1. Overview
Blumond Solutions (Private) Limited ("Blumond", "we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website (www.blumond.com), use our services, or interact with us in any other way. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.
2. Information We Collect
We collect information in the following ways:
2.1 Information You Provide Directly
When you contact us, request a consultation, download a resource, or apply for a position, you may provide:
- →Full name, email address, phone number, and company name
- →Job title, industry, and organisation size
- →CV/resume and cover letter (for job applications)
- →Message content submitted through contact or enquiry forms
- →Payment and billing information (processed securely via third-party providers)
2.2 Information Collected Automatically
When you visit our website, we automatically collect certain technical data:
- →IP address and approximate geolocation
- →Browser type, version, and operating system
- →Pages visited, time on page, and referring URLs
- →Device identifiers and screen resolution
- →Cookie identifiers and session data (see our Cookie Policy)
2.3 Information From Third Parties
We may receive information about you from third parties, including:
- →Business partners and referral sources
- →LinkedIn and other professional networks (when you connect with us)
- →Analytics and advertising platforms
- →Publicly available commercial databases for B2B prospecting
3. How We Use Your Information
We process your personal data for the following lawful purposes:
- To provide, operate, and improve our cybersecurity and IT services
- To respond to your enquiries, quotes, and support requests
- To send service updates, invoices, and contractual communications
- To send marketing communications where you have consented or where we have a legitimate interest
- To process job applications and conduct recruitment activities
- To comply with legal obligations, including tax, audit, and regulatory requirements
- To detect, investigate, and prevent fraud, security incidents, and abuse
- To conduct analytics and improve our website, content, and service offerings
- To personalise your experience and show relevant content
4. Legal Basis for Processing
Where applicable under data protection law, we rely on the following legal bases:
- Contractual necessity — processing required to fulfil our contract with you
- Legitimate interests — improving our services, marketing to business prospects, and securing our systems
- Consent — for marketing emails and non-essential cookies (you may withdraw consent at any time)
- Legal obligation — compliance with applicable laws in Pakistan and other jurisdictions where we operate
6. International Transfers
Our operations are primarily based in Pakistan. Some of our service providers are located abroad, including in the European Union and United States. When we transfer your data internationally, we apply appropriate safeguards including standard contractual clauses, data processing agreements, and adequacy decisions where applicable.
7. Data Retention
We retain your personal data only as long as necessary for the purposes set out in this policy, and to comply with our legal obligations. Specifically:
- Client and contract data: 7 years from end of engagement (tax and audit requirements)
- Marketing contact data: Until you unsubscribe or request deletion
- Job applicant data: 6 months after a recruitment process concludes
- Website analytics data: 26 months (anonymised after 14 months)
- Support and enquiry records: 3 years
8. Your Rights
Subject to applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion of your data where there is no compelling reason to continue processing
- Restriction — request that we limit how we use your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting prior lawfulness
9. Security
As a cybersecurity company, we hold ourselves to the highest standard of data protection. We implement technical and organisational measures including end-to-end encryption, role-based access control, multi-factor authentication, regular penetration testing, and ISO 27001-aligned information security management practices. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date, and where appropriate, by email. Your continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:
- Email: privacy@blumond.com
- Phone: +92 21 0000 0000
- Post: Data Protection Officer, Blumond Solutions (Private) Limited, Karachi, Pakistan