PRIVACY POLICY
Grand City Pakistan respects your privacy and is committed to protecting your personal data.
Data Controller
info@grandcity.pk
International Transfers
If data is processed outside Pakistan (e.g., cloud hosting providers), we ensure adequate safeguards.
Legal Basis for Processing
We process data based on
Data Breach Protocol
In the event of a breach
Internal review within 24 hours
Notification to affected individuals where required
Corrective measures implemented immediately
Automated Decision Making
We do not conduct automated decision-making affecting legal rights without human oversight.
DATA PROCESSING AGREEMENT (DPA)
This Data Processing Agreement (“DPA”) is entered between:
Purpose
Processor shall process personal data solely for:
CRM operations
Marketing automation
Website analytics
Lead management
Nature of Data
May include:
Names
Email addresses
Phone numbers
Property preferences
IP addresses
Processor Obligations
Processor shall:
Process data only on documented instructions
Maintain confidentiality
Implement technical security safeguards
Not subcontract without approval
Notify Controller of any breach within 48 hours
Data Security Measures
Encryption
Access controls
Role-based permissions
Secure hosting environments
Termination
Upon termination, Processor must:
Delete or return all personal data
Certify deletion in writing
