Privacy Policy & Data Protection Framework

1. Identification of Data Controller & Official Desks

This Privacy Policy governs the collection, processing, storage, and dissemination of information across haroonabadvital.com ("the Website", "the Portal", "we", "our", or "us"). The responsible legal entity and data controller is:

• Data Controller Entity: Haroonabad Vital Media Group
• Principal Officer & Managing Trustee: Mohammad Abubakr (Publisher & Editor-in-Chief)
• Bureau Newsroom Address: Circular Road / Commercial Galla Mandi Sector, Haroonabad 62100, Tehsil Haroonabad, District Bahawalnagar, Punjab, Pakistan
• Official Privacy Desk: contact@haroonabadvital.com
• Administrative Management Desk: ansariforex8@gmail.com
• Geographic Bureau Coordinates: Latitude 29.6111° N, Longitude 73.1361° E

If you have any questions, regulatory inquiries, or wish to exercise statutory privacy entitlements under international or domestic data protection laws, you may contact our designated compliance team via either of the verified electronic mail endpoints provided above.

2. Categories of Information Collected

In operating an independent civic journalism and agricultural intelligence portal, we collect minimal data necessary to maintain service reliability, protect site security, and deliver hyper-local reporting to our community. The information collected falls into three distinct categories:

2.1 Server Log Files & Technical Telemetry

Like standard web server architectures worldwide, our hosting infrastructure maintains automated log files. These records include:

• Internet Protocol (IP) addresses (anonymized or pseudonymized where feasible);
• Browser user agent strings and operating system versions;
• Internet Service Provider (ISP) routing details (e.g., PTCL, Nayatel, Jazz, Zong);
• Date, time, and duration timestamps of page requests;
• Referring and exit pages, HTTP response status codes, and clickstream navigation patterns.

These server logs are evaluated exclusively in aggregate to diagnose server latency, counteract malicious denial-of-service (DoS) attempts, track aggregate traffic trends across Tehsil Haroonabad, and guarantee optimal content delivery. Log telemetry is not cross-referenced with personally identifiable information.

2.2 Information Provided Directly by Readers

Visitors may voluntarily furnish personal data through interactive features on our portal, including:

• Editorial Tips & Contact Desk: Submitting name, email address, telephone contact (optional), subject classification, and investigative tip text through our interactive contact form;
• Formal Corrections Desk: Submitting documentary evidence and personal contact information to request factual revisions under our journalistic errata policy;
• Syndication & Inquiries: Transmitting correspondence regarding commercial sponsorships, advertising bookings, or content syndication.

2.3 Cookies, Local Storage & Web Beacons

Cookies are small alphanumeric files deposited on your computing device's hard drive via your web browser. Haroonabad Vital utilizes first-party cookies solely to record session preferences (such as light/dark interface state, mobile navigation states, and font scaling). We do not deploy invasive keystroke-logging or intrusive tracking pixels.

3. Google AdSense, DoubleClick DART Cookies & Third-Party Advertising Disclosures

Haroonabad Vital funds its independent journalistic investigations, on-the-ground Galla Mandi market coverage, and civic monitoring through programmatic digital advertising. As an active participant in Google AdSense and Google-certified advertising networks, we disclose the following mandatory technical notices in strict compliance with Google AdSense 2026 Publisher Program Policies:

3.1 Third-Party Ad Vendors & Network Beacons

Third-party advertising partners and demand platforms (including Google AdSense, Google Marketing Platform, and certified Authorized Buyers) may utilize cookies, JavaScript snippets, or Web Beacons within their sponsored creatives. These automated tools dynamically measure advertising campaign effectiveness, combat click fraud, and present contextual or personalized commercial promotions aligned with your browsing habits across disparate web properties.

Haroonabad Vital maintains no technical control over, or direct access to, cookies deployed by external third-party advertisers. When an advertisement renders on our site, the interaction is governed by the independent privacy guidelines of the corresponding advertising technology provider.

3.2 Direct Opt-Out Portals & Consumer Ad Controls

Users maintain the absolute legal and technical right to disallow personalized advertising and opt out of interest-based behavioral targeting. You can configure your preferences through the following authoritative industry clearinghouses:

• Google Ad & Content Network Privacy Policy: Review Google's official privacy architecture at https://policies.google.com/technologies/ads.
• Google Ads Settings Dashboard: Manage your Google ad personalization profile directly via https://adssettings.google.com/.
• Network Advertising Initiative (NAI): Execute an omnibus industry opt-out across participating ad-tech networks at https://optout.networkadvertising.org/.
• Digital Advertising Alliance (DAA): Utilize the US consumer choice tool at https://optout.aboutads.info/.
• European Interactive Digital Advertising Alliance (EDAA): For European Economic Area residents, customize your preferences via https://youronlinechoices.eu/.

Opting out of targeted advertising does not eliminate advertisements from displaying on Haroonabad Vital; it ensures that delivered advertising remains contextual and non-personalized.

4. General Data Protection Regulation (GDPR) Compliance & European User Rights

For visitors situated in the European Union (EU), European Economic Area (EEA), and the United Kingdom, our data handling adheres strictly to Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR) and the UK Data Protection Act 2018.

4.1 Lawful Basis for Processing (GDPR Article 6)

We process personal data only when substantiated by at least one of the following recognized statutory grounds:

1. Consent (Art. 6(1)(a)): Explicit consent provided by you when registering for newsletters, submitting editorial inquiries, or accepting non-essential cookie categories.
2. Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate interest in securing our digital infrastructure, preventing cyberattacks, auditing portal reach, and operating a financially viable independent news organization, provided your fundamental human rights do not override these interests.
3. Legal Compliance (Art. 6(1)(c)): Processing required to discharge formal statutory, judicial, or regulatory mandates under applicable law.

4.2 Enumerated Data Subject Rights (GDPR Articles 12–21)

Under Chapter III of the GDPR, European data subjects are endowed with enforceable statutory prerogatives regarding their personal dossiers:

• Right of Access (Article 15): You have the right to request a formal confirmation as to whether your personal data is being processed, alongside a structured copy of all such records free of charge.
• Right to Rectification (Article 16): You possess the absolute right to obtain without undue delay the rectification of inaccurate or incomplete personal information held in our registries.
• Right to Erasure / "Right to Be Forgotten" (Article 17): You may demand the permanent expungement of your personal data when it is no longer required for the purposes collected, when consent is withdrawn, or when processing was unlawful.
• Right to Restriction of Processing (Article 18): You may require us to suspend active processing while the accuracy or lawfulness of your data is formally disputed.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., JSON or CSV) for transmission to another data controller.
• Right to Object (Article 21): You hold the right to object at any time, on grounds relating to your particular situation, to data processing rooted in legitimate interest, direct marketing, or statistical analytics.

4.3 Exercising Your GDPR Statutory Rights

To exercise any of the aforementioned rights under Articles 15 through 21, dispatch a formal electronic communication to our designated compliance desk at contact@haroonabadvital.com bearing the subject header: GDPR Rights Request. In accordance with Article 12, we respond to verified petitions within thirty (30) calendar days without fee or administrative charge.

5. California Consumer Privacy Rights (CPRA, CCPA & CalOPPA)

Under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and the California Online Privacy Protection Act (CalOPPA), California residents are entitled to specific disclosures regarding personal information collected, shared, or retained.

5.1 CPRA Notice at Collection

Over the preceding twelve (12) months, Haroonabad Vital has collected the following statutory categories of consumer personal information:

• Category A — Identifiers: Internet Protocol (IP) addresses, unique online advertising identifiers, and email addresses submitted via contact channels.
• Category B — Internet or Other Electronic Network Activity: Browsing history across our pages, reading duration, search queries executed in our internal site search, and interaction with embedded media or ad units.
• Category C — Coarse Geolocation Data: Non-precise, city-level geographic location deduced from IP headers (e.g., Haroonabad, Bahawalnagar, Lahore, Karachi, or foreign metropolitan centers).

5.2 Non-Sale Covenant & Sharing Disclosures

Haroonabad Vital does not sell personal information for monetary consideration. We do not operate data brokerage arrangements. However, under the expansive statutory definition of "sharing" set forth in the CPRA, the dynamic disclosure of pseudonymous advertising identifiers to Google AdSense and programmatic exchange networks for cross-context behavioral advertising may be classified as "sharing."

California residents hold the enforceable right to opt out of the selling or sharing of their personal information. To trigger this opt-out, you may activate browser-based Global Privacy Control (GPC) signals or submit an opt-out communication to contact@haroonabadvital.com with the subject Do Not Sell or Share My Personal Information.

5.3 Do Not Track (DNT) & Global Privacy Control (GPC) Architecture

Our web server infrastructure is calibrated to respect automated Global Privacy Control (GPC) opt-out signals transmitted by modern web browsers. When our servers detect a valid GPC signal from a visiting California browser session, our programmatic ad injection scripts automatically restrict behavioral personalization, defaulting to purely contextual ad serving.

6. Children's Online Privacy Protection Act (COPPA)

Protecting the privacy of young children is of paramount importance to Haroonabad Vital. Our journalistic, civic, and agricultural coverage is intended exclusively for general adult audiences, farmers, civic actors, students, and commercial entrepreneurs. In compliance with the United States Children's Online Privacy Protection Act (15 U.S.C. 6501 et seq., COPPA):

• Haroonabad Vital does not knowingly solicit, harvest, collect, or store personally identifiable data from any minor under the age of thirteen (13).
• No interactive forms, newsletter signups, or comment portals are targeted at minors under 13.
• If a parent, guardian, or educator becomes aware that a child under 13 has inadvertently submitted personal data to our servers without verified parental consent, please alert our privacy desk immediately at contact@haroonabadvital.com. Upon receipt, our engineering team will permanently expunge and purge the corresponding records from all production databases and backups within twenty-four (24) hours.

7. Data Retention, Cybersecurity & Encryption Standards

We apply robust administrative, physical, and technological security controls to safeguard personal data against unauthorized interception, alteration, destruction, or disclosure:

• Cryptographic Transport Encryption: 100% of portal traffic is enforced over Hypertext Transfer Protocol Secure (HTTPS) using TLS 1.3 cryptographic cipher suites. Unencrypted HTTP requests are automatically redirected via HTTP 301 headers.
• Log Telemetry Retention: Standard web server access logs and IP connection traces are systematically retained for a maximum duration of ninety (90) days solely for forensic cybersecurity auditing and bot mitigation, following which they are purged.
• Contact Submissions Retention: Communications received via the contact desk are retained for one hundred and eighty (180) days to facilitate editorial follow-up and verification, stored within password-protected, encrypted email environments with multi-factor authentication (MFA).

8. Amendments & Revision Notifications

We reserve the right to periodically amend, revise, or modernize this Privacy Policy to reflect evolving regulatory frameworks, Google AdSense compliance requirements, or advancements in our digital architecture. Whenever substantive revisions are enacted, the "Effective Date" and version designation atop this document will be revised accordingly. Material updates will be highlighted via an administrative notice on our homepage. Your continued utilization of Haroonabad Vital following the posting of modifications constitutes acknowledgement of the updated data governance terms.