Privacy Policy

Last updated: October 27, 2026

1. Introduction

This Privacy Policy explains how Baselyne collects, uses, shares and protects personal information when you visit baselyne.io, contact us, start a free trial, apply for a job, subscribe to our newsletter, buy a plan or service, or use the Baselyne e-commerce platform to run an online store.

Baselyne is a hosted e-commerce store builder and a brand of Cybeinc, a digital-solutions company based in Karachi, Pakistan. In this policy, “Baselyne”, “we”, “us” and “our” mean Cybeinc operating the Baselyne brand and platform.

We have written this policy in plain English. If something is unclear, please contact us and we will be happy to explain. This policy should be read together with our Terms and Conditions and our Cookie Policy.

2. Definitions

• Personal information (also called personal data) means any information that identifies, or can reasonably be linked to, an individual, such as a name, email address, phone number, IP address or order history.
• Processing means anything done with personal information, including collecting, storing, using, sharing and deleting it.
• Controller means the person or organisation that decides why and how personal information is processed.
• Processor (or service provider) means a person or organisation that processes personal information on behalf of a controller and according to its instructions.
• Merchant means a business or individual that subscribes to a Baselyne plan and runs an online store on our platform.
• End customer means a person who visits or buys from a merchant’s store built on Baselyne.
• Website means baselyne.io and its pages, forms and shop.
• Platform or Services means the Baselyne store builder, dashboards, themes, POS system, mobile apps, hosting and related services.

3. Who Is Responsible for Your Information

3.1 When Baselyne is the controller

We are the controller for personal information we collect about website visitors, people who contact us, trial users, job applicants, newsletter subscribers and merchants (including the people who manage merchant accounts). We decide why and how this information is used.

3.2 When Baselyne is a processor for merchants

When a merchant uses Baselyne to run a store, the merchant collects information about its own end customers, such as names, delivery addresses, phone numbers, order history and customer profiles. For that information, the merchant is the controller and Baselyne acts as a processor (or “service provider”). We host and process that data only to provide the platform to the merchant, under the merchant’s instructions and our Terms and Conditions.

If you are an end customer of a store that runs on Baselyne, the merchant’s own privacy policy applies to your data. Please direct questions and requests about your data to that merchant. If you contact us instead, we will refer your request to the merchant where we can identify it, and we will support the merchant in responding.

4. Information We Collect

4.1 Information you give us through our forms

• Contact form: your name, email address, phone number, company name (if provided) and the content of your message.
• Call-back request form: your name, phone number, preferred time to be called and the topic you want to discuss.
• Free-trial sign-up (Get Started): your name, email address, phone number, business name, store name, the type of products you plan to sell and, where requested, your city or country.
• Careers applications (Careers): your name, contact details, the role you are applying for, your CV or résumé file, cover letter, links to portfolios or profiles, and any other information you choose to include.
• Newsletter sign-up: your email address and, if provided, your name.
• Support and chat: information you share when you contact our support team by phone, email, WhatsApp or live chat, including recordings or transcripts where we tell you that a conversation is recorded.

4.2 Information collected at checkout

When you buy a plan or a one-time service (for example the Starter, Business or Enterprise E-Store Plan, Custom Theme Design, Mobile App for iOS & Android, or Baselyne POS Setup) through our WooCommerce checkout, we collect your billing name, company name, billing address, email address, phone number, the products purchased, order notes, and transaction details such as the amount, date, order number and payment status.

Card payments are handled by third-party payment gateways. We do not receive or store your full card number or security code. We may receive limited details from the gateway, such as the card type, the last four digits, the expiry date and a payment token, so that we can identify the payment, manage renewals and handle refunds.

4.3 Account and platform information

If you create a Baselyne account or store, we collect your login details (passwords are stored in hashed form), account settings, store configuration, theme choices, product listings, uploaded files and images, domain and email-forwarding settings, and records of how you use the dashboard (for example log-ins and changes to settings).

4.4 Information collected automatically

• Technical data: IP address, browser type and version, device type, operating system, language settings, referring page and the pages you view, with dates and times.
• Security data: our security tools (including Wordfence) record information such as IP addresses, failed log-in attempts and suspicious requests to protect the website from attacks.
• Cookies and similar technologies: see Section 8 and our Cookie Policy.

4.5 Information from third parties

We may receive information from payment gateways (payment confirmations and fraud checks), analytics and advertising partners (aggregated reports, only where you have consented to those cookies), and people who refer you to us. If a recruiter or referee contacts us about your job application, we may receive information from them as well.

5. How We Use Your Information

We use personal information to:

1. respond to enquiries, call-back requests and support requests;
2. set up and manage free trials, accounts and stores;
3. process orders, payments, renewals, invoices and refunds;
4. deliver one-time services such as custom themes, mobile apps and POS setup;
5. host, operate, maintain and improve the website and the platform;
6. send service messages, such as trial reminders, billing notices, security alerts and changes to our terms;
7. send our newsletter and marketing messages where you have agreed to receive them or where the law otherwise allows;
8. assess job applications and communicate with candidates;
9. understand how visitors use the website (only with your consent for analytics cookies);
10. measure and improve our advertising (only with your consent for marketing cookies);
11. detect, prevent and investigate fraud, abuse, security incidents and breaches of our Acceptable Use Policy;
12. comply with legal, tax and accounting obligations and respond to lawful requests from authorities;
13. establish, exercise or defend legal claims.

We do not use automated decision-making that produces legal or similarly significant effects about you without human involvement.

6. Legal Bases for Processing (EU/UK Visitors)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

• Contract: to provide a trial, account, plan or service you request, and to take steps at your request before entering into a contract.
• Legitimate interests: to run, secure and improve our website and services, respond to enquiries, prevent fraud and keep business records, where these interests are not overridden by your rights.
• Consent: for analytics and marketing cookies, the newsletter where consent is required, and keeping your CV for future vacancies. You can withdraw consent at any time.
• Legal obligation: to keep tax and accounting records and respond to lawful requests.

7. How We Share Your Information

We do not sell your personal information. We share it only as described below.

7.1 Service providers

We use trusted providers who process data for us under contractual confidentiality and security obligations, including:

• hosting, server, content delivery and SSL certificate providers;
• payment gateways and banks that process card, bank transfer and other payments;
• email delivery, newsletter and customer-support tools;
• website security and backup tools (such as Wordfence);
• the consent-management platform CookieYes, which records your cookie choices;
• analytics and advertising providers (Google Analytics and Meta), only where you have consented;
• professional advisers such as accountants, auditors and lawyers.

7.2 Within our group

We may share information with Cybeinc team members who help deliver Baselyne services, such as designers and developers working on a custom theme or mobile app.

7.3 Legal and safety reasons

We may disclose information where we believe in good faith that it is required by law, court order or a lawful request from a government or law-enforcement authority (including under the Prevention of Electronic Crimes Act, 2016), or where it is necessary to protect the rights, property or safety of Baselyne, our users or others.

7.4 Business transfers

If Baselyne or Cybeinc is involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction. We will take steps to ensure it remains protected and will tell you if a new privacy policy applies.

7.5 With your consent

We may share information for other purposes if you ask us to or agree to it.

8. Cookies and Similar Technologies

Our website uses cookies. Some are strictly necessary for the site to work, including cookies set by WordPress (for log-ins and settings), WooCommerce (for the cart and checkout), CookieYes (to remember your consent choices) and Wordfence (for security). These are set without consent because the website cannot work properly or securely without them.

Analytics cookies (Google Analytics) and marketing cookies (Meta Pixel) are only set after you give consent through our cookie banner. You can change your choice at any time using the “Change cookie preferences” link on our Cookie Policy page. Our Cookie Policy lists the cookies we use, what they do and how long they last.

9. Merchant Stores and End-Customer Data

9.1 Our role

Merchant stores built on Baselyne may collect end-customer data through checkout, customer accounts, the POS system, mobile apps and customer management features. Baselyne processes that data only to provide the platform: storing it, displaying it in the merchant’s dashboard, enabling payments and shipping integrations, and providing support and backups.

9.2 What we commit to as a processor

• We process end-customer data only on the merchant’s documented instructions and to provide the Services.
• We do not use end-customer data for our own marketing and do not sell it.
• We ensure our staff and sub-processors are bound by confidentiality obligations.
• We apply appropriate technical and organisational security measures.
• We help merchants respond to data requests from their customers where reasonably possible.
• We notify the affected merchant without undue delay if we become aware of a personal data breach affecting their store.
• We delete or return store data at the end of the service, as described in Section 10.

9.3 What merchants are responsible for

Merchants are responsible for having a lawful basis to collect their customers’ data, publishing their own privacy and cookie notices, obtaining any required consent (for example before activating Facebook Pixel or Google Analytics on their store), and responding to their customers’ requests. Merchants that need a data processing agreement for GDPR or similar purposes can request one at [email protected].

10. Data Retention

We keep personal information only for as long as we need it for the purposes described in this policy, unless the law requires or permits a longer period. As a general guide:

• Contact and call-back enquiries: up to 24 months after our last communication with you.
• Free-trial data: for the trial period and up to 90 days after it ends if you do not subscribe, so that you can return to your store; then deleted or anonymised.
• Account and store data: for as long as your subscription is active. After cancellation or termination, we keep store data for 30 days so you can export it, then delete it from live systems within a further 60 days. Backup copies are overwritten in the normal backup cycle.
• Orders, invoices and payment records: for as long as tax, accounting and other applicable laws require.
• Job applications and CVs: up to 12 months after the recruitment process closes, unless you agree that we may keep your CV longer for future roles. Successful candidates’ data becomes part of their employment records.
• Newsletter: until you unsubscribe; we then keep your email address on a suppression list so we do not contact you again.
• Security logs: generally up to 12 months, or longer if needed to investigate an incident.
• Cookie consent records: up to 12 months, or as set out in our Cookie Policy.

11. How We Protect Your Information

We use reasonable technical and organisational measures to protect personal information, including:

• SSL/TLS encryption for the website and for stores hosted on Baselyne;
• a web application firewall, malware scanning and log-in protection (including Wordfence);
• hashed passwords and role-based access controls, so staff only access data they need;
• regular software updates, backups and monitoring;
• payment processing through third-party gateways, so card data is not stored on our servers;
• confidentiality obligations for staff and contractors.

No system is completely secure. If we become aware of a breach that is likely to affect your rights, we will notify you and any relevant authority where the law requires it. You can help by using a strong, unique password and keeping your log-in details private.

12. International Data Transfers

Baselyne is operated from Pakistan. Our hosting, email, analytics, payment and other service providers may store or process information in other countries, including countries that may not have data protection laws equivalent to those in your country. When we transfer personal information from the EEA or UK to a country without an adequacy decision, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum, where required. You can contact us for more information about these safeguards.

13. Children’s Privacy

Baselyne is a business service. Our website and Services are not directed at children, and you must be at least 18 years old (or the age of majority where you live) to create an account or buy from us. We do not knowingly collect personal information from children under 13, or under 16 in the EEA and UK. If you believe a child has given us personal information, please contact us and we will delete it. Merchants whose stores may attract younger customers are responsible for complying with laws that protect children.

14. Your Privacy Rights

14.1 Pakistan

Pakistan does not yet have a single, comprehensive personal data protection statute in force. The right to privacy is protected by Article 14 of the Constitution of Pakistan, and the Prevention of Electronic Crimes Act, 2016 (as amended) creates offences relating to unauthorised access to information systems and data and the misuse of identity information. A Personal Data Protection Bill has been drafted by the Ministry of Information Technology and Telecommunication but, as of the date of this policy, it has not been enacted. We will update this policy if it becomes law.

Regardless of where you are, we will let you ask for access to, correction of, or deletion of your personal information, and to opt out of marketing, subject to any legal limits.

14.2 European Economic Area and United Kingdom (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to:

• access your personal information and receive a copy;
• rectify inaccurate or incomplete information;
• erase your information in certain circumstances;
• restrict our processing in certain circumstances;
• data portability, meaning to receive information you provided in a structured, commonly used, machine-readable format;
• object to processing based on legitimate interests, and to object at any time to direct marketing;
• withdraw consent at any time, without affecting processing that took place before withdrawal;
• lodge a complaint with your local data protection authority (for example the Information Commissioner’s Office in the UK). We would appreciate the chance to address your concerns first.

14.3 California (CCPA/CPRA)

If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our processing, you have the right to:

• know the categories and specific pieces of personal information we collect, the sources, the purposes and the categories of third parties we disclose it to;
• delete personal information we collected from you, subject to exceptions;
• correct inaccurate personal information;
• opt out of the sale or sharing of personal information;
• limit the use of sensitive personal information (we do not use sensitive personal information for purposes that would require this right);
• not be discriminated against for exercising your rights.

In the past 12 months we have collected the categories of information described in Section 4: identifiers (such as name, email, phone and IP address), commercial information (orders and purchases), internet or network activity, professional or employment information (from job applicants) and inferences drawn from analytics. We disclose these for the business purposes described in Section 7.

We do not sell personal information for money. If you accept marketing cookies, the Meta Pixel may be considered “sharing” for cross-context behavioural advertising under California law. You can opt out at any time by rejecting marketing cookies through “Change cookie preferences” on our Cookie Policy page. We also treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out request where the law requires it. We do not knowingly sell or share the personal information of consumers under 16.

14.4 Merchants’ end customers

If you are an end customer of a merchant store, please send your request to the merchant, who is the controller of your information. See Section 3.2.

15. How to Exercise Your Rights

1. Email [email protected] with the subject line “Privacy request”, or write to us at the address in Section 18.
2. Tell us which right you want to exercise and give enough detail for us to find your information (for example the email address you used).
3. We may ask you to verify your identity before acting on a request, to protect your information from people who are not entitled to it.
4. You may use an authorised agent where the law allows. We may ask for proof that the agent is authorised.
5. We aim to respond within 30 days. Where the law allows and the request is complex, we may extend this period and will tell you why.

We do not charge a fee for reasonable requests. We may refuse requests that are manifestly unfounded or excessive, or where the law allows us to keep the information. If we cannot meet your request, we will explain why.

To stop receiving our newsletter, use the “unsubscribe” link in any email. You will still receive essential service messages about your account or orders.

16. Third-Party Links and Services

Our website, blog and merchant stores may link to third-party websites, apps and services, such as social networks, payment gateways and shipping partners. Those third parties have their own privacy policies, and we are not responsible for their practices. Please review their policies before giving them your information.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology or the law. We will change the “Last updated” date at the top of this page. If the changes are significant, we will give you notice, for example by email or a notice in your dashboard, before they take effect.

18. Contact Us

If you have questions, concerns or requests about this policy or our handling of personal information, please contact:

Baselyne (a brand of Cybeinc)
Suit No 301, Plot 17/C, Main Khayaban-e-Shahbaz, Phase 6, DHA, Karachi, Pakistan
Email: [email protected]
Phone and WhatsApp: +92-321-8291815

You can also reach us through our Contact Us page.

Questions about this policy? Contact us · hello@baselyne.io