Privacy Policy

This Privacy Policy outlines how WordX BPO collects, uses, stores, and discloses your personal information in various circumstances. If you are applying for a job with us, please ensure that you have read our HR Privacy Policy before submitting your application.

In this Privacy Policy, WordX BPO, and any of our associated entities or affiliates, are referred to as the Company, we, our, and us.

We are committed to protecting your personal data in accordance with Pakistan’s legal framework, including but not limited to:

• Prevention of Electronic Crimes Act (PECA) 2016 – Sec 3
• Personal Data Protection Bill (Draft) 2023 – Sec 12, 13, 14, 26
• Electronic Transactions Ordinance 2002 – Sec 36
• Freedom of Information Ordinance 2002 – Sec 17
• Pakistan Telecommunication (Re-Organization) Act 1996
• PTA – Critical Telecom Infrastructure Regulations 2020
• PTA – Spam & Fraudulent Communication Regulations 2009
• PEMRA Content Regulations 2012 – Sec 7(1)

Please note, this policy applies to all services and digital platforms managed by or on behalf of WordX BPO that reference this Privacy Policy. This includes websites, communication platforms, and technology solutions we offer.

Some of our web pages may contain links to external websites operated by third parties. Please be advised that once you follow a link to another website, their privacy policies will apply. We do not control, and are not responsible for, the privacy practices of such external sites. We encourage you to review their policies before sharing any information.

Who Controls Your Personal Data?

A “data controller” is an entity that determines the purposes and means of processing personal data.

For the purposes of this Privacy Policy, WordX BPO, is the data controller of your personal information, unless stated otherwise.

In some cases, we may act as a data processor—handling personal data on behalf of our business clients. In such cases, we process your data strictly in accordance with the instructions of the data controller (our client) and in compliance with the Personal Data Protection Bill (Draft) 2023 – Section 26 and Electronic Transactions Ordinance 2002 – Section 36. This Privacy Policy does not apply to the data processing we conduct on behalf of clients. For inquiries related to such processing, please contact the relevant client directly.

All privacy-related concerns or complaints should be directed to our Data Protection Officer via email at: info@wordxbpo.com

What Personal Information We Collect

WordX BPO primarily engages with business clients and not with individuals acting in a consumer or household capacity. Therefore, the personal information we collect is limited and directly tied to professional interactions.

We may collect the following categories of information:

• Contact Information: Name, email address, telephone number, job title, company name, and business address.
• Financial Information: Banking details (for B2B transactions), payment history, and invoicing data.
• Commercial Information: Purchase and service usage history.
• Automatically Collected Information: IP addresses, browser types, access times, pages visited, referring websites, cookies, and device information, in accordance with PECA 2016 – Section 3.
• Voluntary Information: Feedback submitted via forms, surveys, or email; data collected during event registrations, newsletter subscriptions, or when contacting us directly.

Collection and processing of data is done lawfully, fairly, and transparently as required under Personal Data Protection Bill, 2023 – Section 12, and is safeguarded with appropriate technical and organizational measures to ensure integrity and confidentiality.

Why We Process Personal Information

At WordX BPO, we collect and use personal information strictly in accordance with Pakistani laws to ensure transparency, security, and service efficiency. We process personal information for the following purposes:

1. To Deliver Our Services and Communicate with Clients

We collect and process contact and business information of individuals representing our clients to fulfill service agreements, manage communication, and deliver BPO solutions effectively. This processing is necessary to perform our contractual obligations and operate as a legal business entity under Pakistani law.

2. To Collaborate with Vendors and Service Providers

We may collect the names, contact details, and designations of representatives from vendors, freelancers, or service providers who assist us in service delivery. This processing enables us to maintain proper records, fulfill contracts, and operate efficiently.

3. To Enhance Customer Experience and Improve Our Services

With user consent or for legitimate business interests, we may collect user feedback, preferences, and interaction data to improve client experience. This includes analyzing feedback and service usage to tailor better offerings, all while respecting the principles of data minimization and confidentiality under the Personal Data Protection Bill 2023.

4. For Marketing

If you voluntarily opt-in, we may use your contact information to share updates about our services, offers, or business activities. We strictly avoid sending marketing material without explicit user consent, in accordance with PECA 2016 and draft data protection laws.

5. To Maintain and Improve Website Functionality

We may collect minimal technical data (such as cookies or session logs) to ensure that our website functions correctly and to understand how users interact with it. This helps us improve navigation, security, and responsiveness. For more details, refer to our Cookies section.

6. To Comply with Legal and Regulatory Obligations

We may process or disclose your personal data to comply with legal obligations, regulatory requirements (e.g., PTA, PEMRA), or court orders as permitted under Pakistani law, including PECA 2016 and the Electronic Transactions Ordinance 2002. We may also use this data to protect our legal rights or prevent misuse of our platform.

Recipients of Personal Information

We do not sell your data. However, to fulfill legitimate business needs or legal requirements, we may share personal information as follows:

1. Internal Departments and Affiliates

Authorized employees or associated internal teams may access your information strictly for fulfilling their roles (e.g., client servicing, IT support, accounting). We ensure proper access controls and confidentiality agreements.

2. Trusted Service Providers and Contractors

We may share limited personal information with carefully vetted local service providers such as:

• IT and infrastructure support teams
• Marketing or analytics consultants (with user consent)
• Accounting, finance, and legal advisors
• Customer support or training vendors

They only access data needed to perform their tasks and are bound by confidentiality and data protection obligations.

3. Legal Authorities and Regulators in Pakistan

We may disclose your personal information to public or legal authorities (e.g., courts, law enforcement agencies, PTA, PEMRA) to comply with official requests under PECA 2016, Freedom of Information Ordinance 2002, or any other applicable Pakistani law.

4. Business Restructuring

In case of a merger, acquisition, or business restructuring within Pakistan, relevant personal data may be shared with concerned parties as necessary. Such sharing will remain compliant with legal obligations under Pakistani jurisdiction.

Cookies

At WordX BPO, we and our trusted service providers may use cookies and similar tracking technologies (“Cookies”) to enhance the performance, security, and usability of our website and services. Cookies are small text files placed on your device when you visit our site.

We use the following types of cookies:

• Essential Cookies – Necessary for site functionality, security, and accessibility.
• Performance Cookies – Help us understand how visitors interact with the website (e.g., pages viewed, navigation patterns).
• Functionality Cookies – Remember user preferences for a personalized experience.
• Analytics and Marketing Cookies – Used (with your consent) to gather data that helps us improve service and tailor relevant communication.

In compliance with the Personal Data Protection Bill 2023 (Draft) and PECA 2016, we seek user consent before using non-essential cookies. You can manage or withdraw your cookie preferences anytime via your browser settings or by accessing the cookie control feature available on our website.

Some cookies may be placed by third-party partners to track engagement and help us serve contextual information. These third-party tools follow their own privacy standards and are bound by our agreements to ensure data protection.

Marketing and Your Right to Opt-Out

At WordX BPO, we respect your privacy choices. We only send marketing or promotional communications with your explicit consent, in accordance with PECA 2016 and the draft Personal Data Protection Bill 2023.

You may choose to:

• Opt-in to receive service updates, offers, or newsletters by subscribing via our platform.
• Opt-out at any time by clicking the “unsubscribe” link in our emails or contacting us directly at info@wordxbpo.com

Our marketing emails may include basic analytics (e.g., open rates or link clicks) to help us improve communication relevance. You can withdraw consent to such tracking by unsubscribing from marketing communications.

We do not use your personal data for unsolicited marketing and do not share it with third parties for marketing purposes without your express permission.

Use of Non-Personal Information

In addition to personal data, WordX BPO may collect non-personal or anonymized information, such as:

• Search trends
• Device type and browser
• Survey responses (without identifiable data)

This information helps us understand visitor preferences, optimize our services, and generate usage insights. We may share such anonymized data in aggregate or statistical form, for example, in usage reports or industry insights, which cannot be linked back to individuals.

Your Data Protection Rights (Under Pakistani Law)

Under applicable Pakistani data protection laws, including the Prevention of Electronic Crimes Act (PECA) 2016 and the Personal Data Protection Bill 2023 (draft), you have certain rights regarding your personal data. These include:

• Right to Access: You may request access to the personal data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your personal data, subject to legal and business obligations.
• Right to Object or Restrict Processing: You may object to the processing of your data or request limited use under specific circumstances.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time.

To exercise any of these rights, you can email us at info@wordxbpo.com. We may need to verify your identity before proceeding with your request, and we will respond in a reasonable time frame as required by applicable law.

Data Security and Storage Limitation

At WordX BPO, we take the protection of your personal information seriously. In compliance with Pakistan’s Prevention of Electronic Crimes Act (PECA) 2016 and the Personal Data Protection Bill 2023 (draft), we implement robust organizational and technical safeguards to ensure your data is secure from unauthorized access, misuse, loss, or destruction.

Our data protection measures include:

• The use of encryption and pseudonymization where appropriate.
• Defined access controls and user permissions to maintain the confidentiality and integrity of personal data.
• Regular system monitoring and testing to detect vulnerabilities and prevent breaches.
• Established data backup and recovery protocols to ensure continuity and timely restoration in the event of system failure or cyber incidents.
• Internal policies that limit access to personal data only to authorized personnel who require it to perform their job functions.
• Logging and auditing mechanisms to monitor access and usage of sensitive data.

As per Section 38 of the draft Personal Data Protection Bill, we also take reasonable steps to evaluate the effectiveness of these controls on a recurring basis to align with best practices and evolving threats.

We use security software tools to monitor and manage our systems against unauthorized access or malicious activity. Any attempt to alter, damage, or gain unauthorized access to data on our systems is strictly prohibited and subject to penalties under PECA 2016 and relevant sections of Pakistan’s criminal law.

We retain personal information only for as long as is necessary to:

• Fulfill the purpose for which it was collected,
• Comply with legal and regulatory retention requirements in Pakistan,
• Resolve disputes, enforce our agreements, and protect our legal rights.

Retention periods are determined by the nature of the data, business needs, and applicable law. Once the information is no longer needed in its identifiable form, we will either safely delete, de-identify, or anonymize it.

Where third-party vendors or service providers are engaged to process personal information on our behalf, they are contractually obligated to:

• Act strictly on our instructions,
• Maintain confidentiality,
• Implement appropriate technical and organizational measures to protect the data.

All such arrangements comply with local legal requirements for data protection and processor accountability under the Personal Data Protection Bill.

Children’s Privacy

WordX BPO’s website and services are not directed to children under the age of 18. We do not knowingly collect personal information from individuals under 18 years of age in accordance with the Juvenile Justice System Act 2018 and the intent of Pakistan’s data protection principles.

If we discover that personal data has been collected from a child without verified parental or guardian consent, we will promptly delete such information from our systems.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. When updates are made, we will:

• Post the revised version on this page with the “Last Updated” date.
• Provide a prominent notice on our website homepage if the changes are material.

We encourage you to review this policy periodically to stay informed about how we are protecting your data and your rights under Pakistani law.