Privacy Policy

Kardan Ventures (Pvt.) Limited (“Kardan Ventures”, “we”, “our”, or “us”) is an institutional government contractor and corporate procurement enterprise incorporated under the Companies Act 2017 in Pakistan. We deliver public infrastructure, turnkey engineering, enterprise ICT deployments, and statutory tender execution.

We respect the confidentiality of government institutions, public sector procuring bodies, enterprise clients, and individual visitors. This Privacy Policy outlines how we collect, process, store, and safeguard data gathered through our corporate website, tender request portals, and formal business correspondence.

We collect information to facilitate transparent procurement, pre-qualification reviews, and formal tender negotiations. Information is obtained through the following channels:

A. Information You Voluntarily Provide

• Corporate & Contact Details: Full name, institutional email address, department or ministry name, official telephone number, and physical office location provided when submitting an RFQ or contact inquiry.
• Tender & Procurement Specifications: Bill of Quantities (BOQ), Tender Reference Numbers, procurement scopes, equipment configurations, and project delivery schedules.
• Verification Documentation: Pre-qualification credentials, NTN/STRN tax numbers, and corporate authorizations transmitted during contract mobilization.

B. Automatically Collected Technical Data

When navigating our digital portal, standard non-identifying telemetry is logged to maintain infrastructure integrity:

• Internet Protocol (IP) address and approximate geographical locality.
• Browser type, operating system version, and device characteristics.
• Referring URLs, pages visited, duration of visit, and technical error logs.

All information collected is processed strictly for lawful corporate operations, public sector bidding compliance, and customer service fulfillment:

We do not sell, rent, lease, or monetize institutional or personal data under any circumstances.

Kardan Ventures (Pvt.) Limited enforces technical, administrative, and physical security measures to shield corporate and institutional data from unauthorized access, accidental alteration, disclosure, or destruction.

• Encryption in Transit: All website traffic is protected using Transport Layer Security (TLS 1.3) with 256-bit cryptographic ciphers.
• Role-Based Access Control: Access to sensitive tender documents, client files, and engineering drawings is restricted to authorized personnel with authenticated access rights.
• Audit Logs: System activities, administrative access, and data modifications are logged for ongoing security auditing.

While we deploy institutional-grade defensive controls, no digital transmission method over the Internet is 100% impenetrable. We encourage clients to exercise caution when transmitting classified documents via public email.

We may share information with reputable third parties only under strict confidentiality agreements and to the minimum extent necessary for contractual execution:

• Statutory Bodies & Procuring Entities: Federal and provincial government departments, evaluation committees, PPRA, SECP, and FBR as legally mandated for bidding and tax compliance.
• Financial Institutions: Scheduled commercial banks in Pakistan for the issuance of bid bonds, mobilization guarantees, performance securities, and letters of credit.
• OEM Hardware Partners: Authorized Tier-1 manufacturers (e.g. Dell, HPE, Lenovo) strictly to issue Manufacturer Authorization Forms (MAFs), serial warranties, and firmware access.
• Technical Infrastructure Providers: Secure cloud hosting, DNS management, and email infrastructure providers bound by non-disclosure and security standards.

We retain business correspondence, procurement inquiries, and project records in accordance with the corporate statutory requirements of Pakistan:

• Tender & Executed Contracts: Retained for a minimum statutory period of seven (7) years following project closure, in compliance with public sector auditing and tax governance requirements.
• General Inquiries: Unsuccessful or exploratory inquiries submitted via our contact forms are reviewed periodically and securely purged if no business relationship is established.

Subject to applicable corporate, banking, and public procurement regulations, you hold the following rights regarding your personal and institutional records:

• Right of Access: Request a copy of the specific contact details and organizational data we retain on your behalf.
• Right of Rectification: Request correction of inaccurate, outdated, or incomplete corporate records.
• Right to Restrict or Delete: Request the deletion of general contact details where retention is not mandated by ongoing contractual obligations or statutory audit rules.

To submit a verification or access request, please contact our Compliance Desk using the contact details below.

Our website uses cookies and similar storage tokens to ensure secure authentication, preserve your RFQ basket sessions, and monitor system performance.

For comprehensive details regarding cookie categories, expiry intervals, and browser management instructions, please review our dedicated Cookie Policy.

9. Policy Updates

We may revise this Privacy Policy periodically to reflect technological enhancements, operational changes, or new regulatory standards from the SECP, PPRA, or Ministry of Information Technology.

The updated date will be reflected at the top of this document. We recommend periodic review to remain informed of our data protection standards.