Privacy Policy / رازداری کی پالیسی

1. Who this policy applies to

This Privacy Policy explains how POMA – Pakistan Outdoor Media Advertising (“POMA”, “we”, “us” or “our”) handles personal information when you visit or use oohpoma.com, create or use an account, submit information, contact POMA, use a controlled portal, interact with listings, news, campaign-planning tools, traffic or location intelligence, or otherwise use a POMA-controlled digital service.

This policy is intended to operate under the laws of Pakistan and any other law that applies to a particular processing activity. It describes POMA’s current privacy practices and does not create obligations beyond applicable law or an express contractual commitment made by POMA.

2. Information we may collect

Depending on how you use POMA, we may collect or receive:

• Account and contact information: name, email address, phone number, username, organization or business details, account role and approval status.
• Platform and workflow information: saved media, shortlists, campaign-planning activity, approvals, enquiries, support requests, submissions, uploaded files, evidence, messages and related records.
• Public or professional information: business or site information available from public, official, submitted or otherwise lawful sources where relevant to POMA’s directory, intelligence, news, verification or planning functions.
• Technical and security information: IP address, browser and device information, timestamps, login events, failed access attempts, security events, audit records, cookies, session identifiers and diagnostic logs.
• Location and contextual information: only where you submit it, enable it, or where it is reasonably derived from a media site or public geographic context for functions such as map display, traffic, weather, nearby-place context or local planning.
• Communications: information you provide through email, WhatsApp links, support channels, forms or other contact methods.
• Transaction references: quotation, booking, escrow or payment-status records where relevant. POMA may rely on payment or financial service providers for sensitive payment processing rather than storing full card or banking credentials itself.

3. How POMA uses information

POMA may use information to operate and improve the platform; create, approve, restrict or secure accounts; provide listings and planning tools; verify submissions and media information; respond to enquiries; maintain audit and evidence records; prevent fraud, abuse, spam, unauthorized access and security incidents; personalize authorized portal experiences; generate operational, traffic, audience, weather or contextual intelligence; maintain availability, campaign and service workflows; send service or account communications; enforce POMA rules and agreements; comply with legal obligations; and establish, exercise or defend legal rights.

Where analytics, modelling or planning estimates are shown, POMA may use aggregated, de-identified, statistical or contextual information that is not intended to identify an individual.

4. Account approval and controlled access

Registration does not automatically create unrestricted access to POMA. Non-administrator accounts may remain pending, restricted, suspended or revoked until POMA approves the account and the relevant feature permissions. POMA may review account activity, submissions and access logs for security, verification, support and governance purposes.

POMA may refuse, limit, suspend or terminate access where reasonably necessary to protect the platform, comply with law, investigate misuse, preserve evidence, enforce platform rules or protect legitimate business and security interests.

5. Uploads, listings and information made public

If you intentionally submit information for publication—such as a media listing, public profile, public news item, public comment or other public-facing material—you understand that published information may be visible to anyone and may be indexed, cached, copied or archived by third parties. POMA can remove or correct information under its control but cannot guarantee deletion of independent third-party copies or search-engine caches.

You are responsible for ensuring that information and files you submit are lawful, accurate, relevant and that you have the necessary rights or authority to provide them. POMA may review, moderate, reject, redact, retain or remove submitted content in accordance with platform rules, security requirements and applicable law.

6. Cookies and similar technologies

POMA may use cookies, local storage, session tokens and similar technologies for login, security, preferences, saved state, fraud prevention, performance and analytics. Strictly necessary technologies may operate where required for the service. Optional analytics or preference technologies may be used in accordance with available settings and applicable legal requirements.

You can control many cookies through your browser; however, blocking necessary cookies may prevent login, portal access, saved preferences or other platform functions from working correctly.

7. When information may be shared

POMA does not disclose personal information merely because another platform user requests it. Information may be shared only where reasonably necessary with:

• service providers acting for POMA, such as hosting, security, communications, storage, analytics, mapping, payment or technical support providers;
• professional advisers, auditors or insurers where reasonably necessary;
• competent authorities, courts, regulators or law-enforcement bodies where required or permitted by law;
• parties involved in a genuine corporate restructuring, acquisition, financing, sale of assets or similar transaction, subject to appropriate safeguards; or
• another person where you direct or clearly authorize POMA to share the information.

Service providers may process information only for the services they provide to POMA or as otherwise permitted by law and their governing agreements.

8. Data retention

POMA may retain information for as long as reasonably necessary for the purposes described in this policy, including account administration, service delivery, verification, analytics, fraud prevention, security, audit trails, dispute handling, legal compliance and the establishment or defence of claims.

Retention periods may differ by data type. Records may remain longer in backups, security logs, evidence stores or archives where deletion is not immediately practical or where retention is reasonably necessary for legal, operational or security reasons. When information is no longer required, POMA may delete, anonymize, aggregate or securely archive it as appropriate.

9. Security

POMA uses technical and organizational measures designed to reduce unauthorized access, misuse, alteration, disclosure or loss. Measures may include access controls, permission checks, account approval, authentication safeguards, secure uploads, validation, logging, backups, rate limits, monitoring and other protective controls.

No website, network, device or storage system is completely secure. POMA therefore cannot guarantee absolute security, uninterrupted availability or that every attempted attack will be prevented. Users must also protect their passwords, devices, sessions and account credentials.

10. Your requests and choices

Subject to applicable law and reasonable verification of identity, you may request access to, correction of or deletion of personal information that POMA controls, or ask questions about how it is used. POMA may limit or refuse a request where permitted or required by law, where identity cannot be verified, where another person’s rights would be affected, or where information must reasonably be retained for security, fraud prevention, contractual, audit, evidential, regulatory or legal-claim purposes.

Account communications that are essential to security, approvals, transactions or service operation may continue even if you opt out of non-essential promotional communications.

11. Third-party services and external links

POMA may link to maps, social networks, payment services, official sources, messaging services or other third-party sites. Those services operate under their own terms and privacy practices. POMA is not responsible for an independent third party’s privacy, security, availability, content or data handling once you leave a POMA-controlled service or intentionally interact with that third party.

12. International or remote processing

Some hosting, security, communications or technical service providers may process information from locations outside Pakistan. Where this occurs, POMA may use reasonable contractual, technical or organizational safeguards appropriate to the service and applicable law.

13. Children

POMA is designed primarily for professional, commercial and industry use and is not directed to children. POMA does not knowingly seek personal information from children for independent account use. If POMA learns that information has been collected in circumstances requiring parental or guardian involvement, POMA may restrict the account and take reasonable steps consistent with applicable law.

14. Changes to this policy

POMA may update this Privacy Policy as the platform, security controls, services or legal requirements change. The current version will be published on this page with an updated effective date. Material changes may also be highlighted through the website or account communications where appropriate.

15. Governing law and contact

This policy is governed by the laws of Pakistan to the extent applicable. Any dispute, request or legal issue relating to privacy will be handled subject to applicable law, POMA’s governing terms and the jurisdiction legally available for the matter.

Privacy questions or requests may be sent to rabta@oohpoma.com. Postal correspondence may be sent to: Office # 1 & 2, 1st Floor, Building # 205, Circular Road, Hub Commercial (Phase 8), Bahria Town, Rawalpindi (Punjab) Pakistan.