Privacy Policy
How we handle personal data across this website and our group companies, aligned with Pakistani law and the EU General Data Protection Regulation.
1. Who we are
Al-Quddus Group Private Limited (“Al-Quddus Group”, “we”, “us”) is the data controller for personal data collected through this website. Our registered head office is 18th Floor, B.R.R Tower, Hassan Ali Street, I.I Chundrigar Road, City Railway Colony, Karachi 74000, Pakistan. Privacy questions may be sent to Contact@alquddusgroup.com.
2. Personal data we collect
- Enquiry data — name, email address, telephone number, the service you are interested in and your message, submitted through our contact form.
- Technical data — IP address, browser type, device information and pages visited, recorded in standard server logs and used for security and abuse prevention.
- Correspondence — emails, WhatsApp messages and call records where you contact us directly.
We do not knowingly collect data from children under 16, and we do not collect special-category data through this website.
3. Why we process it, and our lawful basis
- To answer enquiries and provide quotations — performance of a contract, or steps taken at your request prior to a contract.
- To operate and secure the website — legitimate interests in preventing spam, fraud and abuse.
- To meet statutory obligations — compliance with tax, corporate and record-keeping law in Pakistan.
- Marketing — only with your consent, which you may withdraw at any time.
4. How long we keep it
Enquiry records are retained for up to 24 months from your last contact with us. Records required for tax, corporate or contractual purposes are retained for the statutory period applicable in Pakistan, generally six years. Server logs are retained for up to 12 months.
5. Sharing and international transfers
We share personal data only with: our group companies where relevant to your enquiry; our hosting and email providers acting as processors under contract; and government authorities, auditors or legal advisers where required by law. We do not sell personal data. Where data is transferred outside your country, we rely on appropriate safeguards such as standard contractual clauses.
6. Your rights
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, or object to processing based on legitimate interests. Visitors in the European Economic Area and the United Kingdom hold these rights under the GDPR and may also lodge a complaint with their supervisory authority. To exercise a right, email Contact@alquddusgroup.com; we respond within 30 days.
7. Security
This website is served over HTTPS with HSTS, form submissions are protected by CSRF tokens, rate limiting and spam filtering, and access to enquiry data is restricted to authorised staff. No transmission over the internet can be guaranteed to be completely secure; we notify affected individuals and the relevant authority without undue delay where a breach presents a risk.
8. Cookies
See our Cookie Policy for details of the cookies this site uses.
9. Changes to this policy
We review this policy at least annually. Material changes will be posted on this page with a revised update date.