Privacy Policy

This privacy policy explains what information BISP Help (bisp-help.online) collects, why we collect it, and how we protect it. We keep data collection minimal: this is an information website, not a data business.

BISP Help is an independent website. It is not affiliated with, endorsed by, or connected to the Government of Pakistan or the Benazir Income Support Programme (BISP). This policy covers only our own website and does not cover official BISP services or any external sites we link to.

1. Information we collect

a) What you send us voluntarily

• Newsletter email: if you subscribe, we store your email address so we can send updates. You can unsubscribe at any time.
• Contact messages: name, email, and message content, so we can reply. We recommend you do not include your CNIC or other sensitive personal data in messages.
• Article feedback: “Was this article helpful?” responses are stored anonymously (no name or email).

b) Technical data

• Standard web server logs (IP address, browser type, pages visited, timestamps) may be kept briefly for security and abuse prevention, for example to rate-limit the admin login.
• We do not use third-party advertising or sell personal data.

2. How we use your information

• To send newsletter updates you subscribed to.
• To respond to contact messages.
• To improve our articles and website.
• To protect the website from abuse.

3. What we never do

• We never sell, rent, or trade your personal information.
• We never use your data for political purposes.
• We never ask for your CNIC, bank details, or OTPs — and you should never share them on any website that does.

4. Cookies and local storage

We use a session cookie to keep the admin panel secure and to remember CSRF tokens. We do not use advertising cookies. You can block cookies; the public website will still work, though admin login requires sessions.

5. Data storage and security

Data is stored in a SQLite database on our hosting server, protected by folder permissions that block direct web access. Passwords (admin accounts) are stored only as secure password hashes. Access to the admin area is limited and rate-limited.

6. Data retention

Newsletter subscribers stay until they unsubscribe (we remove them on request). Contact messages are kept as long as reasonably needed to handle your request. Login-attempt records are pruned automatically.

7. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond within a reasonable time.

8. Third-party services

We load the Material Symbols icon font from Google Fonts. Google may process your IP address to serve the font, subject to Google's privacy policy. Our pages may link to official government or third-party websites — those sites have their own privacy policies.

We use Histats to understand visitor numbers and traffic patterns. Histats sets a cookie and may process your IP address and device information to provide aggregated, anonymised statistics, subject to Histats' privacy policy.

9. Changes to this policy

We may update this policy as the website evolves. The “last updated” date above always reflects the current version. Significant changes will be highlighted on this page.