Privacy Policy

Your Privacy Matters

At PhenaTec, we are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and protect your data in compliance with GDPR and other applicable regulations.

1. Information We Collect

• Name, email address, and contact information
• Company information and job title
• Project requirements and technical specifications
• Communication preferences
• Payment and billing information

• IP address and browser information
• Device type and operating system
• Pages visited and time spent on our website
• Referral sources and search terms
• Cookies and similar tracking technologies

2. How We Use Your Information

• Provide and improve our services
• Process payments and manage accounts
• Deliver technical support
• Manage project communications

• Respond to inquiries and requests
• Send service updates and notifications
• Share relevant industry insights
• Marketing communications (with consent)

• Comply with legal obligations
• Protect against fraud and abuse
• Enforce our terms and conditions
• Resolve disputes

• Analyze website usage and performance
• Improve our services and user experience
• Conduct research and development
• Business planning and strategy

3. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our contractual obligations to you
• Legitimate Interest: For business operations, security, and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

We work with trusted third-party service providers who assist us in delivering our services, such as cloud hosting, payment processing, and analytics platforms.

We may disclose information when required by law, court order, or to protect our rights, property, or safety, or that of others.

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

5. International Data Transfers

As we operate in the UK and Pakistan, your data may be transferred and processed in different countries. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent data protection laws
• Binding Corporate Rules for intra-group transfers
• Certification schemes and codes of conduct

6. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption in transit and at rest
• Secure access controls
• Regular security assessments
• Firewall and intrusion detection

• Staff training and awareness
• Data protection policies
• Incident response procedures
• Regular compliance audits

• Secure data centers
• Access control systems
• Environmental monitoring
• Backup and recovery systems

7. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal information:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Client Data: Retained for the duration of our business relationship plus 7 years for legal and tax purposes
• Marketing Data: Retained until you withdraw consent or for 3 years of inactivity
• Website Analytics: Anonymized after 26 months
• Support Communications: Retained for 2 years after resolution

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie usage, please refer to our Cookie Policy.

You can manage your cookie preferences through our cookie banner or your browser settings.

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email.

12. Contact Information

For privacy-related requests, please contact [email protected].