1. Introduction
ecomflow.pk ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ecomflow.pk and use our services.
This policy complies with the General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act (CCPA).
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and contact information (email address, phone number)
- Business information (company name, business type, revenue)
- Marketing preferences and communication history
- Payment and billing information
- Account credentials and authentication data
2.2 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on pages
- Referring website addresses
- Cookies and similar tracking technologies
2.3 Information from Third Parties
We may receive information from:
- Social media platforms (if you interact with our content)
- Advertising partners and analytics providers
- Payment processors and financial institutions
- Business partners and service providers
3. How We Use Your Information
We use collected information for the following purposes:
- To provide, operate, and maintain our services
- To process your applications and respond to inquiries
- To communicate with you about our services, updates, and offers
- To improve our website and services through analytics
- To personalize your experience and deliver targeted content
- To run digital marketing campaigns and measure effectiveness
- To detect, prevent, and address technical issues or fraud
- To comply with legal obligations and enforce our terms
4. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on:
- Consent: You have given clear consent for us to process your personal data
- Contract: Processing is necessary for a contract we have with you
- Legal Obligation: Processing is necessary to comply with the law
- Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
For more information about our use of cookies, please see our Cookie Policy.
6. Data Sharing and Disclosure
We may share your information with:
6.1 Service Providers
Third-party vendors who perform services on our behalf:
- Cloud hosting and storage providers
- Email and communication platforms
- Analytics and advertising services
- Payment processors
- Customer relationship management (CRM) systems
6.2 Business Transfers
In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
6.3 Legal Requirements
When required to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Investigate potential violations of our terms
- Prevent fraud or illegal activities
7. International Data Transfers
Your information may be transferred to and maintained on computers located outside of your country or jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with third-party processors
- Ensuring adequate levels of data protection
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we securely delete or anonymize it.
Typical retention periods:
- Account information: Duration of account plus 3 years
- Marketing data: Until you opt out or 3 years of inactivity
- Transaction records: 7 years for tax and legal compliance
- Analytics data: 26 months
9. Your Rights
9.1 GDPR Rights (EU/UK Users)
You have the right to:
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data
- Restriction: Request restriction of processing
- Data Portability: Request transfer of your data
- Object: Object to processing of your personal data
- Withdraw Consent: Withdraw consent at any time
- Lodge a Complaint: File a complaint with a supervisory authority
9.2 CCPA Rights (California Users)
California residents have the right to:
- Know what personal information is collected, used, shared, or sold
- Delete personal information held by businesses
- Opt-out of the sale of personal information
- Non-discrimination for exercising CCPA rights
Note: We do not sell your personal information to third parties.
10. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
- Secure data centers and hosting infrastructure
However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
11. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be communicated via email or prominent notice on our website.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
For EU/UK users, you may also contact your local data protection authority if you have concerns about how we process your personal data.