Privacy Policy

01. Who We Are

Blank Slate Technology is a technology services company providing services that may include:

• •Website design and development
• •Custom software development
• •Web and mobile applications
• •ERP and CRM solutions
• •E-commerce development
• •Cloud and deployment solutions
• •API integrations
• •Artificial Intelligence and automation
• •UI/UX and graphic design
• •Digital marketing and SEO
• •Technical support and IT consulting

We work with businesses and individuals in Pakistan and internationally.

02. Information We May Collect

The information we collect depends on how you interact with us.

03. How We Use Your Information

We may process personal information where reasonably necessary to:

• •Respond to enquiries
• •Prepare quotations and proposals
• •Communicate with prospective and existing Clients
• •Deliver contracted services
• •Manage projects and Client relationships
• •Process and maintain payment or billing records
• •Provide technical support
• •Maintain and improve our website
• •Monitor website performance
• •Detect fraud, abuse, or security threats
• •Maintain business and accounting records
• •Send relevant business or marketing communications
• •Meet legal, regulatory, contractual obligations
• •Establish, exercise, or defend legal claims

We do not use personal information for purposes materially unrelated to those for which it was collected without an appropriate basis.

04. Legal Bases Where Applicable

Where laws such as the UK GDPR or EU GDPR apply, we may process personal information based on one or more applicable legal bases, including:

05. Client and Project Data

During a project, Clients may provide us with business information, credentials, databases, customer information, files, or other data required to perform the agreed services. Where we process personal information solely on a Client's instructions as part of a service, the Client may be the relevant controller/business and Blank Slate Technology may act as a processor/service provider, depending on applicable law. Clients are responsible for ensuring that they have the appropriate legal authority to provide such information to us and instruct us to process it. For projects involving substantial personal data processing, the parties may enter into an appropriate Data Processing Agreement where required.

06. Payment Information

Payments may be processed through banks, payment providers, financial institutions, or third-party payment services. We generally do not directly store complete payment-card details when transactions are handled by an independent payment processor. Payment providers process information according to their own privacy and security practices. We may retain transaction records, invoices, payment references, and related accounting information where required for business, contractual, tax, or legal purposes.

07. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support functionality, understand website usage, remember preferences, measure performance, and support marketing activities. Cookies may include:

• •Essential cookies
• •Functional cookies
• •Analytics cookies
• •Performance cookies
• •Advertising or marketing cookies, where used

Where required by applicable law, non-essential cookies will be used subject to appropriate consent mechanisms. You may also manage certain cookies through your browser settings. Disabling some cookies may affect website functionality.

08. Website Analytics

We may use analytics tools to understand how visitors interact with our website. Analytics services may collect information such as page views, device information, approximate location, traffic sources, and website interactions. Such information helps us understand website performance and improve our services and user experience. Where third-party analytics providers are used, their processing is also governed by their applicable terms and privacy policies.

09. Contact Forms and Communications

When you contact Blank Slate Technology through a website form, email, WhatsApp, telephone, social media, or another communication channel, we may retain your contact details and correspondence to:

• •Respond to your request
• •Provide quotations
• •Discuss projects
• •Maintain Client records
• •Provide support
• •Follow up on legitimate business enquiries

Communications made through third-party platforms are also subject to those platforms' respective privacy practices.

10. Marketing Communications

Where permitted by applicable law, we may contact existing or prospective Clients about relevant Blank Slate Technology services. Where consent is legally required, we will seek it before sending applicable direct marketing communications. You may request to stop receiving marketing communications from us at any time. Operational communications relating to an active project, transaction, security matter, or contractual relationship are not considered general marketing communications.

11. How We Share Information

We do not sell personal information to third parties. We may share information where reasonably necessary with:

• •Hosting and cloud providers
• •Email and communication providers
• •Analytics providers
• •Payment processors and financial institutions
• •Project management or collaboration platforms
• •Professional advisers
• •Contractors or service providers assisting delivery
• •Security and infrastructure providers
• •Government/regulatory authorities where required

We seek to disclose only information reasonably necessary for the relevant purpose.

12. Third-Party Services

Our website and services may integrate with third-party services, platforms, APIs, plugins, cloud providers, social networks, payment providers, analytics tools, or other external technologies. Those organizations may independently collect or process information according to their own privacy policies. Blank Slate Technology does not control the independent privacy practices of third-party services. We encourage users to review the privacy policies of relevant third-party providers.

13. International Data Processing

Because Blank Slate Technology works with international Clients and may use global technology providers, personal information may be processed or stored outside the country in which it was originally collected. Where applicable privacy laws require safeguards for international transfers, we will use appropriate contractual, organizational, or other legally recognized safeguards where required.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or where retention is required for contractual, accounting, tax, security, dispute-resolution, or legal purposes. Retention periods may vary depending on:

• •Type of information
• •Client relationship
• •Project requirements
• •Legal obligations
• •Security requirements
• •Potential disputes or claims

When information is no longer reasonably required, we may securely delete, anonymize, or otherwise dispose of it, subject to technical and legal limitations.

15. Data Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. Measures may include:

• •Access controls
• •Secure authentication
• •Encryption technologies
• •Restricted admin access
• •Secure hosting
• •Software updates
• •Security monitoring
• •Backup procedures
• •Internal access limitations

However, no internet transmission, cloud platform, server, website, or electronic storage system can be guaranteed to be completely secure.

16. Client Credentials

Clients may provide temporary access to hosting accounts, websites, APIs, cloud services, social accounts, databases, or other systems where necessary for project delivery. Clients should use secure credential-sharing practices and, where appropriate, create temporary or limited-access accounts. We recommend changing or revoking temporary credentials after project completion.

17. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, potentially including the right to:

• •Request access to your information
• •Request correction of inaccurate info
• •Request deletion in certain circumstances
• •Object to certain processing
• •Request restriction of processing
• •Withdraw consent where applicable
• •Request data portability
• •Opt out of marketing communications
• •Submit a complaint to data authority

These rights are not absolute and may be subject to legal exceptions. We may request reasonable information to verify your identity before processing a privacy-rights request.

18. UK and European Users

Where UK or European data protection laws apply to our processing, eligible individuals may exercise the rights provided under the applicable UK GDPR, EU GDPR, or related legislation. Where required, Blank Slate Technology will process applicable requests and implement relevant safeguards in accordance with the law that applies to the particular processing activity. Nothing in this Privacy Policy is intended to reduce rights that individuals have under mandatory applicable privacy law.

19. Children's Privacy

Our general business website and professional technology services are not intentionally directed toward young children. We do not knowingly seek to collect children's personal information through our general website without an appropriate lawful basis or authorization where required. If you believe a child has provided personal information to us inappropriately, please contact us.

20. Automated and AI Technologies

Some services we provide may incorporate artificial intelligence, automation, or third-party AI platforms. Where Client information is processed through an AI or automation service as part of a project, the specific processing may depend on the agreed solution and the relevant third-party provider. Clients should not submit highly sensitive, confidential, regulated, or personal information to AI systems unless the relevant solution has been appropriately evaluated and authorized for that purpose.

21. External Links

Our website may contain links to external websites or services. We are not responsible for the content, security, availability, or privacy practices of independent third-party websites. Visiting an external website is subject to that website's own policies and terms.

22. Business Transfers

If Blank Slate Technology is involved in a merger, acquisition, restructuring, sale of assets, or similar business transaction, relevant information may be transferred as part of that transaction where legally permitted and subject to applicable safeguards.

23. Legal Disclosure

We may disclose information where reasonably necessary to:

• •Comply with applicable law
• •Respond to lawful legal processes
• •Protect our legal rights
• •Protect Clients or users
• •Investigate fraud or security incidents
• •Enforce contractual agreements
• •Prevent unlawful activity

24. Data Breaches

If we become aware of a personal data breach affecting information for which we have relevant legal responsibilities, we will assess the incident and take reasonable responsive measures. Where applicable law requires notification to affected individuals, Clients, or regulatory authorities, notifications will be handled according to applicable requirements.

25. Privacy of Client-Owned Systems

Where Blank Slate Technology develops a website, application, ERP, CRM, e-commerce platform, or other system for a Client, that Client is generally responsible for establishing its own privacy policy and compliance framework for information it collects from its users after deployment, unless compliance services are expressly included in our agreement. Our Privacy Policy does not automatically become the privacy policy of software or websites developed for our Clients.

26. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technologies, business practices, or applicable legal requirements. The latest version will be published on our website with an updated “Last Updated” date. Material changes may be communicated through additional means where appropriate or legally required.

27. Relationship With Our Terms of Service

This Privacy Policy should be read together with our Terms of Service and any applicable project-specific agreement. Where a separate Data Processing Agreement or Client contract applies to particular personal data processing, that agreement may contain additional or more specific requirements.