Privacy Policy

ZEEMAKS APARTMENTS ("we", "us", "our") operates this website as a direct online room-booking service for our apartments in Lahore, Pakistan. We respect the privacy of every guest and visitor, and we collect only the information we genuinely need in order to take a booking, process a payment and deliver the stay you booked.

By using this website and completing a booking, you agree to the collection and use of your information as described in this policy. Please read it together with our Services Policy and Refund Policy.

We collect information that you give us directly, and a limited amount of technical information that is collected automatically when you browse the website.

• To create, confirm and manage your room booking, and to hold the room for your dates
• To verify the outcome of your online payment with our payment processor before a booking is confirmed
• To issue your booking reference, send your booking confirmation to the email address you provided, and notify our team of the new booking
• To identify you at check-in, to register your stay, and to keep the guest records an accommodation provider is expected to maintain — including copies of the identification and signed stay agreement taken for that stay
• To hold, apply and return a refundable security deposit, and to record any deduction made from it and why
• To respond to your questions, support requests and payment queries
• To let you look up your own booking later using your booking reference together with your identification number or email address, and to sign you in to an account that has no email address on it
• To publish reviews you choose to submit about your stay
• To protect the website and our guests against fraud, misuse and duplicate or fraudulent bookings
• To understand website usage in aggregate and improve our rooms, pricing presentation and booking flow
• To meet our record-keeping, tax and other legal obligations in Pakistan

We send you only transactional messages that relate to your booking. We do not run marketing or promotional email campaigns from this website, and we do not sell, rent or licence your personal information to anyone.

When you submit your booking details, the booking is created on our server with a pending payment status and the room is held for a short period while you complete payment. You are then taken to the secure hosted checkout of our payment processor to pay.

The result of that payment is confirmed to us directly by the payment processor, server-to-server, and is verified on our side before anything is confirmed. A browser redirect on its own is never treated as proof of payment. Only once a successful payment has been verified is your booking marked as confirmed and your booking reference issued.

Every guest staying at the property must provide valid identification, and we are expected to keep a record of who stayed with us and when. This is why identification is a required field on the booking form rather than an optional one, and why a booking cannot be completed without it.

• We accept a CNIC or national ID, a passport, a driving licence, or another document we agree to accept — you tell us which one you are presenting, and we record its number
• The identification presented at check-in must match the one the booking was made with, and check-in may be refused where it does not, or where identification cannot be provided
• Registration records are kept for operational, security, legal and regulatory purposes, and for the periods described under Data retention below
• Identification details, and any copies of your documents kept with your booking, are shown only to the staff who need them to register you and manage your stay, and to anyone we are legally required to disclose them to
• Copies of documents are kept with the booking they belong to. They are never shown on the public website, included in a confirmation email, or shared with other guests
• We do not use your identification details for marketing, profiling, credit checks or any purpose unrelated to your stay

The operational side of this — what you need to bring, who has to be registered, and what happens if the details do not match — is set out in our Services Policy.

We work with a small number of service providers who process information strictly to help us run this website and its booking service. Each of them handles information under its own privacy terms:

• Payment processing — PayFast processes your online payment and returns the payment result and transaction reference to us. Your card and wallet credentials stay with the payment processor and the banks and card schemes involved in the transaction.
• Email delivery — our outgoing mail provider is used to deliver booking-confirmation emails to the address you provided, and booking notifications to our own team.
• Website analytics — Google Analytics is used to measure aggregate website traffic and usage.
• Maps — a Google Maps embed is used to show our location on the website.
• Hosting and database — our hosting and database providers store the website and its booking records on our behalf.

Bookings made on this website are direct bookings with ZEEMAKS APARTMENTS, so your booking details are shared within our own operations: the front-desk and management team who need them to prepare your room, check you in and look after your stay. We are not a travel agency or a booking aggregator, and we do not pass your details to other properties, accommodation providers or booking platforms.

Otherwise, we share your information only:

• With the service providers listed above, to the extent they need it to perform their service for us
• With banks, card schemes and our payment processor, where this is needed to process, verify, reconcile or investigate a payment
• Where we are required to do so by law, by a court order, or by a lawful request from a regulatory or government authority in Pakistan
• Where it is necessary to establish, exercise or defend our legal rights, or to prevent fraud or misuse of the booking service

We use two kinds of cookies and similar browser storage on this website:

• Essential cookies and storage — needed for the website to function: keeping you signed in to your account, remembering the rooms and dates you selected while you move through checkout, and protecting form submissions. A booking cannot be completed without these.
• Analytics cookies — set by Google Analytics to measure aggregate visits and usage of the website.

We do not use advertising or ad-retargeting cookies on this website. You can block or delete cookies in your browser settings at any time, but blocking essential cookies will stop sign-in and the booking flow from working correctly.

We take reasonable technical and organisational measures to protect the information you give us:

• The website is served over an encrypted HTTPS connection
• Card, wallet and bank credentials are never collected or stored by us — they are handled entirely on the payment processor's secure checkout
• Account passwords are stored only as one-way secure hashes, never as readable text
• Payment results are verified server-side, and each transaction reference can be recorded only once, so a duplicated or replayed payment message cannot alter a booking
• Booking records and administrative functions are restricted to authorised staff accounts
• Copies of identity and stay documents can be opened only by signed-in staff, only from the booking they belong to, and are sent with instructions that browsers and networks must not cache them
• A document our team starts to attach to a booking that is never completed is deleted automatically within 24 hours
• Guest booking-access links are stored only as hashed tokens, not in a form that could be reused by someone reading our records

No method of transmission or storage on the internet can be guaranteed to be completely secure. While we work to protect your information, we cannot warrant absolute security, and you remain responsible for keeping your account password and your booking access link confidential.

We keep your booking, guest-registration and payment records for as long as necessary to deliver your stay, to handle any query, dispute, deposit deduction or chargeback that may follow, and to meet the accounting, tax, guest-registration and record-keeping requirements that apply to us in Pakistan. Account information is kept while your account remains active. Published reviews stay on the website unless they are removed by us or at your request.

Copies of identity and stay documents are kept for the same period as the registration record of the booking they belong to. Our team can remove a copy from a booking sooner where it is no longer needed, and copies are deleted together with the booking record.

When information is no longer needed for any of these purposes, it is deleted or anonymised.

Subject to applicable law, you may ask us to:

• Confirm what personal information we hold about you and provide a copy of it, including any copies of documents kept with your bookings
• Correct information that is inaccurate or out of date, such as a misspelled name or a wrong phone number
• Delete your account, copies of your documents, or other information that we are not required to retain for legal, accounting, guest-registration or dispute-handling reasons
• Remove a review you submitted

To make a request, email us at info@zeemaks.com from the address you booked with, or quote the booking reference and the identification number used for the booking, so that we can confirm the request is genuinely yours. Please note that we may still need to keep records of a completed booking and its payment after an account is deleted, where the law requires it.

You can also opt out of Google Analytics measurement using the browser add-on Google provides, or by blocking analytics cookies in your browser.

A booking or an account on this website requires valid identification — a CNIC, passport or driving licence — so both are intended for adults. We do not knowingly collect information from children. If you believe a child has provided us with information, please contact us so that we can remove it.

We may update this Privacy Policy from time to time to reflect changes in our booking service, our service providers or applicable law. A revised policy takes effect as soon as it is published on this page, and the "Last updated" date at the top of the page will change. Please review this page periodically; continuing to use the website after an update means you accept the updated policy.