A faith guided matrimonial platform helping parents find like minded families for their children, in accordance with Islamic values.
ShadiSunnah takes the privacy and protection of your personal data seriously. This page explains your rights under applicable data protection law, how to exercise those rights, and what to expect when you do.
ShadiSunnah operates primarily under the Personal Data Protection Act 2025 (PDPA) of Pakistan, which was enacted to protect the personal data of individuals in Pakistan and abroad where Pakistani entities are involved in processing. We also respect and comply with the data protection rights of users based in the United Kingdom, the European Union, the United Arab Emirates, and Saudi Arabia under their respective frameworks.
If you want the full picture of how we collect and use your data, please read our Privacy Policy. This page focuses specifically on your rights and how to use them.
If you are based in Pakistan: Your primary data protection framework is the Personal Data Protection Act 2025 (PDPA). The supervisory authority responsible for overseeing compliance is the National Commission for Personal Data Protection (NCPDP), established under the PDPA. The PDPA gives you meaningful rights over your personal data and places obligations on ShadiSunnah as a data controller to handle your information lawfully, fairly, and transparently.
If you are based in the United Kingdom: The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply to your data. The supervisory authority is the Information Commissioner's Office (ICO) at www.ico.org.uk.
If you are based in the European Union: The EU General Data Protection Regulation (EU GDPR) applies. You may contact the data protection authority in your member state of residence.
If you are based in the UAE: The UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021) applies. The supervisory authority is the UAE Data Office at www.uaedataoffice.gov.ae.
If you are based in Saudi Arabia: The Personal Data Protection Law (PDPL) applies. The supervisory authority is the Saudi Data and Artificial Intelligence Authority (SDAIA) at www.sdaia.gov.sa.
Regardless of where you are based, ShadiSunnah commits to handling your personal data with the same standard of care and respect.
The following rights are recognised under the Pakistan PDPA and substantially mirrored in the other frameworks listed above. We have explained each one in plain language.
You have the right to know that we are collecting your personal data, why we are collecting it, how we use it, how long we keep it, and who we share it with. This information is set out in full in our Privacy Policy. We provide it to you at the point of registration and we ask you to read and accept it before creating an account.
We will never collect your personal data without telling you. We will never use it for a purpose you were not told about at the time of collection.
You have the right to ask us for a copy of all the personal data we hold about you. Under the PDPA this is your right of access, and it operates in a similar way to a Subject Access Request under UK and EU GDPR.
When you make an access request, we will provide you with confirmation of whether we hold personal data about you, a copy of that data in a clear and readable format, information about why we hold it, where it came from, and who we share it with.
We will respond within 30 days of receiving your verified request. There is no charge for a standard access request. In limited cases where a request is manifestly excessive or repetitive, we may decline or charge a reasonable administrative fee. We will always tell you if this applies and explain why.
If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to ask us to correct it.
For most profile information, you can update this directly through your account settings. If the information is held in our internal records or payment records and cannot be self updated, contact us at privacy@shadisunnah.com and we will correct it promptly.
You have the right to ask us to delete your personal data. Under the Pakistan PDPA this right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent and there is no other lawful basis to retain it, or where the data has been processed unlawfully.
We will delete your data when you ask, unless we are required or permitted by applicable law to retain it. The main situations where we must retain data are:
Payment records, which we retain for the period required by applicable financial and tax regulations. In Pakistan this is generally seven years in line with taxation and audit requirements.
Data necessary to defend or establish a legal claim.
Data we are required to retain under a regulatory obligation imposed on us.
When we delete your account, we will delete your profiles, profile photographs, identity documents after verification is complete, personal details, and correspondence. Payment transaction records will be retained for the legally required period only and cannot be used for any other purpose during that time.
If you request deletion, we will deactivate your account immediately and permanently delete all data after a 30 day grace period. You may cancel the deletion at any time within those 30 days by logging back in.
You have the right to ask us to restrict how we use your personal data in certain circumstances. This means we can store it but cannot actively use or process it.
This right applies where you believe the data we hold about you is inaccurate while we verify it, where our processing is unlawful but you prefer restriction to outright deletion, where we no longer need the data but you need us to keep it for a legal purpose, or where you have objected to our processing and we are considering your objection.
You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, and readable format such as a CSV or JSON file. This allows you to move, copy, or transfer your data to another service if you choose.
This right applies to data that you provided to us directly, such as your profile information, and that we process on the basis of your consent or to perform our service to you.
To request a portable copy of your data, contact us at privacy@shadisunnah.com with the subject line: Data Portability Request.
You have the right to object to us processing your personal data where we are doing so on the basis of legitimate interests. When you raise an objection, we must stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless we need the data for legal claims.
You also have an absolute right to object to us using your personal data for direct marketing at any time. If you object to direct marketing, we will stop immediately with no argument and no delay.
You have the right not to be subject to a decision made solely by automated means that produces a significant effect on you.
How this applies to ShadiSunnah: Our compatibility scoring algorithm generates a percentage score shown on profiles and produces weekly or daily match suggestion lists. This is automated processing. However, it does not make any decision that has a legal or otherwise significant effect on you. The score is a tool that helps families prioritise their own search. No person is automatically accepted, rejected, approved, or denied access to anything based solely on their compatibility score. All decisions are made by the families themselves, with full human involvement.
If you have questions about how the algorithm works or what data it uses, please contact us at privacy@shadisunnah.com and we will explain it clearly.
To exercise any of the rights above, contact us through any of the following:
Email: privacy@shadisunnah.com
Subject line: Data Rights Request [your registered email address]
Include: a description of the specific right you wish to exercise and any relevant details to help us locate your account
We may need to verify your identity before processing your request. This is for your protection. We need to be certain we are responding to the genuine account holder and not to someone acting without authorisation.
We will acknowledge your request within 72 hours and provide a full response within 30 days. In complex cases we may extend this by a further two months, but we will always notify you in advance and explain why.
All requests are handled free of charge unless they are manifestly unfounded or excessive.
Where we process your data on the basis of your consent for example, for non essential cookies or optional communications you have the right to withdraw that consent at any time.
Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
To withdraw consent for cookies, use the Cookie Settings link in the footer of the platform. For any other consent based processing, contact privacy@shadisunnah.com.
We only keep your personal data for as long as necessary for the purpose it was collected. When that purpose no longer applies and no legal obligation requires us to retain the data, we delete it securely.
A summary of our main retention periods:
Account and profile data is retained for as long as your account is active. If your account is deleted, profile data is removed after the 30 day grace period.
Payment and billing records are retained for seven years to comply with applicable financial and taxation regulations.
Identity verification documents such as CNIC and passport images are deleted after verification is complete and are not retained beyond that point.
Activity logs and security logs are retained for a period of up to 12 months for fraud prevention and security purposes.
If you are unhappy with how we have handled your personal data or how we have responded to a rights request, you have the right to make a complaint to the supervisory authority relevant to your location.
Pakistan: National Commission for Personal Data Protection (NCPDP) Established under the Personal Data Protection Act 2025 Website: www.ncpdp.gov.pk (check current official address as the Commission is being established) You may also contact the Federal Investigation Agency (FIA) Cybercrime Wing for digital data related complaints at www.fia.gov.pk
United Kingdom: Information Commissioner's Office (ICO) Website: www.ico.org.uk Telephone: 0303 123 1113 Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
European Union: Contact the data protection authority in your EU member state of residence.
UAE: UAE Data Office Website: www.uaedataoffice.gov.ae
Saudi Arabia: Saudi Data and Artificial Intelligence Authority (SDAIA) Website: www.sdaia.gov.sa
We always prefer to resolve concerns directly before a formal complaint is made. Please contact us first at privacy@shadisunnah.com and we will do our best to resolve the matter promptly, fairly, and without the need for escalation.
All data protection and privacy enquiries: privacy@shadisunnah.com
Support portal: www.shadisunnah.com/support
Response commitment: within 30 days of receiving your verified request, free of charge
For urgent matters relating to suspected unauthorised access to your account, contact: support@shadisunnah.com
This page was last updated in July 2026. We will update it whenever our practices change or applicable law is amended. We will notify registered users of any material changes.
A faith guided matrimonial platform helping parents find like minded families for their children, in accordance with Islamic values.