1. Introduction

Human Resources Innovative Services (Private) Limited (“HRIS”, “we”, “us”, or “our”) is committed to
protecting the privacy and security of your personal information. This Privacy Policy describes how we
collect, use, disclose, and safeguard your information when you use our HRIS360 platform, mobile
application, and related services (collectively, the “Services”).
By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please
discontinue use of the Services immediately.

2. Information We Collect
2.1 Personal Information

When you register or use our Services, we may collect the following personal details:
• Full name (first and last), date of birth, gender, and nationality
• CNIC / national identification number and employee ID
• Job title, department, and employment start date
• Phone number(s), email address, and residential address
• Dependent information (name, gender, date of birth)
• Bank account details for payroll processing purposes
• IP address and other unique device identifiers

2.2 Biometric Data

HRIS360 may collect and process biometric data as part of its attendance and identity verification features.
This includes:
• Facial recognition data used for biometric check-in and check-out
• Fingerprint data where biometric hardware is integrated with the platform
• Biometric templates generated from the above for identity matching purposes
Biometric data is collected only with your explicit consent and is used solely for attendance verification and
workforce management purposes. We do not sell, share, or use biometric data for any purpose beyond what
is stated in this policy. Biometric data is stored in encrypted form and is permanently deleted upon
termination of the employment relationship or upon a verified deletion request, whichever occurs first. You
may contact us at helpdesk@hrisonline.com.pk to withdraw consent or request deletion of your biometric
data at any time.

2.3 Location Data

Our HRIS360 mobile application collects and uses location data to enable location-based features and
services, including but not limited to attendance tracking and field employee management (e.g., eTrack).
Specifically, we may collect:
• Current location address
• Location coordinates (longitude and latitude)
Location data is collected only while the app is in use and only when you have granted location permissions.
You may revoke location access at any time through your device settings. Disabling location access may limit
certain features of the application.

2.4 Device Information

When using the HRIS360 mobile application, we may request access to the following device features:
• Camera and photo storage — to allow you to upload profile pictures and document scans. Access is
only used in ways you explicitly choose and can be revoked at any time via device settings.
• Device storage — to enable downloading of PDF files and reports generated within the platform.
• Operating system version, hardware type, and usage statistics — collected via mobile analytics
software to improve app functionality and performance.
We do not link analytics data to your personal information, and we do not access your device’s camera or
storage without your explicit permission.

2.5 Network Information

HRIS360 may access network information to ensure optimal service delivery and connectivity for platform features.

2.6 Push Notifications

We may send promotional and non-promotional push notifications or alerts to your mobile device. You may
deactivate these at any time by adjusting the notification settings on your device.

3. How We Use Your Information

We use the information collected for the following purposes:
• To provide, maintain, and improve our HR management Services
• To process payroll, attendance, and leave management functions
• To enable location-based services such as attendance check-in and field tracking
• To verify identity through biometric authentication where applicable
• To send service-related notifications, alerts, and updates
• To respond to inquiries, support requests, and feedback
• To comply with legal obligations and regulatory requirements
• To detect, prevent, and address security incidents or misuse of the platform

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the
following limited circumstances:
• With your employer (our client) as part of HR management services
• With authorized service providers who assist in delivering our Services, under strict confidentiality
agreements
• When required by applicable law, regulation, or legal process
• To protect the rights, property, or safety of HRIS, our clients, or others
We do not employ AI models to process user data, and we do not share personal data with third parties for
advertising or marketing purposes.

5. Data Security

We have implemented administrative, technical, and physical security measures to protect your personal
information from unauthorized access, disclosure, alteration, or destruction. These include:
• Encrypted data transmission over secure networks
• Access controls restricted to authorized personnel only
• Regular security assessments and system monitoring
While we take every reasonable precaution, no method of transmission over the Internet is entirely secure.
We encourage users to report any suspected unauthorized activity to helpdesk@hrisonline.com.pk
immediately.

6. Data Retention

We retain your personal data for as long as your account is active or as required to fulfill the purposes
outlined in this policy. Upon termination of the contractual relationship, data will be retained only as required
by applicable law and then securely deleted or anonymized.
Users may request deletion of their personal data at any time. Upon receiving a verified deletion request, we
will permanently delete all associated data from our systems within 30 days.

7. Your Rights

As a user of our Services, you have the following rights with respect to your personal data:
• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete information
• Right to erasure — request deletion of your personal data, subject to legal obligations
• Right to restriction — request that we limit the processing of your data
• Right to withdraw consent — withdraw consent for optional data collection at any time
To exercise any of these rights, please contact us at helpdesk@hrisonline.com.pk with the subject line “Data
Privacy Request”.

8. Google API Compliance

HRIS360 uses Google API data in compliance with the Google API Services User Data Policy, including
Limited Use requirements.

8.1 Data Usage

We only access and use Google Calendar data for the purpose of scheduling interviews. We do not access or
use any other data from your Google account, and calendar data is handled securely with access limited to
necessary functions only.

8.2 Data Retention & Deletion

Google user data is retained only for as long as necessary to fulfill scheduling purposes. Users may request
deletion of their Google-linked data at any time, and we will process such requests within 30 days.

9. Third-Party Links & Services

Our platform may contain links to third-party websites or services. We are not responsible for the privacy
practices of those third parties and encourage you to review their privacy policies independently.

10. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Human Resources Innovative Services (Pvt) Ltd Office No. 903, Charlie Trade Tower, Block A,
SMCHS, Karachi, Sindh 75100 Email: helpdesk@hrisonline.com.pk Phone: +92 349 6696364 Website:
www.hrisonline.co