Dear Customer,
Thank you for using Dervi. We are committed to protecting your personal data and maintaining transparency about how we collect, use, and safeguard your information when you use our website, mobile application, and related services (collectively referred to as the “Platform”).
Your trust is extremely important to us. We aim to provide a reliable and secure hyper-local commerce experience in Dera Ghazi Khan while ensuring your personal data remains protected.
1. Who We Are
Dervi is operated by Gsm Player Pvt Ltd (“we”, “us”, “our”).
Registered Address:
Dervi, Gaddai Road, Near Gaddai Police Station, Dera Ghazi Khan, Pakistan
Email: [email protected]
Gsm Player Pvt Ltd acts as the data controller responsible for processing your personal data.
By registering, accessing, or placing orders on Dervi, you agree to this Privacy Policy.
2. Your Control Over Your Data
- You may disable cookies through browser settings.
- You may unsubscribe from marketing emails or SMS anytime.
- You may disable push notifications from your device settings.
- You may delete your account through your profile.
You may withdraw consent for marketing communications anytime by contacting [email protected].
3. Your Legal Rights
- Right to access your personal data
- Right to correct inaccurate data
- Right to withdraw consent
- Right to request account deletion
To exercise these rights, contact [email protected].
4. Categories of Personal Data We Process
Profile Data
Name, email address, password, phone number, delivery address and age.
Purpose: Account creation and service delivery.
Delivery Data
Name, delivery address, phone number and order details.
Purpose: Shared only with vendors for order fulfillment.
Order History Data
Orders, invoices, payment method and delivery records.
Purpose: Service improvement and order tracking.
Location Data
Address, city, longitude and latitude.
Purpose: Accurate delivery services.
Device & Access Data
IP address, device type, operating system and access time.
Purpose: Security and fraud prevention.
Customer Support Data
Contact details and communication history.
Purpose: Customer support assistance.
Marketing Data
Name, email, phone number and device ID.
Purpose: Sending offers and updates.
Payment Data
Payment method and encrypted transaction data. Full card details are not stored.
5. Account Management
Account Creation
Required profile data must be provided to create an account.
Login Methods
- Email and password login
- Google Sign-In
- Apple Sign-In
We only receive basic profile information from Google or Apple and never access your passwords.
Profile Management
You may update personal information anytime through your profile.
6. Order Processing & Delivery
When you place an order:
- Your order data is stored in your account.
- Order details are shared only with the selected vendor.
- Delivery is handled by vendor riders only.
Vendors and riders may use your data solely for order delivery purposes.
7. Payment Processing
Payments are securely processed using encrypted systems hosted on Amazon Web Services (AWS). Vendors do not receive payment information.
8. Fraud Prevention & Platform Security
We monitor platform activity to detect suspicious behavior and prevent fraud. Automated systems may temporarily restrict accounts if risks are detected. You may contact us for review.
9. Marketing & Notifications
We may send:
- Email newsletters
- SMS notifications
- Push notifications
You may opt out anytime. Personalized offers may be based on order history and location preferences.
10. Bonus Programs & Promotions
Dervi may offer loyalty programs, vouchers, or promotional campaigns. Participation is voluntary and consent may be withdrawn anytime.
11. Social Media
If you interact with Dervi through social media platforms, those platforms process your data according to their own privacy policies. We only receive aggregated insights.
12. Cloud Hosting & Data Security
Dervi infrastructure is hosted on Amazon Web Services (AWS). We implement industry-standard security measures to protect your data.
13. Data Retention
We retain personal data only as long as necessary. Inactive accounts are deleted after 3 years of inactivity unless legal retention obligations apply.
14. Sharing of Personal Data
We may share data with:
- Vendors for order preparation and delivery
- Technical service providers
- Legal authorities when required by law
We never sell or rent your personal data.
15. Mergers or Business Transfers
If Gsm Player Pvt Ltd undergoes merger, acquisition, or restructuring, your data may be transferred in compliance with applicable laws.
16. Data of Other Individuals
If you provide another person’s information while placing an order, you confirm that you have their permission to share such data.
17. Changes to This Policy
We may update this Privacy Policy when required. Significant changes will be communicated through the Platform.
Last Updated: February 2026