Privacy Policy

1. Who we are

BAS BUILDERS PRIVATE LIMITED (“BAS BUILDERS”, “we”, “us” or “our”) is a construction company registered in Pakistan, providing residential and commercial construction, large-scale building projects, structural works, project management and turnkey construction services.

We are the data controller responsible for the personal information described in this policy.

2. Scope of this policy

This policy applies to personal information we handle when you:

• visit or use our website at basbuilders.pk;
• download, install or use the BAS BUILDERS mobile application distributed through Google Play;
• contact us by phone, email or the enquiry form on our website;
• engage us for construction, project management or turnkey services, or apply to work with us as an employee, subcontractor or supplier.

It does not apply to third-party websites, applications or services that we do not control, even where we link to them. We encourage you to read the privacy policies of any third party before providing them with information.

3. Information we collect

We collect only the information we need to respond to enquiries, deliver projects and operate our application. We do not sell personal information, and we do not collect sensitive categories of data such as health information, biometric identifiers, religious beliefs or financial account credentials through our website or application.

3.1 Information you provide to us

3.2 Information collected automatically

The enquiry form on this website does not transmit data to our servers. It opens your own email application with the details you typed so that you can review and send the message yourself.

4. App permissions

Where the BAS BUILDERS mobile application requests a device permission, it requests it at the moment the related feature is used, explains why it is needed, and continues to function without it wherever technically possible. You can withdraw any permission at any time in your device settings.

We do not access your contacts, call logs, SMS messages, microphone, or the full contents of your device storage.

5. How we use information

We use personal information only for the purposes below:

• Responding to you — answering enquiries, preparing estimates, arranging site visits and issuing proposals.
• Delivering projects — planning, executing, supervising and handing over construction works, including quality, safety and progress records.
• Contract administration — issuing valuations, variation records, invoices and completion documentation.
• Operating the application — creating accounts, authenticating users, syncing project records and sending service notifications.
• Improving our services — analysing aggregated usage and crash data to fix faults and improve performance.
• Security and fraud prevention — detecting misuse, unauthorised access and abusive activity.
• Legal and regulatory compliance — meeting tax, accounting, employment, building-control and record-keeping obligations under Pakistani law.

We do not use personal information for automated decision-making that produces legal or similarly significant effects, and we do not use it for third-party advertising.

6. Legal bases

Where data protection law requires a legal basis for processing, we rely on:

• Performance of a contract — to deliver the construction or management services you have engaged us for, or to take steps at your request before entering a contract.
• Legitimate interests — to operate, secure and improve our website and application, and to keep proper records of our work, balanced against your rights.
• Consent — for optional device permissions and for any marketing communications. You may withdraw consent at any time.
• Legal obligation — where retention or disclosure is required by law, regulation or a valid order.

7. How we share information

We do not sell personal information, and we do not share it with data brokers or advertising networks. We disclose personal information only in the following circumstances:

• Service providers — hosting, email, cloud storage, crash reporting and analytics providers who process data on our instructions under written agreements, and only for the purposes we specify.
• Project participants — architects, consultants, subcontractors, suppliers and authorities, where sharing is necessary to design, approve, build or hand over your project. We share the minimum required, such as site address and scope.
• Professional advisers — auditors, accountants, insurers and lawyers, subject to confidentiality obligations.
• Legal requirements — where disclosure is required by applicable law, court order or a lawful request from a public authority, or to establish, exercise or defend legal claims.
• Business transfers — if our business or part of it is reorganised, merged or transferred, personal information may transfer as part of that transaction; we will notify affected users and this policy will continue to apply until replaced.

8. Third-party services

Our application and website may use the following categories of third-party service. Each processes limited data under its own privacy terms:

All data transmitted between the application and our servers is encrypted in transit using TLS.

9. Data retention

We keep personal information only as long as it is needed for the purpose it was collected for, and then delete it or irreversibly anonymise it.

10. Your rights

Subject to applicable law, you may:

• Access the personal information we hold about you and request a copy;
• Correct information that is inaccurate or incomplete;
• Delete your account and associated personal information;
• Export a machine-readable copy of the data you provided to us;
• Object to or restrict processing based on our legitimate interests;
• Withdraw consent at any time, including by revoking a device permission or unsubscribing from messages;
• Complain to a competent data protection authority.

To exercise any of these rights, email info@basbuilders.pk from the address associated with your enquiry or account. We respond within 30 days and may ask for information to verify your identity. We do not charge a fee unless a request is manifestly unfounded or excessive.

11. Deleting your data

You can request deletion of your account and personal data at any time, whether or not you still have the application installed.

From inside the application

• Open the application and go to Settings → Account → Delete account.
• Confirm the request. Your account is deactivated immediately and the associated data is permanently deleted within 30 days.

By email

• Send a message to info@basbuilders.pk with the subject line “Data deletion request”.
• Include the name, email address and phone number associated with your account or enquiry.
• We acknowledge within 7 days and complete the deletion within 30 days of verifying your identity.

Uninstalling the application removes data stored on your device but does not by itself delete data held on our servers. Please use one of the methods above.

12. Security

We apply technical and organisational measures appropriate to the risk, including:

• TLS encryption for all data in transit between the application, the website and our servers;
• encryption at rest for stored files and database backups;
• passwords stored only as salted hashes — never in readable form;
• role-based access limited to staff who need the data for their work;
• routine patching, backups and access logging.

No system can be guaranteed completely secure. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify affected users and the relevant authority without undue delay.

13. Children's privacy

Our website and application are intended for business and professional use and are not directed to children. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us with personal information, contact info@basbuilders.pk and we will delete it promptly.

14. International transfers

We are based in Pakistan. Some of our service providers store or process data on servers located in other countries. Where personal information is transferred outside Pakistan, we require the recipient to apply protections consistent with this policy, through contractual safeguards and by selecting providers that maintain recognised security standards.

15. Cookies and similar technologies

This website does not use advertising, tracking or profiling cookies. It may use strictly necessary storage to remember basic display preferences, and our hosting provider records standard server logs as described in section 3.2. The mobile application uses local device storage to keep you signed in and to cache project data for offline use; this data is cleared when you sign out or uninstall the application.

16. Changes to this policy

We may update this policy to reflect changes in our services, technology or legal obligations. The “Last updated” date at the top of this page always reflects the current version. If a change materially affects how we handle your personal information, we will give notice through the application, by email, or by a prominent notice on this website before it takes effect. Continued use of our website or application after the effective date means you accept the revised policy.

17. Contact us

For any question, request or complaint about this policy or about how your personal information is handled, contact us:

We aim to acknowledge every privacy enquiry within 7 days and to resolve it within 30 days.