IFTS Privacy Policy

1 Scope of This Privacy Policy

This Privacy Policy applies to all users of the IFTS Platform, including individuals, entrepreneurs, freelancers, sole proprietors, partnerships, companies, non-profit organizations, and other entities that use our services.

It applies to information collected through:

• IFTS Website
• IFTS Web Application
• IFTS Client Portal
• Online Service Forms
• Online Checkout
• WhatsApp Business
• Email Communications
• Customer Support
• Payment Verification Process
• Digital Document Submission
• Any other official communication channel operated by IFTS

This Privacy Policy also applies to information collected before, during, and after the delivery of our professional services.

2 Information We Collect

To provide our services efficiently and comply with legal and regulatory requirements, IFTS may collect different categories of information depending on the service requested.

Information we may collect includes:

• Personal Information
• Business Information
• Financial Information
• Identity Verification Information
• Government Registration Information
• Documents uploaded by clients
• Client Portal account information
• Communication records
• Technical and usage information
• Payment-related information

We only collect information that is reasonably necessary to provide, manage, improve, and support our services.

3 Personal Information

Depending on the selected service, IFTS may collect personal information including, but not limited to:

• Full Name
• Father's or Husband's Name
• Date of Birth
• CNIC or NICOP Number
• Passport Number (where applicable)
• Nationality
• Residential Address
• Mailing Address
• Mobile Number
• Email Address
• Emergency Contact Information (where applicable)
• Photograph (where required)
• Signature (digital or scanned)
• Occupation
• Employment Details
• Tax Residency Information

This information is collected only for legitimate business purposes, identity verification, regulatory compliance, and service processing.

4 Business Information

For business-related services, IFTS may collect information relating to your business or organization, including:

• Business Name
• Trade Name
• Business Address
• Business Contact Details
• National Tax Number (NTN)
• Sales Tax Registration Number (STRN)
• Company Incorporation Number (CUIN)
• Business Registration Certificates
• Business Activity Details
• Industry Classification
• Ownership Structure
• Shareholding Information
• Directors' Information
• Partners' Information
• Authorized Representatives
• Import & Export Registration Details
• Trademark Information
• Other business records required for the requested service

Business information is collected solely for the purpose of delivering professional services and fulfilling regulatory requirements.

5 Financial & Payment Information

To process service payments and related financial transactions, IFTS may collect limited payment-related information.

This may include:

• Bank Name
• Account Title
• Transaction Reference Number
• Payment Date
• Payment Amount
• Bank Transfer Receipt
• Raast Transaction Details
• Payment Status
• Invoice Information
• Billing Details

For Debit and Credit Card transactions, payments are processed securely through authorized third-party payment gateways.

Recurring subscription payments, where available, are processed using secure payment tokenization provided by authorized payment partners.

Government challans and statutory payment receipts submitted by clients may be retained as part of the service record for regulatory, accounting, auditing, fraud prevention, and record-keeping purposes.

6 Documents You Upload

Many IFTS services require supporting documentation to complete regulatory and professional processes.

Clients may upload documents including, but not limited to:

• CNIC
• Passport
• Tax Registration Certificates
• Business Registration Documents
• Financial Statements
• Bank Statements
• Utility Bills
• Rental Agreements
• Property Documents
• Contracts
• Government Notices
• Tax Returns
• Licenses
• Certificates
• Identity Verification Documents
• Other supporting records required for the selected service

Clients are responsible for ensuring that uploaded documents are accurate, complete, authentic, and legally owned or authorized for submission.

7 Client Portal Information

Where applicable, clients may register for an IFTS Client Portal account to manage their services online.

When you create or use a Client Portal account, we may collect information such as:

• Registered Mobile Number
• Registered Email Address
• Username
• Encrypted Password
• Account Preferences
• Login History
• Device Information
• Browser Information
• IP Address
• Service Activity Logs
• Uploaded Files
• Form Submission History
• Notification Preferences
• Communication History
• Account Security Logs

This information helps us provide a secure, reliable, and personalized experience while protecting client accounts against unauthorized access.

8 Automatically Collected Technical Information

When you access the IFTS Platform, certain technical information may be collected automatically to help us operate, secure, and improve our services.

This information may include:

• IP Address
• Browser Type and Version
• Operating System
• Device Type
• Language Preferences
• Date and Time of Access
• Pages Visited
• Referral Source
• Session Duration
• Clickstream Data
• Error Logs
• Cookies and Similar Technologies
• Website Performance Metrics

This information is generally collected in an aggregated or technical form and is used to:

• Improve website performance.
• Enhance user experience.
• Monitor platform security.
• Detect fraud or unauthorized access.
• Diagnose technical issues.
• Analyze anonymous platform usage trends.

Where required by applicable law, the use of cookies and similar technologies will be subject to user consent or browser preferences.

9 How We Use Your Information

IFTS uses the information collected from clients only for legitimate business, operational, legal, and regulatory purposes.

Your information may be used to:

• Process and deliver the services you request.
• Verify your identity.
• Create and manage your Client Portal account.
• Complete government registrations and regulatory filings.
• Process payments and generate invoices.
• Verify transactions and prevent fraud.
• Respond to inquiries and provide customer support.
• Communicate important service updates.
• Improve our website, Web Application, and digital services.
• Maintain internal records.
• Comply with applicable laws and regulatory obligations.
• Protect the security and integrity of the IFTS Platform.

We collect and use only the information reasonably necessary to perform the requested services and improve the overall client experience.

10 Government Authorities & Regulatory Processing

Many IFTS services require the submission or verification of information with government departments, regulatory authorities, or other official organizations.

Where necessary to deliver the requested service, your information may be submitted to or verified with entities such as:

• Federal Board of Revenue (FBR)
• Securities & Exchange Commission of Pakistan (SECP)
• Pakistan Single Window (PSW)
• Punjab Revenue Authority (PRA)
• Khyber Pakhtunkhwa Revenue Authority (KPRA)
• Sindh Revenue Board (SRB)
• Balochistan Revenue Authority (BRA)
• Intellectual Property Organization of Pakistan (IPO Pakistan)
• Pakistan Software Export Board (PSEB)
• Other competent authorities relevant to your selected service

Only the information necessary for processing the requested service will be shared with the relevant authority.

IFTS does not control how government authorities process or retain information once it has been lawfully submitted to them.

11 Communication Preferences

To provide efficient service and keep clients informed, IFTS may communicate with you throughout the service lifecycle.

Communications may include:

• Order Confirmations
• Payment Confirmations
• Client Portal Invitations
• OTP Verification Messages
• Service Status Updates
• Requests for Additional Information
• Quotations
• Package Upgrade Notifications
• Invoice Notifications
• Completion Notifications
• Courier Tracking Information
• Subscription Renewal Notices
• Security Alerts
• Important Platform Announcements

Official communication channels include:

• Email
• WhatsApp Business
• Client Portal Notifications
• SMS (where applicable)

By using the IFTS Platform, you consent to receiving service-related communications through these official channels.

Marketing communications, if any, will only be sent where permitted by applicable law, and you may opt out at any time.

12 Cookies & Website Analytics

The IFTS Platform may use cookies and similar technologies to improve website functionality, security, and user experience.

Cookies may be used to:

• Remember your preferences.
• Maintain secure login sessions.
• Improve website performance.
• Analyze website traffic and usage trends.
• Detect suspicious activity.
• Prevent fraud and unauthorized access.

We may also use analytics tools to better understand how visitors interact with our platform. These tools help us improve navigation, performance, and overall user experience.

Where required by applicable law, users may manage cookie preferences through their browser settings or any cookie management tools provided on the platform.

Disabling certain cookies may affect the functionality of some features of the website or Client Portal.

13 Client Portal Security

Protecting client information is a core priority of IFTS.

To help safeguard your Client Portal account, we implement reasonable administrative, technical, and organizational security measures designed to reduce the risk of unauthorized access, alteration, disclosure, or loss of information.

Security measures may include:

• Secure account authentication.
• Encrypted password storage.
• OTP-based account verification.
• Access controls for authorized personnel.
• Activity logging and monitoring.
• Secure document management.
• Regular system maintenance and security updates.

Clients also play an important role in protecting their accounts and should:

• Keep login credentials confidential.
• Use strong passwords.
• Protect their registered email address and mobile number.
• Log out from shared or public devices.
• Notify IFTS immediately if unauthorized account activity is suspected.

While we take reasonable steps to protect client information, no internet-based system can guarantee absolute security.

14 Mobile & Email Verification (OTP)

To protect client accounts and reduce unauthorized access, IFTS may require verification of your registered mobile number and email address.

Verification may be completed through:

• Mobile One-Time Password (OTP)
• Email One-Time Password (OTP)

OTP verification helps:

• Confirm account ownership.
• Protect Client Portal access.
• Secure sensitive transactions.
• Reduce fraudulent account activity.

For your security:

• OTPs should never be shared with anyone.
• IFTS employees will never ask you to disclose an OTP.
• Any request for your OTP claiming to be from IFTS should be treated as suspicious and reported immediately.

15 Payment Security

IFTS is committed to providing secure payment processing for all clients.

Payments may be made through:

• Online Bank Transfer
• Raast
• Debit Card
• Credit Card
• Other officially approved payment methods

Debit and Credit Card transactions are processed exclusively through authorized third-party payment gateways using industry-standard security technologies.

For your protection:

IFTS will never contact you by phone, WhatsApp, email, SMS, or any other communication channel requesting confidential banking or payment credentials.

If you receive such a request, you should not share any information and should contact IFTS immediately through our official support channels.

16 Subscription Services & Recurring Payments

Certain IFTS services may be offered on a recurring subscription basis.

Examples include:

• Monthly Sales Tax Return Filing
• Accounting & Bookkeeping
• Payroll Management
• Website Maintenance
• Digital Marketing Retainers
• Business Automation Support
• Other recurring professional services

Where a client authorizes recurring card payments, payment processing is performed through secure payment tokenization provided by the authorized payment gateway.

IFTS does not store or retain clients' full payment card information for recurring billing.

Subscription details, including billing frequency, renewal dates, pricing, and cancellation procedures, will be clearly presented before the client confirms the subscription.

Clients may manage or cancel eligible subscriptions in accordance with the applicable subscription terms and the IFTS Refund Policy.

17 Information Sharing & Disclosure

IFTS respects the confidentiality of your personal and business information and does not sell, rent, or trade your information to third parties for their marketing purposes.

We may share your information only where necessary to:

• Deliver the services you have requested.
• Comply with applicable laws and regulations.
• Process registrations and filings with government authorities.
• Verify transactions and prevent fraud.
• Facilitate payment processing.
• Deliver documents through courier services.
• Provide communication and notification services.
• Protect the legal rights, property, or safety of IFTS, our clients, or others.
• Respond to lawful requests from courts, regulatory authorities, or law enforcement agencies.

Information will be shared only with parties that have a legitimate business or legal need to receive it.

18 Third-Party Service Providers

To operate our Business Infrastructure Platform efficiently, IFTS may engage trusted third-party service providers.

These providers may assist with services including:

• Payment Gateway Services
• Banking Services
• Website Hosting
• Cloud Infrastructure
• Client Portal Infrastructure
• Email Delivery Services
• WhatsApp Business Messaging
• SMS Services
• Identity Verification
• Analytics Services
• Courier & Logistics
• Technical Support
• Cybersecurity Services
• Backup & Disaster Recovery

These service providers are granted access only to the information necessary to perform their assigned functions and are expected to maintain appropriate confidentiality and security standards.

Although IFTS carefully selects reputable providers, each third-party provider operates under its own privacy and security practices.

19 Data Retention

IFTS retains personal and business information only for as long as necessary to:

• Deliver the requested services.
• Maintain Client Portal records.
• Comply with legal, tax, accounting, and regulatory obligations.
• Resolve disputes.
• Enforce contractual rights.
• Maintain internal business records.
• Prevent fraud and unauthorized activities.

Retention periods may vary depending on:

• Applicable laws and regulations.
• Government record-keeping requirements.
• Nature of the selected service.
• Ongoing client relationship.
• Legitimate business requirements.

When information is no longer required, IFTS will take reasonable steps to securely delete, anonymize, or otherwise dispose of it in accordance with applicable legal obligations and internal data management practices.

20 Your Privacy Rights

Subject to applicable laws and regulatory requirements, you may have the right to:

• Request access to your personal information held by IFTS.
• Request correction of inaccurate or incomplete information.
• Update your contact information.
• Request deletion of information where legally permissible.
• Withdraw consent where processing is based on your consent.
• Object to certain types of data processing where applicable.
• Request clarification regarding how your information is used.
• Manage communication preferences, including marketing communications where offered.

Certain requests may not be fulfilled where IFTS is legally required to retain information, complete an ongoing service, comply with regulatory obligations, or protect its legal rights.

Requests relating to privacy should be submitted through our official support channels.

21 International Data Transfers

IFTS primarily operates within Pakistan. However, some of our trusted technology service providers may process or store data on secure servers located outside Pakistan.

Where cross-border processing occurs, IFTS will take reasonable steps to ensure that appropriate safeguards are in place to protect your personal information and that such processing is carried out in accordance with applicable contractual obligations and relevant legal requirements.

22 Children's Privacy

The IFTS Platform is intended for individuals and organizations that are legally capable of entering into binding agreements.

Our services are not directed to children under the age of 18 without the involvement or authorization of a parent, legal guardian, or other authorized representative where required by law.

IFTS does not knowingly collect personal information directly from children in violation of applicable laws.

If we become aware that personal information has been collected improperly, we will take reasonable steps to delete or restrict access to such information where appropriate.

23 Changes to This Privacy Policy

IFTS may update this Privacy Policy from time to time to reflect:

• Changes in applicable laws or regulations.
• Enhancements to our website or Web Application.
• New Client Portal features.
• Introduction of new services.
• Changes to payment methods.
• Security improvements.
• Operational or business requirements.

The latest version of this Privacy Policy will always be published on the IFTS Platform.

The updated Privacy Policy becomes effective from the date of publication unless otherwise stated.

Clients are encouraged to review this Privacy Policy periodically to stay informed about how their information is protected.

24 Contact & Privacy Requests

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us through our official channels.