Privacy
Policy.

• Name So the organiser can see who has paid, and so the trip coordinator can check people in on the day.
• Mobile Your payment link, your reminders, and the message telling you the trip is confirmed or cancelled all go here. Without it we cannot tell you your money is coming back.
• Email Optional, everywhere it appears. Nothing depends on it.
• Payments The amount, the time, and the reference our payment provider gives us. We never see or store your card number, wallet PIN, or any OTP - those go to the payment provider, never to picnic.
• Safety For a confirmed trip: an emergency contact name and number, and optionally the last four digits of a CNIC. This exists so that if something happens on a trip, the coordinator can reach your family without searching a phone. It is used for nothing else.
• IP address Recorded at two moments only: when an organiser confirms they have permission to invite people, and when a form is submitted. It is a record of who agreed to what, and a defence against automated abuse.
• Messages We keep a copy of every WhatsApp or SMS we send you, so that when there is a disagreement about what you were told, there is an answer rather than two memories.

If you are paying your share of a trip, picnic never asks you to register, choose a password, or install anything. Your personal link is enough. There is no profile of you being built, because there is no profile.

Someone you know booked a trip and entered your number as one of the people they were inviting. Before anything is sent, that organiser has to confirm they know you and are inviting you. We record who confirmed it and when.

That permission belongs to that one booking, and it never carries over. If the same person organises another trip next month, they have to enter your number again and confirm again. Being invited once does not put you on a list.

There is no marketing. We send you the invitation, reminders while the group is still collecting, and the message that says confirmed, cancelled, or refunded. Nothing else.

• The organiser of your trip sees your name and whether you have paid. They do not see how you paid.
• The trip coordinator sees the participant list on the day, including emergency contacts.
• picnic staff see what their role allows and no more. Access is given one area at a time.
• Our payment provider handles the payment itself under their own privacy terms.
• Suppliers - the hut, the coaster, the caterer - are told how many people are coming. They are not given the list.

We do not sell, rent, or share your details for anyone else's marketing. Not to advertisers, not to other travel companies, not to anybody. The only time we would hand information to an authority is where the law requires it of us.

picnic sets one cookie: the session cookie that keeps a form working while you fill it in. There is no advertising cookie, no analytics, no pixel, and no third-party tracker anywhere on this site. That is why you have not been asked to accept anything.

One honest exception: our pages load their typefaces from Google Fonts, which means your browser makes a request to Google and Google can see your IP address in doing so. We gain nothing from it and it is not used to identify you, but it is a third party and you should know it is there.

• Booking and payment records: kept as long as tax and accounting law requires, because a payment we cannot account for is a problem for both of us.
• Emergency contacts: only needed until the trip is over, and removed after it.
• Invitations never sent: deleted when the booking closes.
• Opt-outs: kept forever, on purpose. It is the only way to guarantee you are never messaged again.

• See what we hold about you - ask, and we will tell you.
• Correct it - a misspelt name or a wrong number, fixed on request.
• Stop the messages - reply STOP, or ask us.
• Have it deleted - we will delete what we are not legally required to keep, and tell you plainly what stays and why.

Ask through the contact page or at help@picnic.pk, from the number or address you gave us. We answer within seven working days.

The site is served over HTTPS. Payment details go directly to our payment provider and are never stored on our systems. Staff access is restricted by role. No system is perfect, and we would rather say that than claim otherwise.

picnic is for adults. We do not knowingly collect information from anyone under 18. Children may of course come on a trip - their details are given by the adult responsible for them, and are used only for the trip.

If we change how we handle your information, this page changes with it and the date below changes too. A change that affects a trip you have already paid for will be told to you directly, not left here for you to find.

Last updated August 2026 · picnic (Pvt) Ltd, Karachi, Pakistan.