Privacy Policy
Last Updated: March 12, 2026
1. Introduction
ENGSTECH ("we", "us", "our"), operating at engstech.com and its subdomains, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites and SaaS products.
2. Information We Collect
2.1 Personal Information
When you register or use our services, we may collect:
- Full name
- Email address
- Phone number
- Company name and job title
- Billing and payment information (processed securely by PayFast)
- Mailing/business address
2.2 Usage Data
We automatically collect:
- IP address and browser type
- Pages visited and time spent
- Device information and operating system
- Referring website URLs
2.3 Application Data
Data you create within our software (e.g., HAZOP studies, reports, P&ID documents) is stored securely and belongs to you.
3. How We Use Your Information
- To provide, maintain, and improve our SaaS services
- To process transactions and send billing notifications
- To send service-related communications (updates, security alerts)
- To respond to your inquiries and provide customer support
- To comply with legal obligations and regulatory requirements
- To detect, prevent, and address technical issues or fraud
4. Payment Processing
All payments are processed through PayFast, a licensed Payment Service Provider (PSP) regulated by the State Bank of Pakistan. We do not store your credit card or bank account details on our servers. PayFast handles all payment data in compliance with PCI-DSS standards.
5. Data Sharing
We do not sell, trade, or rent your personal information. We may share data only with:
- Payment processors: PayFast, for processing transactions
- Cloud service providers: For hosting and infrastructure
- Legal authorities: When required by law or to protect our rights
6. Data Security
We implement industry-standard security measures including:
- SSL/TLS encryption for all data in transit
- Encrypted data storage at rest
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, your data will be permanently removed within 30 days, except where retention is required by law.
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for marketing communications
9. Cookies
We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but some features may not function properly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance.
11. Contact Us
For privacy-related inquiries:
- Email: info@engstech.com
- Phone: +92 21 34560402
- Address: Survey No.292, Plot-45, Dumlottee Road Malir, Near KPS Malir, Karachi Malir Town, Malir, Sindh, Pakistan