Privacy Policy

Last updated:

VIP-Sense processes biometric data (face templates). We take this seriously and design for privacy first. This policy explains what we collect, why, and your choices. It is provided for transparency and should be reviewed alongside your own legal advice.

1. Who we are

VIP-Sense is a customer-recognition service operated by AYYAN GROUP OF COMPANIES (AGOC) ("we", "us"). Retail businesses ("Brands") use VIP-Sense in their stores to recognise returning customers who have chosen to join the Brand's VIP programme.

2. Two kinds of users

Brands & their staff — the account holders who use the VIP-Sense dashboard.
Customers — shoppers who consent to be recognised as part of a Brand's VIP programme.

For customer data, the Brand is the data controller and VIP-Sense acts as their processor.

3. What we collect

From Brands: account details (name, email, phone, business name), and usage information needed to run the service.
From Customers (only with consent): a mathematical face template (an encrypted numeric representation, not a stored photo unless a small thumbnail is enabled), and purchase/visit records linked to their VIP profile.

4. Consent — the core principle

A customer is only enrolled after they agree to join the Brand's VIP programme (for example, at the counter during a purchase). We do not silently scan or identify members of the public. Non-consenting individuals are not enrolled or identified.

5. How data is used

To recognise consenting VIP customers when they visit and show relevant details to store staff.
To maintain the Brand's customer history, tiers and analytics.
To provide, secure, support and improve the service.

We do not sell personal data, and we do not use it for advertising.

6. How data is protected

Face recognition runs on-site at the store; live video is not streamed to the cloud.
Data is encrypted in transit and at rest, and each Brand's data is isolated from every other Brand.
Access is controlled by role, so staff only see what they are permitted to.
We apply data minimisation — storing templates rather than images wherever possible.

7. Data retention

Customer data is retained while the customer remains an active VIP of the Brand. Brands can set retention limits, and inactive records can be automatically purged. On request, a customer's data — including their face template — is permanently deleted.

8. Your rights

Customers may ask the Brand (or us) to access, correct, or delete their data, or to withdraw consent and be removed from the VIP programme at any time. Requests can be sent to privacy@vipsense.pk and will be forwarded to the relevant Brand where needed.

9. Sharing & sub-processors

We use trusted infrastructure providers (for database, storage and hosting) strictly to operate the service, under confidentiality and data-protection obligations. We do not share customer data with third parties for their own purposes.

10. Changes to this policy

We may update this policy as the product or law evolves. Material changes will be communicated to Brands.

11. Contact

Questions about privacy? Email privacy@vipsense.pk or use our contact form.