Privacy Policy
This policy explains what personal information Xtreme may collect through its corporate website and related business communications, why it is processed, how it may be disclosed, and the choices and rights that may apply.
Scope and who we are
This Privacy Policy describes how Xtreme Solutions Systems SMC (Pvt.) Ltd. (“Xtreme,” “we,” “us” or “our”) handles personal information in connection with this public corporate website, business inquiries, prospective-client communications, partnership inquiries, recruitment communications and related business interactions. It does not automatically govern client systems, mobile apps or software products that are subject to separate notices or agreements.
Information we may collect
We may collect contact and identifier information such as name, work email, telephone number, company, job title and country; inquiry content and files you choose to send; professional information supplied for recruitment or partnership discussions; business correspondence; and technical information associated with website access, such as IP address, browser/device type, operating system, requested pages, timestamps, approximate network-derived location and diagnostic or security events. Please do not submit passwords, private keys, regulated records or highly sensitive information through a general inquiry form.
Sources of information
We may receive information directly from you through forms, email and other communications; automatically from browsers, devices, servers and security systems; and, in a business context, from colleagues, referral partners, your organization or public professional/business sources. Where applicable law requires notice for indirectly obtained personal data, we will provide it as required.
Purposes and legal bases
We may use information to respond to inquiries; evaluate potential projects, services, partnerships or employment; prepare proposals and follow-up communications; operate, maintain and secure the website; detect misuse and technical problems; administer business relationships; maintain appropriate records; establish or defend legal claims; comply with law; and improve our website and processes. Where a legal basis is required, processing may rely on pre-contractual steps requested by you, contract performance, legal obligations, legitimate interests in operating and securing our business and communicating with business contacts, or consent where required.
Categories and expected uses
| Category | Examples | Typical purposes |
|---|---|---|
| Contact & identifiers | Name, work email, phone, company, job title | Inquiries, communications, relationship administration |
| Inquiry content | Requirements, messages, files | Evaluate and respond to requested services |
| Professional information | CV, skills, work history, role | Recruitment and professional communications |
| Technical & usage data | IP, browser/device, requested pages, logs | Delivery, diagnostics, security and, if enabled, analytics |
| Business records | Correspondence and proposal history | Administration, recordkeeping, claims and compliance |
Cookies and similar technologies
The website may use cookies or similar technologies that are necessary for security, session management, preferences and core website functionality. We may also use analytics or other measurement technologies to understand website performance and usage where permitted by applicable law. Where consent is legally required for non-essential technologies, we will request it before using those technologies. You can also use browser controls to restrict or delete cookies, although doing so may affect some website functions. Where applicable law requires recognition of legally valid opt-out preference signals, we will process those signals as required.
Disclosure of information
We may disclose information to service providers and contractors supporting hosting, security, email, communications, website operation, analytics or professional services; to personnel involved in evaluating or delivering an engagement; and to advisers, insurers, authorities or other parties where reasonably necessary for legal compliance, security, fraud prevention, claims or a corporate transaction. We do not need to sell personal information to operate this corporate website. If future practices constitute a regulated sale or sharing of personal information, the required notice and opt-out mechanisms should be implemented before that practice begins.
International transfers
Xtreme is based in Pakistan and works internationally. Information may therefore be processed in countries other than the country where it was collected. Where applicable data-protection law requires safeguards for an international transfer, we will use an available lawful mechanism, which may include an adequacy framework, contractual safeguards or another permitted mechanism depending on the provider and jurisdictions involved.
Retention
We retain personal information no longer than reasonably necessary for the relevant purpose, including responding to and documenting inquiries, administering relationships, recruitment communications, website security, legal/accounting obligations and disputes. Retention varies by record type and relationship. When information is no longer required, it should be deleted, anonymized or retained only where a legitimate or legal recordkeeping reason remains.
Security
We use reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. Measures may include encrypted transport, access controls, infrastructure security, backups and logging where appropriate. No internet transmission or storage system can be guaranteed completely secure.
Your privacy rights
Depending on your location and applicable law, you may have rights to access, correct or delete personal information; restrict or object to processing; obtain portability; withdraw consent; or obtain information about use and disclosure. Rights can be subject to legal exceptions and identity verification. Requests may be made through the privacy contact below. We will not discriminate against individuals for exercising rights where applicable law prohibits such discrimination.
EEA, UK and similar rights
Where the GDPR, UK GDPR or comparable legislation applies, individuals may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, and may complain to the competent supervisory authority. Where processing relies on legitimate interests, an objection right may apply based on the individual's circumstances. Withdrawal of consent does not affect processing lawfully completed before withdrawal.
California privacy disclosures
California residents may have rights under California privacy laws if Xtreme is subject to the relevant statute and no exemption applies, including rights concerning access/knowledge, deletion, correction, sale or sharing, sensitive information and non-discrimination. Xtreme does not intend to sell website visitor personal information for monetary consideration. If production advertising or cross-context behavioral advertising constitutes regulated “sharing,” the site must add the required privacy-choice mechanism and honor applicable opt-out preference signals. The final policy must also accurately disclose collected categories, third-party categories, request methods, effective date and tracking practices.
Children
This corporate website is directed to business audiences and is not intended for children. We do not knowingly use it to solicit personal information from children. If you believe a child submitted personal information in circumstances requiring parental consent or deletion, contact us for review.
Third-party websites
The website may link to social networks, third-party websites or services. Their privacy practices are controlled by those third parties and are not governed by this policy. Review their privacy information before submitting personal information.
AI and automated decisions
The website may describe Xtreme's AI capabilities, but that does not mean website visitors are subjected to automated decisions with legal or similarly significant effects. If an AI-enabled visitor feature is later deployed and processes personal information, the policy and any required notices should be updated before deployment to explain its purpose and relevant choices.
Legal requirements and corporate transactions
Information may be preserved, disclosed or transferred where reasonably necessary to comply with law or lawful process, enforce agreements, protect rights or security, investigate abuse, respond to emergencies, or support a merger, acquisition, financing, reorganization or transfer of relevant business assets, subject to applicable law.
Policy changes
We may update this policy as the website, providers, business practices or legal requirements change. The effective/last-updated date should be revised when changes are published, and additional notice or consent will be provided where legally required.
Contact and requests
Privacy questions and rights requests may be submitted through Xtreme's Contact page. Privacy requests may be submitted through Xtreme's Contact page.
Questions about your information?
Use our Contact page to submit a privacy question or an applicable data-rights request.