Last Updated: January 15, 2025

Effective Date: January 15, 2025

1. Introduction

Novatra Solutions (SMC-Pvt Ltd) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our IT services and website.

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

  • Contact Information: Name, email address, phone number, mailing address
  • Business Information: Company name, job title, business address
  • Payment Information: Billing details, payment method preferences (processed securely through licensed providers)
  • Project Information: Requirements, specifications, and project-related communications

2.2 Technical Information

We automatically collect certain technical information:

  • Website Usage: Pages visited, time spent, click patterns
  • Device Information: IP address, browser type, operating system
  • Cookies: Essential cookies for website functionality and analytics

3. How We Use Your Information

We use your information for the following purposes:

  • Service Delivery: To provide IT services, project management, and support
  • Communication: To respond to inquiries, provide updates, and send important notifications
  • Billing: To process payments and manage account billing through licensed payment providers (Easypaisa, JazzCash, bank transfers)
  • Improvement: To enhance our services and website functionality
  • Legal Compliance: To comply with applicable laws and regulations including SECP, FBR, and provincial tax requirements
  • Security: To protect against fraud, unauthorized access, and security threats
  • Analytics: To analyze website usage and improve user experience

3.1 Data Processing Legal Basis

We process your personal data based on:

  • Contract Performance: To fulfill our service agreements
  • Legitimate Interest: For business operations, security, and service improvement
  • Legal Obligation: To comply with Pakistani tax and business laws
  • Consent: For marketing communications and non-essential cookies

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist in service delivery
  • Legal Requirements: When required by law or to protect our rights and interests
  • Business Transfers: In connection with mergers, acquisitions, or asset sales
  • Consent: When you explicitly consent to sharing

5. Data Security

We implement appropriate security measures to protect your information:

  • Encryption: Data transmission and storage encryption
  • Access Controls: Limited access to personal information on a need-to-know basis
  • Regular Updates: Security systems and software kept up to date
  • Staff Training: Regular privacy and security training for all employees

6. Data Retention

We retain your information for as long as necessary to:

  • Provide ongoing services and support
  • Comply with legal and regulatory requirements
  • Resolve disputes and enforce agreements
  • Maintain business records as required by law

6.1 Specific Retention Periods

  • Client Data: 7 years after project completion (as required by Pakistani tax law)
  • Payment Records: 7 years (FBR requirement)
  • Website Analytics: 26 months (Google Analytics default)
  • Marketing Communications: Until consent is withdrawn
  • Support Tickets: 3 years after resolution
  • Project Documentation: 7 years after project completion

When information is no longer needed, we securely delete or anonymize it.

7. Your Rights

You have the following rights regarding your personal information:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Objection: Object to certain uses of your information

To exercise these rights, contact us at privacy@novatrasolutions.com.pk

8. Cookies and Tracking

We use cookies and similar technologies to:

  • Essential Cookies: Required for website functionality
  • Analytics Cookies: To understand website usage and improve user experience
  • Preference Cookies: To remember your settings and preferences

You can control cookie settings through your browser preferences.

9. Third-Party Services

Our website and services may integrate with third-party services:

  • Payment Processors: Easypaisa, JazzCash, and bank transfer services (process payment data only)
  • Analytics: Google Analytics for website performance monitoring (anonymized data)
  • Communication: Email service providers for notifications and support
  • Hosting: Netlify for website hosting and CDN services
  • Security: SSL certificates and security monitoring services

9.1 Data Processing Agreements

We have data processing agreements with all third-party service providers to ensure:

  • Data is processed only for specified purposes
  • Appropriate security measures are in place
  • Data is not used for other purposes without consent
  • Data is deleted when no longer needed

These services have their own privacy policies, and we encourage you to review them.

10. International Transfers

Your information may be transferred to and processed in countries other than Pakistan. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will take steps to delete the information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website with updated effective dates. We will notify you of significant changes via email or website notice.

13. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us at: