communications, if you have opted in.
• Respond to your inquiries and provide customer support.
• Monitor and enforce compliance with our Terms of Use.
• Comply with applicable legal obligations.
• Analyze usage trends to improve our platform (using anonymized or aggregated data where possible).

We will not use your personal data for any purpose that is incompatible with the purposes listed above without informing you and, where required, obtaining your consent.

We do not sell your personal data. We may share your personal data with the following categories of third parties:

• Service providers and vendors: We use third-party service providers to assist us in operating the Websites, including SMS delivery providers, email marketing platforms, and hosting/infrastructure providers. These providers process data only on our instructions and are bound by confidentiality obligations. Categories of vendors currently engaged include text/SMS messaging vendors, email marketing vendors, and web hosting providers.
• Legal and regulatory authorities: We may disclose your information to law enforcement, government agencies, courts, or other public authorities where required by applicable law, including PECA, or in response to a valid court order.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of BK's assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• With your consent: We may share your data with third parties in other circumstances, but only with your prior explicit consent.

BK does not disclose personal data to any third party for that party's own marketing or advertising purposes without your explicit consent.

We use cookies and similar tracking technologies to operate and improve our websites. Cookies are small text files placed on your device. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the websites to function. These cannot be switched off. No consent is required for these cookies.
• Analytics cookies: Help us understand how visitors use our websites. We use this data in aggregated, anonymized form. You may opt out of analytic cookies.
• Functional cookies: Remember your preferences (e.g., language, login status) to provide a better experience.
• Marketing cookies: We do not currently use marketing or advertising cookies. If we introduce these in future, we will obtain your consent first.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the websites.

We retain your personal data for as long as your account is active and for a reasonable period thereafter, or as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Health-related data is retained only for as long as necessary to operate the platform's donor-matching functionality. Upon account deletion, health-related data will be deleted within 30 days unless retention is required by law. You may request deletion of your data at any time as described in Section 9 below.

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, loss, destruction, or alteration. These measures include:

• SSL (Secure Sockets Layer) encryption for all data transmitted between your device and our websites.
• Encrypted storage for sensitive health-related data.
• Access controls limiting who within BK can access personal data.
• Regular security reviews and monitoring. However, no data transmission over the internet or electronic storage system is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You use the websites and transmit data to us at your own risk.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Take immediate steps to contain and investigate the breach.
• Notify affected users without undue delay, and in any event within 72 hours of becoming aware of the breach, by email to the address associated with your account.
• Notify the relevant regulatory authorities as required under applicable Pakistani law, including as anticipated by the PDPB 2023 framework.
• Provide information about the nature of the breach, the data affected, the likely consequences, and the steps we are taking to address it.

Subject to applicable law, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that we correct inaccurate or incomplete personal data.
• Right to erasure: You may request that we delete your personal data, subject to our legal obligations to retain certain data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to data portability: You may request that we provide your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at info@bloodkonnector.com. We will respond to all requests within 30 days. There is no fee for exercising your rights, but we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

Our websites are not directed at, and we do not knowingly collect personal data from, persons under the age of 18. If we become aware that we have collected personal data from a person under 18 without verified parental consent, we will take immediate steps to delete that data. If you believe we have collected data from a person under 18, please contact us at info@bloodkonnector.com.

Our primary operations and servers are based in Pakistan. If any of our service providers are located outside Pakistan and process your data internationally, we ensure appropriate safeguards are in place, including contractual data protection clauses. Cross-border data transfers are conducted in compliance with applicable Pakistani law and, where applicable, the principles of the PDPB 2023. We do not currently transfer data to countries that lack adequate data protection standards without your explicit consent and appropriate safeguards.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the websites before the change becomes effective. Your continued use of the Websites after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

These websites are operated by the BK Marketing and Technology Department. For all privacy-related requests, data subject rights requests, or to report a data concern, Email: info@bloodkonnector.com Website: bloodkonnector.com Address: Lahore, Punjab, Islamic Republic of Pakistan

For claims of intellectual property infringement, please send a written notice to info@bloodkonnector.com with the subject line 'IP Infringement Notice.' Your notice must include a description of the copyrighted work or other intellectual property you claim has been infringed. (ii) a description of where the alleged infringing material is located on the Websites; (iii) your contact information; and (iv) a statement that your claim is accurate and made in good faith. For general feedback, technical support, and other communications, please also write to info@bloodkonnector.com.