Privacy Policy

This Privacy Policy applies to STARSYNX (PVT) LTD. ("STARSYNX," "we," "us," or "our"), a technology and digital solutions company providing software development, digital experiences, intelligent systems, automation, digital growth, IT solutions, and related technology services.

STARSYNX operates and serves customers across multiple jurisdictions, including Pakistan, the United Arab Emirates, Australia, the United States, and other markets.

For privacy enquiries, please contact us at contact@starsynx.com.

This policy applies to personal information collected through STARSYNX websites, contact forms, enquiry forms, newsletters, communications, digital services, applications, recruitment processes, customer relationships, and other activities that expressly reference this Privacy Policy.

Some STARSYNX products, platforms, applications, or services may have additional privacy notices. Where a specific notice applies, that notice will govern the relevant processing to the extent it conflicts with this general policy.

This policy does not automatically apply to websites or services operated independently by third parties, even if they are linked from our website.

Depending on the nature of your interaction with STARSYNX, we may process the following categories of information:

• Identity information, such as name and professional role.
• Contact information, such as email, telephone, WhatsApp, and business address.
• Business information, such as organization, industry, project, and service requirements.
• Communication information, including enquiries, correspondence, feedback, and support requests.
• Transaction and contractual information where relevant to a service relationship.
• Technical information, including IP address, browser, device, operating system, and log information.
• Website usage information, including pages viewed, interactions, and referring sources.
• Recruitment information voluntarily submitted during employment applications.
• Preferences and communication choices.
• Other information you voluntarily provide to us.

We may use personal information to respond to enquiries, communicate with you, provide requested services, prepare proposals or quotations, manage business relationships, deliver projects, process transactions, provide customer support, and maintain our websites and systems.

We may also use information to improve our products and services, understand website usage, protect our systems, prevent fraud or misuse, conduct internal administration, comply with legal obligations, enforce agreements, and establish or defend legal claims.

Where permitted by applicable law, we may use information for marketing and business communications. You can unsubscribe from marketing communications at any time.

Where privacy laws such as the GDPR apply, we may process personal information on one or more lawful bases, including consent, performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a task carried out in the public interest where applicable, or legitimate interests where those interests are not overridden by applicable rights and freedoms.

The appropriate legal basis depends on the nature and circumstances of the particular processing activity.

Where processing relies on consent, you may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

We do not generally seek to collect sensitive personal information through our public website. Please do not submit sensitive information through ordinary contact forms unless it is specifically requested and there is a lawful reason to provide it.

Where sensitive or special-category information is processed, STARSYNX will handle it only where permitted by applicable law and where an appropriate legal basis or exception applies.

Sensitive information may include categories such as health, biometric, financial, racial or ethnic, religious, political, genetic, or other information that receives enhanced protection under applicable privacy laws.

STARSYNX may use cookies and similar technologies to operate our websites, remember preferences, understand website usage, improve functionality, measure performance, maintain security, and support communications or marketing where permitted.

These technologies may include essential cookies, analytics technologies, functionality technologies, and, where applicable, advertising or marketing technologies.

You can control cookies through your browser settings and, where available, through our cookie or privacy preference controls. Disabling certain cookies may affect website functionality.

Where consent is legally required for non-essential cookies or similar technologies, we will seek consent in accordance with applicable law.

We may use analytics and measurement technologies to understand website traffic, user interactions, performance, and technical issues. These technologies may collect information such as device characteristics, approximate location, pages visited, referral information, and interaction events.

Analytics providers may process information on our behalf or as independent controllers depending on the service and applicable legal framework.

Where required, we will provide appropriate consent mechanisms or other legally required controls for analytics and similar technologies.

We may use your contact information to respond to enquiries, provide requested information, communicate about projects or services, send operational notices, and maintain business relationships.

Where permitted by applicable law, we may send newsletters, marketing communications, company updates, or service information. You may unsubscribe from marketing communications at any time.

Opting out of marketing communications does not necessarily stop essential service communications, security notifications, contractual communications, or other messages required to provide requested services.

We may use carefully selected third-party providers to operate our business and services. Depending on the service, these may include providers of hosting, cloud infrastructure, email, analytics, cybersecurity, communications, payment processing, customer relationship management, development, support, and professional services.

Third parties may process information according to their own privacy policies or contractual arrangements with STARSYNX. Where STARSYNX acts as a controller and appoints a processor, we seek appropriate contractual and security protections.

We may also disclose information to professional advisers, auditors, insurers, legal authorities, regulators, or other recipients where required or permitted by applicable law.

Because STARSYNX operates internationally and relies on technology infrastructure and service providers that may be located in different countries, personal information may be transferred across borders.

Where a jurisdiction requires a specific transfer mechanism, STARSYNX will seek to use an applicable legal mechanism, such as an adequacy decision, standard contractual clauses, contractual safeguards, or another mechanism recognized by the applicable privacy law.

Individuals may contact us for information about applicable international transfer safeguards where such disclosure is required by law.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, destruction, or disclosure.

Depending on the system and service, safeguards may include access controls, authentication mechanisms, encryption where appropriate, monitoring, secure development practices, backups, contractual controls, and organizational security procedures.

No internet transmission, electronic storage system, or security control can be guaranteed to be completely secure. Accordingly, while we work to protect personal information, we cannot guarantee absolute security.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining business records, resolving disputes, enforcing agreements, preventing fraud, and complying with legal, accounting, tax, regulatory, or reporting obligations.

Retention periods vary depending on the type of information, purpose of processing, contractual relationship, legal requirements, security considerations, and whether a legitimate business need continues to exist.

When information is no longer required, we may securely delete, anonymize, aggregate, or otherwise dispose of it, subject to applicable legal and operational requirements.

Depending on your location and the laws that apply to you, you may have some or all of the following rights:

• Right to know whether we process personal information about you.
• Right to request access to personal information we hold about you.
• Right to request correction of inaccurate or incomplete information.
• Right to request deletion or erasure, subject to applicable legal exceptions.
• Right to request restriction of processing in circumstances provided by applicable law.
• Right to object to certain processing, including direct marketing.
• Right to withdraw consent where processing is based on consent.
• Right to data portability where the applicable legal requirements are satisfied.
• Right to lodge a complaint with the relevant privacy or data-protection authority.
• Rights concerning certain automated decision-making or profiling where applicable.

These rights are subject to applicable legal limitations and exceptions. For example, we may need to retain certain information to comply with legal obligations, establish or defend legal claims, prevent fraud, maintain security, or complete a transaction.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction providing comparable data protection rights, additional rights may apply to the processing of your personal information.

Depending on the circumstances, these may include rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and rights relating to certain automated decision-making.

Where GDPR applies, you may also have the right to lodge a complaint with the relevant supervisory authority. The GDPR specifically requires information about purposes, legal bases, recipients, retention, transfers, rights, and certain automated decision-making to be communicated to individuals.

If STARSYNX relies on legitimate interests as a legal basis, information about those interests will be provided where required by applicable law.

Certain U.S. states have enacted comprehensive privacy laws that provide rights to qualifying residents. Where such laws apply to STARSYNX and to your information, you may have additional rights.

For California residents, applicable law may provide rights including knowing about personal information collected and used, deletion, correction, opting out of sale or sharing, limiting certain uses of sensitive personal information, and non-discrimination for exercising applicable privacy rights.

STARSYNX does not intend this section to represent that all California or U.S. state privacy laws apply to every individual or to STARSYNX in every circumstance. Applicability depends on the relevant legal thresholds, business activities, and statutory exemptions.

STARSYNX has an Australian operating presence. Where the Australian Privacy Act 1988 and Australian Privacy Principles apply, we seek to manage personal information consistently with applicable obligations.

Australian privacy requirements include transparency around the kinds of personal information collected and held, collection and handling practices, purposes of use and disclosure, access and correction processes, complaints, and certain overseas disclosures.

Where applicable, individuals may contact STARSYNX to request access to or correction of personal information or to make a privacy complaint.

STARSYNX is headquartered in Pakistan and may process personal information in connection with its Pakistani operations. Processing will be carried out subject to applicable Pakistani law and other legal requirements that apply to the relevant activity.

Where a mandatory local privacy, cybersecurity, electronic communications, consumer-protection, tax, employment, or regulatory requirement applies, STARSYNX may retain, disclose, or process information to the extent necessary to comply with that requirement.

Users located in other jurisdictions may also have rights under local privacy laws. Nothing in this policy is intended to exclude mandatory rights that cannot lawfully be excluded or limited.

STARSYNX develops and uses technology that may include artificial intelligence, automation, analytics, and algorithmic systems. Depending on the service, these technologies may process information to assist with business operations, service delivery, analytics, security, or product functionality.

We do not intend to make decisions solely through automated processing where doing so would unlawfully produce legal or similarly significant effects on individuals.

Where applicable law provides rights relating to automated decision-making or profiling, individuals may exercise those rights through the contact process described in this policy.

Where automated decision-making obligations apply under a particular jurisdiction, additional information may be provided through the relevant service-specific privacy notice.

Our general website and business services are not directed to children and we do not knowingly seek to collect personal information from children through ordinary business enquiry channels.

Where a service is specifically designed for students, learners, or younger users, additional privacy notices, consent mechanisms, age requirements, or safeguards may apply.

If you believe that a child has provided personal information to us inappropriately, please contact contact@starsynx.com.

Our website may contain links to third-party websites, social networks, applications, payment services, marketplaces, or other external platforms.

Third-party websites operate under their own terms and privacy policies. STARSYNX does not control and is not responsible for the privacy practices, security, content, or availability of third-party services.

We encourage you to review the privacy policies of third parties before providing personal information to them.

STARSYNX may own, operate, manage, or provide technology services to affiliated websites, products, platforms, or brands.

Current or future affiliated services may have their own privacy notices depending on their products, users, data practices, and applicable legal requirements.

For example, websites such as Tadow and Bookbyte may have service-specific privacy terms where appropriate.

If STARSYNX is involved in a merger, acquisition, restructuring, financing, sale of assets, corporate reorganization, or similar transaction, personal information may be transferred as part of that transaction where permitted by law.

Where legally required, we will provide appropriate notice or obtain required consent in connection with material changes in control or processing.

We may preserve and disclose personal information where reasonably necessary to comply with applicable law, regulation, legal process, court orders, government requests, regulatory requirements, or lawful investigations.

We may also disclose information where reasonably necessary to protect the rights, property, security, systems, employees, customers, users, or the public, or to detect and prevent fraud, abuse, security incidents, or other unlawful activity.

If we become aware of a personal-information security incident, we will assess the incident and take reasonable steps to contain, investigate, remediate, and document it.

Where applicable law requires notification to affected individuals, regulators, authorities, or other parties, we will provide notifications within the time and manner required by the relevant law.

To request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or other privacy rights, contact us using the details below.

We may ask for additional information where reasonably necessary to verify the identity of the requester. This helps prevent unauthorized disclosure or modification of personal information.

We will respond to valid requests within the timeframe required by applicable law. Where a request cannot be fulfilled, we will explain the applicable reason or legal exception where permitted.

If you believe that STARSYNX has handled your personal information improperly, you may contact us at contact@starsynx.com.

We will review privacy complaints, investigate where appropriate, and respond within a reasonable period or within the period required by applicable law.

Depending on your location, you may also have the right to lodge a complaint with the privacy or data-protection regulator in your jurisdiction.

We seek to maintain personal information that is reasonably accurate, complete, and current for the purposes for which it is used.

You may contact us to request correction of inaccurate or incomplete personal information, subject to applicable legal requirements and verification procedures.

Where permitted and reasonably practicable, you may be able to contact STARSYNX without providing identifying information.

However, anonymity or pseudonymity may not be practical where we need identifying information to provide a requested service, enter into a contract, process a transaction, respond to a rights request, verify identity, meet legal obligations, or protect our systems and users.

STARSYNX is headquartered in Pakistan, and its business activities may be subject to Pakistani law as well as the laws and regulatory requirements applicable to particular operations, services, transactions, and individuals in other jurisdictions.

Nothing in this Privacy Policy is intended to exclude or limit mandatory privacy rights that apply to you under the law of your jurisdiction.

Where a mandatory local privacy law provides additional rights or protections, those requirements will apply to the relevant processing to the extent required by law.

We may update this Privacy Policy periodically to reflect changes in our services, technology, business practices, legal requirements, or privacy practices.

When we make material changes, we may update the effective date, publish a notice on our website, provide additional notice where required, or use another legally appropriate communication method.

We encourage you to review this policy periodically to understand our current privacy practices.