Privacy & Data Protection

Privacy Policy

Your privacy is our priority. Learn how we collect, use, and protect your information.

Last Updated: 22 May 2026

1. Introduction

At Ensova Capital Management ("we," "our," "us"), a subsidiary of Ensova Technologies (Pvt). Ltd., we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services.

By using our website, opening an account, or engaging our investment services, you consent to the practices described in this policy. We comply with applicable Pakistani data protection laws, SECP regulations, and PVARA requirements.

2. Information We Collect

Identity Information

  • Full name (as per CNIC/Passport)
  • Date of birth and place of birth
  • National identification (CNIC) or passport number
  • Nationality and residency status

Contact Information

  • Residential address
  • Email address
  • Phone numbers (primary and secondary)
  • Emergency contact details

Financial Information

  • Bank account details (for deposits and withdrawals)
  • Source of funds documentation
  • Tax identification numbers (NTN)
  • Investment history and risk profile
  • Transaction records and portfolio data

Technical Information

  • IP address and device information
  • Browser type and operating system
  • Website usage and access logs
  • Cookies and similar tracking data

3. How We Use Your Data

We use your personal information for account management, KYC & compliance, investment services, communications (monthly statements, profit notifications, account updates), risk management and fraud detection, and meeting legal obligations including AML laws and tax reporting.

4. Legal Basis for Processing

  • Contract: Processing necessary to fulfill our investment management agreement with you
  • Legal Obligation: Compliance with SECP, PVARA, AML, and tax laws of Pakistan
  • Consent: Where you have explicitly agreed to specific processing activities
  • Legitimate Interests: For business operations, fraud prevention, and service improvement

5. Data Sharing & Disclosure

We never sell or rent your personal information. We may share your data only with regulatory authorities (SECP, PVARA, FBR, FMU), service providers (banking partners, KYC verification services, cloud infrastructure, professional advisors), and where required by legal process.

6. Data Security

We implement industry-standard security measures including TLS/SSL encryption, encrypted storage with restricted access, need-to-know access control, continuous monitoring, two-factor authentication, and regular security audits. While we use best practices, no system is 100% secure.

7. Data Retention

We retain KYC documents for 7 years after account closure (SECP requirement), transaction records for 10 years (AML requirement), account information for the duration of the account plus 5 years, and website logs for 12 months.

8. Your Rights

You have the right to access, correct, and request erasure of your data (subject to legal retention requirements), object to marketing processing, request data portability, and withdraw consent where consent is the legal basis. To exercise these rights, email us — we respond within 30 days.

9. Cookies & Tracking

Our website uses essential cookies (required for functionality, security, authentication), analytics cookies, and functional cookies. You can control cookies through your browser settings, though disabling some may affect functionality.

10. International Data Transfers

Your data is primarily stored in Pakistan. Some service providers may process data internationally with appropriate contractual safeguards and in compliance with applicable data protection laws.

11. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

12. Marketing Communications

We may send account-related notifications (which cannot be disabled) and, with your consent, investment insights and promotional announcements. You can unsubscribe from marketing communications at any time.

13. Third-Party Links

Our website may contain links to third-party websites (banks, exchanges, regulators). We are not responsible for their privacy practices and encourage you to review their policies.

14. Policy Changes

We may update this Privacy Policy from time to time. Material changes will be notified via email, posted on our website with the updated date, and communicated through your client portal.

15. Contact Us

For privacy-related questions or to exercise your rights, contact our Data Protection team at [email protected].