Privacy Policy

Effective Date: 27 August 2026

SandBox Coworking ("SandBox", "we", "us", or "our") respects your privacy and is committed to handling personal information responsibly and securely.

This Privacy Policy explains how we collect, use, store, and share information when you use sandbox.com.pk, submit an enquiry, apply for membership, make a payment, visit or use a SandBox location, or otherwise interact with us.

1. Information We Collect

Personal Information

  • Full name;
  • Email address;
  • Phone number;
  • Company or organisation name;
  • Job title or designation;
  • Billing and invoicing information;
  • Identification information where reasonably required for membership, security, or regulatory purposes;
  • Emergency or authorised contact information where provided;
  • Membership details; and
  • Any other information you voluntarily provide to us.

Payment Information

When you make a payment, we may collect information relating to the transaction, including:

  • Amount paid;
  • Payment date;
  • Transaction or reference number;
  • Payment method; and
  • Billing information.

Payments may be processed by banks, payment gateways, or other third-party payment providers. SandBox may not directly store complete debit-card or credit-card information where payments are handled by an external payment processor.

Website and Technical Information

When you use our website, we may automatically collect information such as:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Pages visited;
  • Date and time of access;
  • Referral information; and
  • Cookies or similar technology.

Workspace and Access Information

Where applicable, we may collect records relating to:

  • Building or workspace access;
  • Access cards;
  • Entry and exit activity;
  • Meeting-room bookings;
  • Facility usage; and
  • Membership account activity.

CCTV and Security

SandBox premises may use CCTV cameras and other security systems for safety, property protection, incident investigation, and access management.

CCTV footage may be retained for a reasonable period depending on storage capacity, security requirements, and any incident that requires further investigation.

2. How We Use Your Information

We may use personal information to:

  • Process membership applications;
  • Manage memberships and accounts;
  • Provide coworking, private office, meeting room, and related services;
  • Process payments and invoices;
  • Manage access to SandBox locations;
  • Respond to enquiries and support requests;
  • Send service-related notices and announcements;
  • Contact members regarding payments, bookings, access, maintenance, or operational matters;
  • Improve our website, facilities, and services;
  • Prevent fraud, misuse, or unauthorised access;
  • Protect the safety and security of members, visitors, employees, and property;
  • Maintain accounting and business records;
  • Meet legal or regulatory requirements; and
  • Resolve disputes or enforce our agreements and policies.

3. Communications and Marketing

We may contact you by email, phone, SMS, WhatsApp, or other communication channels regarding your enquiry, membership, bookings, account, payments, or SandBox services.

Where appropriate, we may also send information about SandBox offers, new locations, events, services, or promotions.

You may request to stop receiving promotional communications at any time. Service-related communications necessary for an active membership or transaction may still be sent.

4. Cookies and Analytics

Our website may use cookies and similar technologies to:

  • Keep the website functioning correctly;
  • Remember certain user preferences;
  • Understand website usage;
  • Measure traffic and performance;
  • Improve our services; and
  • Support security and fraud prevention.

Some cookies or analytics services may be provided by third parties.

You may be able to manage or block cookies through your browser settings. Disabling certain cookies may affect website functionality.

5. How We Share Information

SandBox does not sell customer personal information.

We may share information where reasonably necessary with:

  • Payment processors and banks;
  • Website hosting and technology providers;
  • Accounting and invoicing service providers;
  • Communication providers;
  • Security and access-control service providers;
  • Professional advisers;
  • Contractors providing services on our behalf; and
  • Government authorities or law-enforcement agencies where disclosure is legally required.

6. Data Storage and Security

We take reasonable administrative, organisational, and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

However, no online system, network, or electronic storage method can be guaranteed to be completely secure.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including:

  • Maintaining membership records;
  • Providing services;
  • Accounting and taxation requirements;
  • Security;
  • Resolving disputes;
  • Preventing fraud; and
  • Meeting legal or contractual obligations.

8. Your Information and Choices

Subject to applicable law and reasonable verification of your identity, you may contact SandBox to:

  • Ask what personal information we hold about you;
  • Request correction of inaccurate information;
  • Update your contact information;
  • Request deletion of information that is no longer reasonably required;
  • Withdraw consent where processing depends on consent; or
  • Opt out of promotional communications.

9. Third-Party Websites and Services

Our website may contain links to third-party websites, payment platforms, social networks, maps, or other external services.

SandBox is not responsible for the privacy practices of independent third parties.

10. Children's Privacy

SandBox services are primarily intended for businesses and working professionals.

We do not knowingly use our website to collect personal information directly from children for marketing purposes.

11. Legal Requirements

We may collect, use, retain, or disclose information where reasonably necessary to comply with applicable laws, regulations, legal proceedings, court orders, or lawful requests from authorities.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, business practices, or applicable legal requirements.

The latest version will be published on sandbox.com.pk with an updated effective date.

13. Contact Us

If you have questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact SandBox using the contact information provided on sandbox.com.pk.