Data we collect

Last updated: 27 October 2026.

This page describes the information used by the current MI Enterprises website, operated by Fazel-e-Madina Solar House. Collection depends on which features you use. Browsing the catalog does not require completing every form or creating an account. Read our privacy policy for sharing, retention and privacy requests.

1. Accounts and profile details

Registration asks for your name, email address, mobile number and password. The account links your profile, saved chats and relevant customer records. You can provide or update an address through your profile. The password is processed for authentication and stored as a hash, not as a readable password.

2. Login and recovery security

We process login identifiers, session records, human-check attempts and rate-limit records. Password recovery uses the registered email, a short-lived code challenge, expiry and attempt information. Codes are stored as verification digests. If you enrol an authenticator, the system keeps the verification secret and device state needed to validate codes; recovery codes are stored as digests. Never give these secrets or recovery codes to our sales team.

3. Orders and payment follow-up

Checkout collects your full name, phone number, delivery address and optional email. We retain the order reference, selected products and quantities, recorded prices, totals, discounts or promo use, order status and relevant staff fulfilment notes. Orders may be linked to your signed-in account.

Our team calls to verify the order and selected payment or pickup method. We store the delivery region, product subtotal, promo discount, shipping fee, checkout method and any pickup address with the order. We also record the time and version of the privacy notice acknowledged during checkout; this is not marketing consent. Payment references supplied through official channels may be retained for reconciliation. The website does not provide a card-entry form or ask for a card PIN, bank password or banking OTP.

4. Quotes and home-load information

Quotation forms collect your name, mobile number, city/area, optional email, preferred system size, selected package or products and the requirements you type. When you attach an estimate, it can include appliance types, quantities, watts, hours of use and calculated load or energy needs.

A standalone estimate can remain in browser session storage until you clear it or the session ends. It becomes part of a saved enquiry or chat when you submit it through those features. We do not require a utility account password or continuous access to your electricity meter.

5. Solar Dost chatbot use

With the required account and recording acknowledgement, we save the conversation title, your questions, generated replies, selected products, comparison selections, load-calculator inputs, stated budget or system requirements, conversation state and timestamps. Edits can create a separate branch while the original chat remains in history.

Staff can review saved conversations, unanswered-question flags and internal review notes. The purpose is customer help, correcting catalog or assistant problems and improving replies. The chatbot is not a private messaging channel hidden from authorised staff.

Chat snapshots older than 90 days may move into verified private archives. The history remains readable; archival does not delete the question or answer, and unresolved support questions may remain active. Clearing your browser storage does not remove the saved server record.

6. Other forms and public contributions

7. Browser selections and technical data

Essential cookies hold a session identifier and CSRF protection token. The server session can retain the cart, order references and form or human-check state. Local storage can retain the wishlist, comparison selection and cart display data. Session storage can hold a limited active-chat copy, a home-load estimate and temporary comparison-request state.

Requests also expose technical data, such as an IP address, requested URL and browser headers, to the web server and hosting infrastructure. The application uses keyed IP-derived identifiers for several abuse limits and aggregate comparison-demand counters; infrastructure logs may contain the underlying IP and request metadata. Exact log retention depends on the hosting setup. These identifiers should not be treated as fully anonymous.

Saving a product comparison may create a public comparison page or catalog-based guide. The published content concerns the products; a user's name, phone number or private conversation is not included. The current storefront has no advertising tracking pixel or third-party marketing analytics script.

8. What we do not ask you to send

Do not send CNIC images, bank passwords, card PINs, banking OTPs, authenticator secrets or sensitive personal documents through product questions, reviews or the chatbot. We do not need browser camera, microphone or precise-location permission for the current shopping, quote and chat tools. Contact our team first if a warranty provider requests documents so you can use the appropriate official channel.

9. Your controls

You can browse without using optional forms, choose what to include in an enquiry, correct available profile fields and clear local browser storage. To request access, correction, account closure or deletion, or to stop newsletters, use our official contact channels. We verify requests before disclosing or changing account information and explain any sales, warranty, security or other records that need to be retained.