How we handle your information.
Last updated 9 October 2026. This policy covers the AtomPay website and mobile app.
Who we are
AtomPay is the instalment payment option for purchases made on AtomShop.pk in Pakistan. It is run by AtomShop, and your AtomPay account is your AtomShop account. In this policy, "we" and "us" means AtomPay and AtomShop.
What we collect
We only ask for what we need to open your account, decide your limit, and run your plan.
- Account details: your name, mobile number, email address and password (stored only as a one-way hash).
- Identity (KYC): your CNIC number, date of birth, photos of the front and back of your CNIC, a selfie to match against it, and your residential address and city.
- Financial details: employment status, employer, source of income, monthly income and expenses, existing instalments, and the credit history you tell us about.
- Purchase and payment history: your AtomShop orders, instalment plans, due dates and whether payments were on time.
- Verification records: notes and signed forms from our staff when they check your address or identity.
- Plan estimates: the price, down payment and term you enter into the calculator.
- App and device data: the device name, platform and app version, and a push-notification token so we can send you reminders.
- Technical data: IP address, browser type and pages visited, used for security and, on the website, anonymous usage statistics.
We do not access your contacts, call logs, SMS messages, photo gallery or location. The app only uses the camera when you choose to photograph your CNIC or take a selfie.
How we use it
- To create your account and confirm your mobile number and email with one-time codes.
- To verify your identity and address, and to prevent fraud.
- To assess whether you can afford an instalment plan and set your limit. This uses your declared income and obligations and your repayment history with AtomShop, and every decision is reviewed by our staff.
- To run your plan: confirm orders, track payments, and send due-date reminders.
- To send account messages, such as sign-in codes, password changes and decisions on your application.
- To keep the service secure, investigate misuse, and meet our legal and regulatory obligations.
- To understand how the website is used so we can improve it.
We do not sell your personal information, and we do not use it for third-party advertising.
How long we keep it
We keep your account and KYC information for as long as your account is open, and afterwards for as long as the law requires us to keep financial and identity records. We also keep it while any instalment is still owed or disputed.
One-time codes expire within minutes. Unfinished sign-ups are discarded after 30 minutes. App sign-ins expire after 30 days.
How we protect it
- All traffic to the website and app is encrypted with HTTPS.
- CNIC photos, selfies and verification forms are kept in private storage. Only you and authorised staff can open them, and only after signing in.
- Passwords are hashed, and sign-in and code requests are rate-limited.
- You can see your active app sessions and sign out of any of them.
No system is perfectly secure. If you think your account has been accessed without your permission, change your password and contact us straight away.
Your choices and rights
- Access and correction: you can see your details in My AtomPay, and ask us to correct anything that is wrong.
- Notifications: you can turn off alert emails with the link in any alert email, and turn off push notifications in your phone's settings. We will still send messages you need for security or about money you owe.
- Deleting your account: you can delete your account yourself in the app or on our delete account page once nothing is owed. Your identity details and documents are deleted, and the financial records we must keep by law are anonymised.
Children
AtomPay is only for people aged 18 or over. We do not knowingly collect information from anyone younger.
Changes to this policy
We may update this policy as the service changes. We will change the date at the top of this page, and tell you in the app or by email about any important change.