Who We Are
Soft Solution International (SMC-Private) Limited is a registered IT services and digital marketing company incorporated under the Companies Act, 2017 with the Securities and Exchange Commission of Pakistan (SECP), Corporate ID: 0339597.
We operate the website thesoftsolution.com and provide services including website development, SEO, Google Ads, Facebook Ads, UI/UX design, and IT consultancy to clients worldwide.
What Data We Collect
We collect only the data necessary to deliver our services and improve your experience. Here is a full breakdown:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, company name, job title | Service delivery & communication |
| Contact Data | Email address, phone number, WhatsApp | Project communication & invoicing |
| Payment Data | Transaction ID, billing address | Payment processing (via Paddle/Payoneer — card details never stored by us) |
| Technical Data | IP address, browser type, device type, time zone | Website security & analytics |
| Usage Data | Pages visited, time on site, click paths | Website improvement via Google Analytics |
| Marketing Data | Ad interactions, conversion events | Google Ads & Facebook Pixel tracking (with consent) |
| Communication Data | Emails, project messages, feedback | Project management & support |
| Profile Data | Service preferences, project history | Personalised service delivery |
How We Collect Your Data
We collect personal data through the following means:
- Direct interactions: When you fill out our contact form, request a quote, send an email, or engage us for services
- Automated technologies: When you browse our website, we automatically collect technical and usage data via cookies and analytics tools
- Payment processing: When you make a purchase through our payment processor (Paddle), they collect payment details on our behalf
- Third-party platforms: When you interact with our Google Ads or Facebook Ads, those platforms share anonymised conversion data with us
- Social media: If you contact us or engage with us on social media platforms such as LinkedIn, Facebook, or Instagram
- Referrals: Occasionally, data may be passed to us by referring partners or agencies with your knowledge and consent
How We Use Your Data
We use your personal data only for legitimate business purposes. Below is a breakdown of our uses and legal basis under applicable data protection law:
| Purpose | Legal Basis |
|---|---|
| Delivering and managing the services you purchase | Contractual necessity |
| Responding to enquiries and providing support | Legitimate interest / Contract |
| Processing payments and sending invoices | Contractual necessity |
| Sending service updates and project notifications | Contractual necessity |
| Sending marketing emails and newsletters | Consent (opt-in only — unsubscribe anytime) |
| Website analytics and performance improvement | Legitimate interest |
| Running targeted advertising (Google/Facebook) | Consent (cookie consent) |
| Complying with legal and regulatory obligations | Legal obligation |
| Fraud prevention and website security | Legitimate interest |
Data Sharing & Disclosure
We do not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:
- Payment Processors: Paddle and Payoneer process payments on our behalf. They handle your payment information under their own strict privacy policies and PCI-DSS compliance
- Analytics Tools: Google Analytics collects anonymised usage data about how visitors interact with our website. No personally identifiable information is shared
- Advertising Platforms: Google Ads and Facebook/Meta Ads receive anonymised conversion events (e.g. form submissions) to measure ad performance — only with your cookie consent
- Project Collaboration Tools: We may use tools such as email, Google Workspace, or project management software that process data to facilitate project delivery
- Legal Authorities: We may disclose personal data to courts, regulators, or law enforcement agencies when required by applicable law or to protect our legal rights
- Business Transfers: In the unlikely event of a merger or acquisition, your data may be transferred to the acquiring entity, subject to the same privacy protections
Cookies & Tracking
Our website uses cookies — small text files stored on your device — to enhance functionality and gather analytics. Here is a breakdown of the cookies we use:
Your Privacy Rights
Depending on your location, you have the following rights regarding your personal data. We honour all requests regardless of where you are located:
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. Our retention periods are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Client account & contact data | Duration of relationship + 3 years | Service delivery & dispute resolution |
| Project files & deliverables | 3 years after project completion | Support & warranty purposes |
| Payment & invoicing records | 7 years | Tax & accounting legal requirements |
| Email & communication logs | 3 years | Contractual & support purposes |
| Website analytics data | 26 months (Google Analytics default) | Performance analysis |
| Marketing opt-in records | Until unsubscribed + 1 year | Proof of consent |
| Enquiry / contact form submissions | 2 years | Lead management & follow-up |
After the applicable retention period, data is securely deleted or anonymised. You may request early deletion at any time subject to legal retention requirements.
Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse:
- SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using SSL/TLS protocols
- Secure Payment Processing: All payment transactions are handled by Paddle, which is PCI-DSS Level 1 compliant. We never store your card details on our servers
- Access Control: Access to personal data is strictly limited to authorised personnel who need it to perform their duties
- Regular Security Reviews: We periodically review our data handling practices and security measures
- Strong Password Policies: All internal accounts use strong passwords and where possible, two-factor authentication
International Data Transfers
Our team is based in Pakistan. We serve clients across the USA, UK, Canada, Australia, Europe, and beyond. This means your personal data may be processed and stored in Pakistan or in countries where our service providers operate.
- For clients in the European Union (EU) and UK: We ensure that any transfer of your personal data outside the EEA is subject to appropriate safeguards in compliance with GDPR, including Standard Contractual Clauses (SCCs) where applicable
- For clients in the USA: Data may be processed by US-based service providers (Google, Facebook/Meta, Paddle) who comply with applicable US privacy laws and their own data protection frameworks
- For all international clients: We ensure that any third-party processors we use maintain adequate data protection standards
Children’s Privacy
Our website and services are intended for business and professional use only. They are not directed at children under the age of 16 (or the applicable age of digital consent in your country).
We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at privacy@thesoftsolution.com and we will promptly delete such data.
Third-Party Links
Our website may contain links to third-party websites, tools, and platforms including Google, Facebook, LinkedIn, Paddle, and others. These links are provided for your convenience.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:
- The updated policy will be posted on this page with a revised “Last Updated” date
- For material changes affecting how we use your data, we will notify active clients by email at least 14 days before the changes take effect
- Continued use of our website or services after the effective date constitutes your acceptance of the updated policy
Contact Us
For any privacy-related questions, requests, or concerns — including exercising your rights — please contact our Privacy team:
Privacy Team — Soft Solution International
SMC-Private Limited · Registered with SECP · Corporate ID: 0339597