Privacy Policy | Car Business Pro

Effective 20 October 2026 · Last updated 7 November 2026

This Privacy Policy explains how Peham (Private) Limited (“Peham,” “we,” “us,” “our”), the operator of Car Business Pro (the “Service”), collects, uses, stores, shares, and protects information in connection with carbusinesspro.com, my.carbusinesspro.com and the Car Business Pro software. Please read it together with our Terms & Conditions.

1. Scope

This Policy covers two categories of data:

Account/Business Data: information about you or your business as our direct customer (the “Subscriber”), collected when you register, subscribe, or contact support.
Customer Data: the vehicle, purchase, cost, sales, export, invoice, payment, document and customer records that you and your Authorized Users input into the Service while using it to run your business.

For Customer Data, you (the Subscriber) are the data controller, and Peham acts as a data processor, processing that data only as necessary to provide the Service and according to your instructions and configuration. You are responsible for having the necessary rights and legal basis to input personal data of your own customers, suppliers, employees or other individuals into the Service.

2. Information We Collect

2.1 Information you provide directly

Account registration details: name, business name, email, phone number, country and business address.
Billing and subscription details, which are collected and processed by Paddle as our Merchant of Record (see Section 6). We do not receive or store your full card details.
Support communications, feedback, and survey responses.

2.2 Information collected through use of the Service (Customer Data)

Vehicle records such as make, model, chassis number, purchase source, auction or invoice details, and status.
Costs and financial records such as base price, parts, freight, recycle fees, taxes, sales prices, payments and profit calculations.
Documents and files you upload, such as invoices, export certificates or other vehicle papers.
Contact details of your own customers, buyers and suppliers that you choose to store, and details of any Portal Users you invite.
Usage and audit logs: login timestamps, user actions, device and browser type, IP address, and feature usage.

2.3 Automatically collected technical data

Cookies and similar technologies (see Section 9).
Diagnostic and error logs for reliability and security purposes.
When you submit a form on carbusinesspro.com (book a demo, talk to us, become a partner, contact), we record your IP address and an approximate location (city, region and country) derived from it, together with the website and page you submitted the form from. We use this to respond to your enquiry, understand where requests come from, and prevent spam and abuse.

2.4 Information we do not intentionally collect

We do not knowingly collect sensitive personal data such as health or biometric data. If a Subscriber chooses to store such data in its own records, the Subscriber is solely responsible for the lawfulness of doing so. We do not knowingly collect data from children under 18; the Service is intended for business use by adults.

3. How We Use Information

to provide, operate, and maintain the Service (inventory, cost and profit tracking, tax calculation, reports, dashboards and the customer portal);
to manage your subscription, with payments processed by Paddle;
to provide customer support, onboarding, and respond to inquiries;
to send service-related communications (updates, maintenance notices, security alerts, billing notices) and, where you have opted in, marketing communications;
to monitor, secure, and improve the Service, including detecting fraud, abuse, or violations of our Terms & Conditions; and
to comply with our own legal obligations and respond to valid legal process.

We do not sell your Customer Data, share it with data brokers, or use it to train third-party AI models or for purposes unrelated to providing the Service, without your separate, explicit consent.

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis, we rely on: performance of a contract (providing the Service you subscribed to); our legitimate interests (security, fraud prevention, and service improvement); your consent (marketing communications and optional integrations); and compliance with legal obligations.

5. Your Responsibility for Data You Input

5.1 You control what you enter. Car Business Pro is a tool. Whether the data you input is accurate, complete, lawfully obtained, and lawfully processed (including any obligation to inform or obtain consent from your own customers or staff) is your responsibility as the Subscriber.

5.2 We do not verify your data. Peham does not verify that vehicle values, costs, tax rates, customer records or other figures you enter reflect your actual business activity. See Sections 6 and 7 of the Terms & Conditions.

5.3 If you collect personal data of your own customers through the Service or share it with Portal Users, you are the data controller for that data and are responsible for your own privacy notices and compliance with applicable data protection law.

We do not sell your personal information. We share information only as follows:

6.1 Service providers / sub-processors

Hosting infrastructure: our servers are hosted with Hetzner and may be located outside your country (see Section 8);
Paddle.com Market Limited, our Merchant of Record, for checkout, payment processing, invoicing, tax handling and refunds. Paddle processes your billing information under its own privacy policy;
Email and communication providers for transactional notifications;
CDN and security providers (for example, Cloudflare) for performance and protection against attacks.
Cloudflare, which hosts and delivers carbusinesspro.com and provides the visitor IP and approximate location described above;
Resend, which delivers the email notifications we receive when you submit a form on our website.

These providers may access data only as necessary to perform their function and are bound by confidentiality and data-processing obligations.

6.2 Portal Users you invite

If you enable the customer portal, the invoices, payments and transaction history you choose to share are visible to the Portal Users you invite.

6.3 Business transfers

If Peham is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

6.4 Legal process

We may disclose information where required to comply with a valid subpoena, court order, or legal process; to protect the rights, property, or safety of Peham, our users, or the public; or to investigate suspected violations of our Terms & Conditions. Where legally permitted, we will notify the affected Subscriber before such disclosure.

6.5 With your consent

We may share information with other third parties when you give us explicit consent to do so.

7. Data Retention

7.1 We retain Account/Business Data for as long as your account is active and for a reasonable period afterwards to meet our legal, accounting, and dispute-resolution needs (typically up to six years).

7.2 We retain Customer Data while your subscription is active, plus a 30-day period after termination to allow data export (see Terms & Conditions, Section 15.3), after which it may be permanently deleted unless a longer period is required by law or agreed with you. Residual copies in backups are overwritten in the normal backup cycle.

7.3 Our retention of your data is not a substitute for your own record-keeping obligations under tax, customs and company law.

8. Data Storage, Security, and International Transfer

8.1 The Service is hosted on cloud servers (including Hetzner infrastructure) which may be located in countries other than your own. By using the Service, you acknowledge that your data may be processed and stored in other jurisdictions for the purpose of providing the Service. Where required, we use appropriate safeguards for such transfers.

8.2 We implement technical and organizational measures designed to protect data, including encryption in transit (TLS/HTTPS), role-based access control, audit logs, firewall and reverse-proxy protections, regular backups, and security monitoring.

8.3 No system is completely secure, and we cannot guarantee absolute security of data transmitted to or stored within the Service.

8.4 If a data breach materially affects your data, we will notify you without undue delay and in accordance with applicable law.

9. Cookies and Tracking Technologies

9.1 We use cookies and similar technologies on carbusinesspro.com and within the Service for authentication and session management, remembering preferences, analytics, and, on our public website, marketing measurement.

9.2 You can control cookies through your browser settings. Disabling essential cookies may stop parts of the Service from working (for example, staying signed in).

10. Your Rights

Depending on applicable law (including the GDPR where it applies), you may have the right to:

access a copy of the personal data we hold about you;
correct inaccurate data;
request deletion of your data (subject to Section 7);
object to or restrict certain processing, including marketing;
receive your data in a portable format; and
withdraw consent where processing is based on consent, and lodge a complaint with your local data protection authority.

To exercise these rights, contact us at support@carbusinesspro.com. We may need to verify your identity and authority over the account first. If your request concerns Customer Data stored by one of our Subscribers, please contact that Subscriber directly.

11. Children’s Privacy

The Service is intended for business use by adults. We do not knowingly collect personal data from individuals under 18. If we learn we have done so, we will delete it.

12. Third-Party Links

Our website or Service may link to third-party websites or services, including Paddle’s checkout and invoice pages. We are not responsible for their privacy practices and encourage you to review their policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on carbusinesspro.com with an updated “Last updated” date and, for material changes, give notice by email or in-Service notification at least 15 days in advance.

14. Contact Us

Peham (Private) Limited

G8 Plaza, Shaheen Commercial, Phase 1

Jinnah Garden, Islamabad, Pakistan

Email: support@carbusinesspro.com

Phone / WhatsApp: available through the Contact page

Website: https://carbusinesspro.com