Aimnaz Private Limited recognizes that responsible data protection and information security are important to maintaining trusted relationships with customers, suppliers, business partners, website visitors, and other stakeholders.

We seek to handle information responsibly and apply reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the risks associated with its processing.

This Data Protection & Security Policy should be read together with our Privacy Policy, Cookie Policy, and Terms and Conditions.

This Policy applies to information handled by Aimnaz in connection with our website, business communications, customer and supplier relationships, inquiries, quotations, sourcing activities, commercial transactions, technology systems, and other legitimate business operations.

It applies to information maintained electronically, digitally, physically, or through other business records where appropriate.

Depending on the nature of an interaction or business relationship, Aimnaz may handle different categories of information, including:

• Names and business contact information
• Email addresses and telephone numbers
• Company and organization information
• Business inquiries, quotation requests, and correspondence
• Customer, supplier, and business partner information
• Commercial and transaction-related information
• Technical, product, and sourcing information
• Website and communication records
• Device, browser, and technical information
• Security and system logs where required for legitimate purposes

We seek to collect and process only information that is reasonably relevant to the applicable business, operational, security, legal, or service-related purpose.

Aimnaz seeks to apply the following principles when handling information:

4.1 Purpose Limitation

Information should be collected and used for legitimate, relevant, and reasonably defined business, operational, security, or service-related purposes.

4.2 Data Minimization

We seek to avoid collecting information that is unnecessary for the purpose for which it is being processed.

4.3 Accuracy

We take reasonable steps to maintain information that is relevant and accurate for its intended purpose. Where appropriate, individuals or business partners may request correction of inaccurate information.

4.4 Confidentiality

Access to confidential or protected information is intended to be limited to authorized personnel, service providers, or business partners who have a legitimate need to access it.

4.5 Security

We seek to maintain reasonable safeguards designed to reduce the risks of unauthorized access, disclosure, alteration, loss, misuse, or destruction of information.

4.6 Retention

Information should be retained only for as long as reasonably necessary for its intended business, operational, legal, contractual, or security purpose, subject to legitimate record-keeping requirements.

Aimnaz may use a combination of administrative, technical, organizational, and physical security measures appropriate to the nature and sensitivity of the information being protected.

Depending on the circumstances, these measures may include:

• Access controls and permission management
• Authentication and account security measures
• Password and credential protection
• Secure communications and data transmission practices
• System monitoring and security logging
• Software and security updates
• Data backup and recovery procedures
• Restricted access to confidential business records
• Protection of physical documents and business records
• Internal procedures for identifying and responding to security risks

Security measures may be reviewed and updated as our systems, technologies, business operations, and security risks evolve.

Aimnaz seeks to provide access to information and systems only where reasonably necessary for legitimate business responsibilities or authorized activities.

Access permissions may be reviewed, restricted, modified, or removed when an individual’s business responsibilities or access requirements change.

Users and authorized personnel are expected to protect their credentials and should not knowingly share passwords, authentication information, or other access credentials with unauthorized parties.

We take reasonable precautions when transmitting information through digital communications, websites, email, and other online systems.

However, no internet transmission, electronic communication, connected device, or storage system can be guaranteed to be completely secure. Accordingly, users should avoid sending unnecessary confidential or sensitive information through unsecured or inappropriate communication channels.

Where appropriate, Aimnaz may use secure communication methods or access controls to reduce the risks associated with the transmission of business information.

Aimnaz may use trusted third-party service providers for hosting, cloud infrastructure, website functionality, communications, analytics, security, logistics, technology, payment processing, or other legitimate business functions.

Where third-party providers process information on our behalf, we seek to select appropriate providers and apply reasonable contractual, technical, or organizational safeguards based on the nature of the services and information involved.

Third-party providers may have their own privacy, security, and data protection policies, which may also apply to information they process.

Aimnaz does not intend to sell personal information as a business asset.

Information may be shared where reasonably necessary to operate our business, respond to inquiries, fulfill commercial activities, provide requested services, communicate with customers or suppliers, coordinate sourcing and logistics, maintain technology systems, protect our rights, or support legitimate business operations.

Information may also be disclosed where required or permitted by applicable law, legal process, regulatory requirements, court order, or a lawful request from an authorized authority.

Where reasonably appropriate, we seek to limit information shared with third parties to information relevant to the applicable purpose.

Aimnaz works with international suppliers, technology providers, service providers, and business partners. As a result, certain information may in some circumstances be processed, accessed, or stored through service providers located outside Pakistan.

Where information is transferred or processed internationally, we seek to apply reasonable safeguards appropriate to the nature of the information, the purpose of the transfer, and applicable legal or contractual requirements.

Aimnaz may retain information for as long as reasonably necessary to fulfill the purpose for which it was collected, maintain legitimate business records, perform contractual or operational obligations, resolve disputes, maintain security records, establish or protect legal rights, or satisfy applicable legal and regulatory requirements.

When information is no longer reasonably required, it may be securely deleted, anonymized, destroyed, or otherwise disposed of using appropriate methods, subject to applicable retention obligations.

Aimnaz takes information security incidents seriously. A security incident may include unauthorized access, accidental disclosure, loss, destruction, alteration, misuse, or compromise of protected information.

Where Aimnaz becomes aware of a suspected or confirmed security incident, we may take reasonable steps to investigate the matter, contain the incident, assess potential impact, restore affected systems, and implement appropriate corrective measures.

Where appropriate and required by applicable law or contractual obligations, relevant individuals, business partners, service providers, or authorities may be notified.

Aimnaz recognizes that its commercial relationships may involve confidential business information, including quotations, pricing information, supplier details, customer information, technical specifications, commercial correspondence, sourcing information, business strategies, and other non-public information.

Confidential business information should be handled responsibly and disclosed only to authorized parties, where reasonably necessary for the applicable business purpose, or where disclosure is required or permitted by law.

Nothing in this Policy creates a contractual confidentiality obligation beyond any separate agreement or applicable legal requirement between Aimnaz and another party.

Employees, contractors, representatives, and other authorized personnel who have access to protected or confidential information are expected to handle such information responsibly and only for legitimate business purposes.

Authorized personnel should follow applicable security procedures, protect credentials and devices, avoid unauthorized disclosure, and promptly report suspected security incidents or unauthorized access.

Unauthorized access, disclosure, copying, misuse, or distribution of confidential information may result in appropriate internal or legal action, subject to applicable law and contractual obligations.

Where physical documents or records containing confidential or protected information are maintained, Aimnaz may apply reasonable safeguards such as controlled access, secure storage, restricted handling, appropriate transportation, and secure disposal.

Physical security measures may vary according to the nature, sensitivity, and operational requirements associated with the relevant information.

Customers, suppliers, service providers, and other business partners are responsible for providing accurate information and taking reasonable security precautions when communicating with Aimnaz or accessing systems and information made available to them.

Business partners should promptly notify Aimnaz if they become aware of suspected unauthorized access, fraudulent communication, data loss, security vulnerabilities, or other security incidents involving information associated with Aimnaz.

Our website may use third-party services, integrations, embedded content, analytics tools, communication services, security technologies, or links to external websites.

Aimnaz does not control the privacy, security, or data protection practices of third-party websites and services that we do not operate. Users should review the applicable privacy and security policies of third-party providers before providing information through their platforms.

Depending on applicable law and the nature of the information involved, individuals may have certain rights or options concerning their personal information, which may include requesting access, correction, deletion, restriction, or other appropriate handling of their information.

Requests concerning personal information or data protection may be submitted using the contact details provided in this Policy. We may need to verify the identity or authority of the requester before responding to certain requests.

Any request will be considered in accordance with applicable legal requirements, legitimate business interests, contractual obligations, security requirements, and available records.

This Data Protection & Security Policy should be read together with the Aimnaz Privacy Policy, Cookie Policy, and Terms and Conditions.

Our Privacy Policy provides additional information regarding the collection, use, disclosure, and retention of personal information. Our Cookie Policy explains the use of cookies and similar technologies on our website.

Where a specific written contract or agreement contains applicable confidentiality, security, privacy, or data protection provisions, those contractual provisions may govern the relevant business relationship to the extent permitted by law.

Aimnaz may update this Data Protection & Security Policy periodically to reflect changes in our business operations, technology, information security practices, service providers, legal requirements, or data protection practices.

Any updated version will be published on this page with a revised “Last Updated” date. We encourage visitors, customers, suppliers, and business partners to review this Policy periodically.

Although Aimnaz takes reasonable measures to protect information, no organization, website, electronic system, network, transmission method, or storage environment can guarantee absolute security.

Accordingly, Aimnaz cannot guarantee that information will always remain completely secure against every possible security threat, vulnerability, unauthorized access, or event beyond our reasonable control.