Privacy Policy

Gloud Tech Solutions ("we", "our", or "us") is an international software development and cloud engineering firm registered and operating under the laws of Pakistan. We deliver software engineering, mobile app development, cloud architecture, and technical consulting services to clients globally, including the European Union (EU), the United Kingdom (UK), and North America.

We are committed to respecting and protecting the privacy of our website visitors, clients, partners, and users in full compliance with the European Union General Data Protection Regulation (EU GDPR 2016/679), the UK Data Protection Act 2018, and relevant international data protection laws.

1. Data Controller Identification

For the purposes of the EU GDPR and applicable data protection legislation, the Data Controller responsible for personal data processed through this website is:

• Legal Entity: Gloud Tech Solutions
• Country of Registration: Pakistan
• Primary Contact Email: info@gloudtechsolutions.com
• International Delivery Hubs: Dublin, Ireland (Client Management & Delivery Coordination) • Islamabad, Pakistan (Engineering & Operations Center)

2. Information We Collect

We only collect personal information necessary to deliver our services, communicate with prospects, and operate our business effectively:

• Voluntarily Provided Information: Full name, corporate email address, telephone/WhatsApp number, company name, project specifications, and any communications submitted through our contact forms or email inquiries.
• Technical & Usage Data: IP addresses, browser types, operating systems, referring URLs, pages visited, and interaction timestamps collected automatically for system diagnostics and site optimization.
• Client Engagement Data: Commercial invoicing details, VAT/tax identifiers, and contractual agreements required for B2B project fulfillment.

3. Lawful Basis for Processing (EU GDPR Article 6)

We process personal data only when a recognized lawful basis applies:

• Contract Performance (Art. 6(1)(b)): To scope proposals, enter into service agreements, coordinate agile sprints, and deliver agreed software projects.
• Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraud, respond to direct business inquiries, and manage commercial relationships.
• Consent (Art. 6(1)(a)): Where explicitly obtained for optional marketing communications or non-essential cookies.
• Legal Obligations (Art. 6(1)(c)): To maintain statutory accounting records and comply with applicable tax and regulatory reporting requirements.

4. International Transfers & GDPR Safeguards (Chapter V)

As an international software engineering firm, client communication and project delivery involve collaboration between our client management presence in Ireland and our engineering center in Pakistan.

Where personal data of European Economic Area (EEA) or UK data subjects is transferred to or accessed from outside the EEA, we implement appropriate safeguards in strict compliance with Chapter V of the EU GDPR:

• Standard Contractual Clauses (SCCs): We incorporate the European Commission-approved Standard Contractual Clauses (Module 2: Controller-to-Processor) into all client Data Processing Addenda (DPAs).
• Data Minimization & Anonymization: Engineering squads are granted access strictly to sanitized, pseudonymized, or development/staging environments rather than production personal data.
• Confidentiality & Access Controls: All personnel and on-demand contractors operate under enforceable non-disclosure agreements (NDAs) and role-based access control (RBAC).

5. European Client Data Localization

Unless explicitly requested otherwise by the client, all production databases, cloud servers, and live customer applications deployed for European clients are hosted strictly within European Union cloud regions (such as AWS Europe Dublin eu-west-1 or Google Cloud Europe Belgium/Frankfurt).

6. Your Data Protection Rights (EU GDPR Articles 15–22)

Under the EU GDPR and UK GDPR, European residents possess enforceable rights regarding their personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of personal data when no longer legally required.
• Right to Restrict Processing: Request temporary suspension of data processing under certain conditions.
• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to data processing conducted on the basis of legitimate interests.

To exercise any of these rights, please contact our Data Protection desk at info@gloudtechsolutions.com. We respond to all verified requests within 30 days without charge.

7. Data Retention & Security

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. We implement industry-standard technical measures—including TLS 1.3 encryption in transit, encrypted storage at rest, and strict firewall configurations—to safeguard your information against unauthorized access, loss, or alteration.

8. Cookies & Third-Party Services

Our website uses minimal technical cookies necessary for secure navigation and aggregated performance analytics. You can adjust your browser settings to refuse or delete cookies at any time without impacting core site functionality.

9. Contact & Inquiries

For questions, data protection requests, or Data Processing Addendum (DPA) inquiries, please reach out to: