Privacy Policy
Last updated 03 Nov 2026. This is a starting template — have it reviewed by your legal adviser before going live.
What we collect
Account details (name, designation, email, mobile, CNIC for individuals), company details, application answers and uploaded documents, and technical logs (IP address, sign-in times, verification searches).
Why we use it
To process certification applications; to send one-time sign-in codes and status notifications; to issue and maintain certificates; and to protect the portal against misuse.
What is public
For issued certificates listed in the public register: certificate number, holder name, standard, scope, issue / renewal / expiry dates and status. Documents and application data are never public.
Storage and security
Documents are stored in private storage and are available only to you and Pak CA's administrator. Passwords are hashed; sign-in requires a code sent to your email.
Your rights
You can request a copy or correction of your data by contacting info@pakca.pk. Certificate records must be retained as required by certification rules.