Privacy Policy

Privacy Policy

Last updated: May 2025

1. Introduction

EIDDI (SMC-PRIVATE) LIMITED ("EIDDI", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website (www.eiddi.co) or engage our services. By using our website or services, you agree to the practices described in this policy.

2. Data We Collect

We may collect the following categories of personal data:

• Identity Data: Full name, job title, company name
• Contact Data: Email address, phone number, mailing address
• Transaction Data: Payment records, invoice history, service agreements
• Technical Data: IP address, browser type, device information, cookies
• Usage Data: Pages visited, time on site, referral source
• Communications Data: Enquiry content, support tickets, correspondence

3. Legal Basis for Processing

We process personal data on the following legal bases: (a) contractual necessity — to deliver services you have engaged us for; (b) legitimate interests — to improve our services and conduct business operations; (c) legal obligation — to comply with applicable laws and regulations; (d) consent — where you have expressly provided it (e.g., marketing communications).

4. How We Use Your Data

• To deliver contracted IT services and business consulting
• To process payments and issue invoices
• To communicate service updates, support responses, and account information
• To comply with legal, tax, and regulatory obligations
• To improve our website and service quality
• To detect and prevent fraud or security incidents

5. Data Sharing

We do not sell your personal data. We may share data with trusted third-party service providers (payment processors, cloud infrastructure providers) strictly necessary for service delivery, bound by confidentiality agreements. We may also disclose data when legally required by Pakistani law or applicable international regulations.

6. International Data Transfers

As we operate internationally, your data may be transferred to and processed in countries outside Pakistan, including within the EU (GDPR-compliant), Canada (PIPEDA-compliant), and the US. All transfers are conducted with appropriate safeguards in place.

7. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. Transaction records are retained for a minimum of 7 years in accordance with financial regulations. You may request deletion of non-essential data at any time.

8. Your Rights

Depending on your jurisdiction, you may have the right to: access your personal data; correct inaccurate data; request erasure; restrict processing; object to processing; and data portability. To exercise any right, contact us at privacy@eiddi.co.

9. Cookies

Our website uses essential cookies for functionality and analytics cookies (with your consent) to understand site usage. You may manage cookie preferences via your browser settings.

10. Contact for Privacy Matters

Data Controller: EIDDI (SMC-PRIVATE) LIMITED | Lahore, Punjab, Pakistan | privacy@eiddi.co