Privacy Policy

Last Updated: 26 February 2026

1. Who We Are

This Privacy Policy explains how Karsaaz EBS Ltd and its affiliated group entities (“Karsaaz”, “we”, “us”, “our”) collect, use, and protect personal data.

Karsaaz EBS Ltd is a company registered in the United Kingdom and acts as the Data Controller for personal data collected through this website and group-managed services, unless otherwise specified in a product-specific Privacy Policy.

Karsaaz operates through group entities including:

• Karsaaz EBS Technology Solutions FZCO (UAE) — commercial operations, regional coordination, and payment processing / Merchant of Record (where applicable)
• Karsaaz Entire Business Solution (Pvt.) Ltd (Pakistan) — engineering and service delivery

Group entities may act as processors depending on the service context and contractual structure.

Publisher and billing clarification (where applicable):

Where a Karsaaz product or app is published, distributed, or billed by a Karsaaz group entity (including where the UAE entity acts as Merchant of Record), the relevant product notice, checkout flow, or product-specific Privacy Policy will identify the publishing/billing entity and clarify the applicable roles. Unless otherwise stated, Karsaaz EBS Ltd (UK) remains the Data Controller for this website and group-managed services.

2. Scope

This Policy applies when you:

• visit our website
• contact us
• subscribe to updates
• use or trial our products
• participate in events or demos

Product-specific privacy notices may apply separately.

3. Personal Data We Collect

A) Information You Provide

• name
• email
• phone
• company details
• messages or support communications
• job application data (where applicable)

B) Automatically Collected

• IP address
• browser and device information
• usage logs
• cookie data

C) Third-Party Sources

• payment processors (limited billing status / transaction references only, where applicable)
• business partners
• public business sources

We do not store full payment card numbers.

4. How We Use Data

We process personal data to:

• provide and maintain services
• respond to inquiries
• improve website functionality
• ensure security and prevent misuse
• comply with legal obligations

We do not sell personal data as defined under applicable data protection laws.

5. Legal Basis

We process personal data under applicable lawful bases, which may include:

• contract performance
• legitimate interests
• consent
• legal obligations

6. Data Sharing

We may share data with:

• Karsaaz group entities
• trusted service providers
• payment processors (where applicable)
• professional advisors
• regulatory authorities where legally required

We do not sell personal data.

7. International Transfers

Data may be processed in the UK, UAE, Pakistan, or other countries where our providers operate. Where required by law, we implement appropriate contractual and/or technical safeguards (such as UK IDTA and/or Standard Contractual Clauses, where applicable), together with appropriate security controls.

8. Data Retention

We retain data only as long as necessary for the purposes described in this Privacy Policy, or as required by applicable law, including:

• service delivery
• legal compliance
• security and fraud prevention

9. Security

We maintain appropriate technical and organisational safeguards designed to protect personal data.

10. Your Rights

Depending on your jurisdiction, you may request:

• access
• correction
• deletion
• restriction
• objection
• data portability

You may also withdraw consent where applicable.

11. Children

Our services are not directed at children.

12. Contact

Privacy inquiries: privacy@karsaaz.com

Communications may be centrally coordinated by Karsaaz EBS Ltd (UK) and relevant group teams to support timely handling across the group.