Privacy Policy

1. Who we are

EonAstra (SMC-Private) Limitedis a Single Member Company incorporated in Pakistan and registered with the Securities & Exchange Commission of Pakistan (SECP) and the Pakistan Software Export Board (PSEB). For the purposes of applicable data protection laws, EonAstra is the party responsible for (the "controller" of) personal data collected through the Site. You can reach us about privacy at info@eonastra.com.

2. Scope of this policy

This policy applies only to the Site. It does not apply to our client engagements (which are governed by separate written agreements) or to our standalone products and applications, which are distributed worldwide and may have their own privacy notices and be subject to third-party platform terms (for example, the Apple App Store or Google Play). Where a product has its own privacy notice, that notice governs that product.

3. Information we collect

a. Information you provide to us

When you submit our contact form or email us, we collect the information you choose to give us, which typically includes your name, email address, phone number (if provided), and the contents of your message or project description. You control what you send us — please do not submit sensitive personal information that is not necessary for your inquiry.

b. Information collected automatically

When you visit the Site, our hosting and infrastructure providers automatically record limited technical data, such as your IP address, browser type and settings, device information, referring pages, and the date and time of your request, in server logs used for security, diagnostics, and to operate the Site. We also use a privacy-friendly, cookieless analytics service to understand aggregate, anonymised usage of the Site (for example, which pages are viewed). This analytics data does not identify you personally and does not track you across other websites.

c. Information we do not collect

We do not knowingly collect payment card details through the Site, and we do not use advertising cookies, cross-site tracking, or data brokers. We do not knowingly collect personal information from children (see Section 11).

4. How we use information

• To respond to your inquiries and communicate with you.
• To provide, operate, maintain, secure, and improve the Site.
• To evaluate potential engagements and prepare proposals you request.
• To detect, prevent, and address fraud, abuse, security, or technical issues.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell, rent, or trade your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.

5. Legal bases (for users in the EEA, UK, and similar regimes)

Where data protection law such as the GDPR or UK GDPR applies, we rely on the following legal bases: your consent (which you may withdraw at any time); our legitimate interests in operating, securing, and improving our business and the Site (balanced against your rights); the performance of a contract or steps taken at your request before entering one; and compliance with legal obligations.

6. Cookies and similar technologies

The Site does not use tracking or advertising cookies. We may use strictly necessary browser storage required for core functionality (for example, to remember display preferences or to keep the Site secure). Because our analytics is cookieless, no consent banner is required for tracking that we do not perform. You can control or clear browser storage through your browser settings at any time.

7. How we share information

We share information only as needed to run the Site and our business, and only with parties bound to protect it:

• Service providers (processors) who operate the Site on our behalf — including our website host and infrastructure provider, our contact-form delivery provider, our content management provider, and our email provider. These providers process data solely to provide their services to us.
• Legal and safety — where required by law, regulation, legal process, or governmental request, or to protect the rights, property, safety, or security of EonAstra, our users, or the public, or to enforce our agreements.
• Business transfers — in connection with a merger, acquisition, financing, reorganisation, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• With your consent — for any other purpose disclosed to you at the time.

8. International data transfers

We operate globally and our service providers may store and process information in countries other than your own, including outside your country of residence, where data protection laws may differ. By using the Site or contacting us, you understand that your information may be transferred to and processed in such locations. Where required, we take reasonable steps to ensure appropriate safeguards are in place for such transfers.

9. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy — for example, to respond to and follow up on your inquiry, to maintain business records, and to comply with legal obligations, resolve disputes, and enforce our agreements. When it is no longer needed, we delete or anonymise it.

10. Security

We use reasonable technical and organisational measures designed to protect information against loss, misuse, and unauthorised access, disclosure, alteration, and destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You provide information to us at your own risk, and you are responsible for keeping your own credentials and devices secure.

11. Children's privacy

The Site is intended for a business audience and is not directed to children. We do not knowingly collect personal information from children under the age of 16 (or the minimum age required in your jurisdiction). If you believe a child has provided us personal information, please contact us and we will delete it.

12. Your rights and choices

Depending on where you live, you may have rights to access, correct, update, port, restrict, or delete your personal information, to object to certain processing, and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email us at info@eonastra.com. We will respond within the timeframe required by applicable law and may need to verify your identity before acting on a request. We will not discriminate against you for exercising your rights.

13. Third-party links

The Site may link to third-party websites, products, or services that we do not operate or control (for example, our social media profiles or client sites). We are not responsible for the privacy practices or content of those third parties, and this policy does not apply to them. We encourage you to review their policies.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date above. Material changes will be made reasonably prominent. Your continued use of the Site after an update constitutes acceptance of the revised policy.

15. Contact us

If you have any questions, requests, or concerns about this Privacy Policy or your personal information, contact us at info@eonastra.com. Please also see our Terms of Service, which govern your use of the Site.