Privacy Policy

Hamza Akbar Malik trading as MarkiTech ("MarkiTech", "we", "us", or "our") provides an AI-powered marketing platform covering paid advertising, customer support automation, onboarding, and reporting. This policy explains how we handle personal information across our website, our client portal, and the services delivered through them.

It applies to prospective clients, client account users, people who book meetings with us, and visitors to our website. It does not apply to third-party websites we link to, or to how our clients use personal information in their own businesses.

Our responsibilities change depending on whose data is involved, and it is worth being precise about the difference.

• MarkiTech as controller. We decide why and how we use information about you as a client or prospect, covering account details, company registration data, billing records, meeting bookings, support requests you send us, and website usage.
• MarkiTech as processor. We handle information about your customers on your instructions, covering support bot conversations, call and message context, order references, and audience data inside your connected advertising accounts. You remain the controller of that data.

If you are a customer of a MarkiTech client and want to exercise rights over your data, contact that business directly. We will support them in responding.

We collect information you give us, information generated automatically as you use the platform, and information we receive from the third-party accounts you connect.

• Deliver the services in your plan, including building campaigns, running the support bot, and producing dashboards and reports.
• Create and administer accounts, authenticate users, and manage roles and permissions.
• Process payments, prevent payment fraud, and keep accurate financial records.
• Respond to enquiries, schedule meetings, and provide client support.
• Monitor performance, investigate incidents, and protect the platform against abuse and unauthorised access.
• Improve the platform through aggregated and de-identified analysis of how features are used.
• Send service messages such as verification codes, billing notices, and changes to these policies. You cannot opt out of these while you hold an account.
• Send marketing communications where you have consented or where we have a legitimate interest, with an unsubscribe link in every message.
• Meet legal, tax, and regulatory obligations and enforce our terms.

We do not sell personal information, and we do not share it for cross-context behavioural advertising in the sense used by California law.

The MarkiTech support assistant is powered by a third-party large language model. When a conversation takes place, the message content, relevant workspace context such as order or campaign references, and the knowledge base you configured are sent to that provider to generate a reply.

• Conversations are stored in your workspace so your team can review them, and they count towards the retention periods below.
• Our AI vendors are contractually barred from using your content to train their general-purpose models.
• A limited number of authorised MarkiTech staff may review conversations to investigate a fault, handle an escalation, or check quality.
• You control which knowledge-base content the bot can draw on and when a conversation is handed to a human.
• Automated processing does not produce legal or similarly significant effects about individuals. Decisions that materially affect spend or customer outcomes stay with people.

We use a small number of cookies and browser storage keys. Strictly necessary items are always active because the site cannot function without them; everything else is optional and set only where permitted.

Most browsers let you block or delete cookies. Blocking strictly necessary cookies will stop parts of the portal from working. We honour Global Privacy Control signals where they are legally recognised.

We share personal information only where it is needed to run the service, and every provider below is bound by a written agreement limiting what they may do with it.

We may also disclose information to professional advisers such as accountants and lawyers, to authorities where required by law or valid legal process, to protect our rights or the safety of others, and to an acquirer in connection with a merger, acquisition, or sale of assets. If ownership changes, we will notify you before your information becomes subject to a different privacy policy.

MarkiTech operates from Pakistan and uses providers based in the United States, the European Union, and elsewhere. That means your information may be transferred to and processed in countries whose data protection laws differ from those where you live.

Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, together with technical measures including encryption in transit and at rest. You can request a copy of the relevant safeguards from support@markitech.pk.

We keep personal information only for as long as we need it for the purpose it was collected, plus any period required by law. When a period ends, we delete the data or irreversibly de-identify it.

We maintain technical and organisational measures proportionate to the risk of the data we handle, including:

• Encryption in transit using TLS, and encryption at rest for stored data.
• Role-based access control, with staff access limited to what their job requires.
• Row-level security policies on client records in our database.
• Credential and API key management through the hosting platform rather than application code.
• Payment card data handled entirely by a PCI DSS compliant processor, never stored on our systems.
• Logging and monitoring of authentication and administrative activity.

No system is perfectly secure. If a breach affects your personal information and is likely to result in a risk to your rights, we will notify you and any applicable regulator without undue delay and, where required, within 72 hours of becoming aware of it. Report a suspected vulnerability to support@markitech.pk.

Subject to your location and to applicable exemptions, you may have the following rights over your personal information.

• Access. Ask what personal information we hold about you and receive a copy of it.
• Correction. Have inaccurate or incomplete information corrected. Account details can also be edited directly in the portal.
• Deletion. Ask us to delete your information where we no longer have a lawful reason to keep it.
• Portability. Receive the information you gave us in a structured, commonly used, machine-readable format.
• Restriction and objection. Ask us to pause processing, or object to processing carried out on the basis of legitimate interests, including direct marketing.
• Withdraw consent. Withdraw consent at any time where processing relies on it, without affecting processing already carried out.
• Non-discrimination. Exercise these rights without being denied service, charged a different price, or given a lower standard of service.

How to exercise a right

Email support@markitech.pk describing the right you want to exercise. We will verify your identity through the email address on your account before acting and will respond within 30 days, or 45 days for California residents, extending only where the law allows and telling you why.

Regional notes

• EEA and UK. You may lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office, though we ask that you raise the issue with us first.
• California. You may request disclosure of the categories and specific pieces of personal information collected, request deletion or correction, and opt out of sale or sharing. We do not sell or share personal information, and we do not knowingly collect information from anyone under 16. You may use an authorised agent, with proof of authority.
• Pakistan and other regions. Where local data protection law grants you additional rights, we will honour them once we have verified your identity.

The platform is a business tool intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us information, contact support@markitech.pk and we will delete it promptly.

Our website links to external sites such as advertising platforms and social profiles. We are not responsible for their content or privacy practices, and we encourage you to read their policies before sharing information with them.

We review this policy at least annually and update it when our practices, our providers, or the law change. The version and effective date at the top of the page always reflect the current release.

For material changes, such as a new purpose for processing or a new category of recipient, we will give notice by email or in-portal notice at least 30 days before the change takes effect, and will collect fresh consent where the law requires it.

For any question about this policy, to exercise a right, or to raise a complaint about how we handle personal information, get in touch. If you are not satisfied with our response, you may escalate to your local data protection authority.

• Privacy and data rights. support@markitech.pk
• Security reports. support@markitech.pk
• General enquiries. support@markitech.pk
• Phone and WhatsApp. +92 327 5100072