Privacy Policy

1. Introduction

PashxD ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Industrial OS & Construction Management ERP platform and B2B Marketplace.

Data Controller: For the purposes of the EU/UK General Data Protection Regulation (GDPR), PashxD is the data controller responsible for your personal data. Questions or requests about how we handle your data should be directed to our Data Protection Contact — see Section 9.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, phone number, job title
• Business Information: Company registration details, tax identification, trade licenses
• Project Data: Bills of Quantities (BOQs), project details, procurement requirements
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Communications: Support requests, feedback, and correspondence with our team

2.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent on platform, search queries
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: We use cookies and similar technologies to enhance user experience

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our ERP platform and marketplace services
• Process transactions and manage vendor-buyer relationships
• Automate procurement workflows and BOQ matching
• Facilitate delivery tracking and logistics coordination
• Provide customer support and respond to inquiries
• Send administrative updates, security alerts, and account notifications
• Conduct analytics and improve our AI-powered features
• Comply with legal obligations and prevent fraud

4. Information Sharing

We share information with third parties when you explicitly consent, such as when connecting buyers with verified vendors on our marketplace. We work with trusted third-party service providers for cloud hosting, payment processing, analytics, and logistics.

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (SSL/TLS) and at rest
• Regular security audits and penetration testing
• Access controls and authentication protocols
• Secure data centers with redundancy and backup systems

6. Your Rights

If the GDPR, UK GDPR, or a similar data protection law applies to you, you have the right to:

• Right to Access: request confirmation of what personal data we hold about you and a copy of it
• Right to Rectification: ask us to correct inaccurate or incomplete data
• Right to Erasure ("right to be forgotten"): ask us to delete your personal data, subject to legal retention requirements
• Right to Restrict Processing: ask us to limit how we use your data in certain circumstances
• Right to Data Portability: receive your data in a structured, commonly-used, machine-readable format, or have it transferred to another provider
• Right to Object: object to processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent: where processing is based on consent, withdraw it at any time without affecting prior lawful processing
• Right to Lodge a Complaint: file a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us using the details in Section 9. We aim to respond to verified requests within 30 days.

7. Data Retention

We retain personal data only for as long as necessary to provide our services and fulfill the purposes described in this policy, including legal, accounting, and reporting obligations. As a general rule:

• Account and customer data: retained for the duration of the business relationship, plus up to 7 years afterward where required for tax, contractual, or legal record-keeping
• Prospect / outreach data (contacts we have not entered a customer relationship with): retained for up to 24 months from last contact, or until you ask us to delete it, whichever comes first
• Marketing communications records: retained until you unsubscribe or object, plus a reasonable period to honor that preference

When data is no longer needed, we delete or anonymize it. You can request earlier deletion at any time (Section 6).

8. International Data Transfers

PashxD operates globally across UAE, Saudi Arabia, India, Qatar, Oman, Germany, Poland, Netherlands, France, and Italy. Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place including EU Standard Contractual Clauses (SCCs) and compliance with GDPR.

9. Contact Us

If you have questions about this Privacy Policy, or want to exercise any of the rights described in Section 6 (access, correction, deletion, portability, objection, etc.), contact us:

• Data Protection Contact: privacy@pashx.com
• General: info@pashx.com
• Phone: +49 157 7802062