Privacy Policy

1. Who is responsible

Sujaan Solutions (Pvt) Ltd., CUIN 0308845, of H#787, Street 25, G9/1, Islamabad, Pakistan, decides how and why personal data collected through sujaan.com.pk is processed.

For any question or request about your data: [email protected].

2. What we collect, and why

We collect only what a stated purpose requires. Nothing here is sold, and nothing is shared with an advertiser as a list.

Where the law requires a lawful basis, ours is: your consent for analytics and advertising cookies; steps taken at your request before entering a contract for enquiries and bookings; our legitimate interest in recruiting for applications; and performance of a contract once you engage us.

3. What we deliberately do not collect

Some of this is a design decision rather than an omission:

• No CNIC, passport or national identity number.
• No bank account, IBAN or payment card details. This site takes no payments.
• No date of birth from freelancer applicants. Anything of that kind belongs after selection, through a private channel — not a public web form.
• No special-category data: health, religion, ethnicity, political opinion, biometrics.
• No third-party font or CDN requests. Fonts are self-hosted, so no font provider sees your IP address when you load this site.

If you send us any of the above unprompted, we will delete it.

4. Who else processes it

These are the only third parties that receive personal data from this site. Each is used for one job.

We do not add a provider that processes personal data without updating this table.

5. Where your data goes

Several providers above are outside Pakistan, so your data is transferred internationally and handled under the laws of those countries. We use established providers that offer contractual data-protection commitments, and we keep the number of them deliberately small.

Freelancer applications are stored in Mumbai rather than the United States — the closest region to Pakistan, chosen for latency and to keep the most sensitive data on this site in one identifiable place.

6. How it is protected

• The site is served over HTTPS, behind Cloudflare.
• Freelancer applications sit in a database where public access is restricted to inserting a new application. The public key published in this website cannot read, change or delete any record — that is enforced by database policy, and we test it rather than assume it.
• Uploaded CVs go to a private storage bucket that cannot be listed or read by URL. Staff open them through time-limited links.
• Access to applications and enquiries is limited to the people who need it.

No system is perfectly secure. If a breach ever affects your data in a way likely to harm you, we will tell you and explain what happened.

7. Your rights

Whatever jurisdiction you are in, we will honour these:

• Ask what we hold about you, and get a copy.
• Have anything inaccurate corrected.
• Have your data deleted. For a freelancer application this means the record and the CV.
• Object to us processing it, or withdraw consent for analytics and advertising at any time.
• Ask for it in a portable, machine-readable form.

Email [email protected] with the request. We will respond within 30 days. We may ask you to confirm your identity first, so that we are not disclosing your data to someone else.

Exercising any of these rights costs nothing and will not affect how we treat an application or an enquiry.

8. Children

This site is aimed at businesses and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has sent us personal data, tell us and we will delete it.

9. Cookies

Analytics and advertising cookies are covered separately in our Cookie Policy, including how to switch them off.

10. Changes, and how to complain

We may update this policy. The date at the top always shows the current version. Where a change materially affects how we handle data you have already given us, we will contact you.

If you are unhappy with how we have handled your data, write to [email protected] first — we would rather fix it directly. You also retain any right you have to complain to the data protection authority in your jurisdiction.