Innovative Ecom

Effective Date: 01/07/2025

Last Updated: 10/10/2025

1. Introduction

Innovative Ecom (“we,” “us,” “our”) respects your privacy and is committed to protecting the personal data of our customers, partners, suppliers, and website visitors. This policy explains how we collect, use, disclose, and safeguard your information when you engage with our services, visit our websites, or interact with us through any digital or offline channel.

We operate in the United Kingdom and Pakistan and comply with all applicable data protection regulations, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant local laws in Pakistan.

2. Who We Are

Innovative Ecom Ltd

Registered Address: [Insert UK Registered Office Address]

Trading Address: Karachi Innovation Lab, Sindh, Pakistan

Website: https://www.innovativeecom.io

Email: info@innovativeecom.io

Innovative Ecom is an EPOS and hospitality technology specialist providing managed IT services, digital transformation, structured cabling, CCTV installations, ERP (Odoo) solutions, and software support services for the retail and hospitality sectors. We are also an authorised reseller for OrderWire and PAR Technology and other global technology vendors.

3. Scope of This Policy

This Privacy Policy applies to:

Visitors to our websites or social channels
Clients, franchisees, and vendors who receive or provide services
Employees, contractors, and support staff
Users of any Innovative Ecom platform, portal, or helpdesk
Participants in demonstrations or trials conducted in our Karachi lab

4. Information We Collect

We may collect and process the following categories of information:

A. Personal Data Provided by You

Name, job title, company name
Email address, phone number, and business address
Payment details and billing information
Login credentials for service portals
Identification or tax details where required for contracting
Communication records and support tickets

B. Automatically Collected Data

When you visit our website or service portal, we may collect:

IP address and browser type
Device information and operating system
Session duration, pages visited, and referring URL
Cookies, analytics, and usage data (see Section 10)

C. Business and Technical Data

Site layout drawings or network architecture shared for EPOS or KDS projects
Configuration files, logs, and device serial numbers for support purposes
Franchisee store contact lists for managed service delivery

5. How We Use Your Information

We process personal and technical data for the following purposes:

To provide and manage contracted services (EPOS deployment, support desk, KDS integration, etc.)
To process orders, payments, and contracts
To communicate about service issues, product updates, or incident resolution
To deliver remote or onsite support via tools such as Zoho Desk, TeamViewer, or ServiceNow
To improve our products, lab demonstrations, and training programmes
To meet legal, regulatory, and tax obligations
To conduct internal reporting and analytics
To market compatible solutions to existing and prospective clients (only with consent where required)

6. Lawful Basis for Processing

We rely on one or more of the following legal grounds to process personal data:

Contractual necessity – to perform a contract or prepare a quotation
Legitimate interest – to run our business efficiently and improve services
Legal obligation – to comply with tax, accounting, or regulatory requirements
Consent – for optional marketing or non-essential communications

7. Data Sharing and Disclosure

We do not sell personal information. However, we may share data with:

Technology partners (e.g., PAR Technology, Oracle, OrderWire, Odoo Partners) for hardware/software support
Service providers for cloud hosting, telephony, remote access, and ticketing platforms
Subcontractors in Pakistan for service desk or field engineering support (under strict confidentiality agreements)
Professional advisers (accountants, legal representatives, auditors)
Regulatory authorities or law enforcement where required by law

All third parties are bound by appropriate data processing agreements and must implement adequate security measures.

8. International Data Transfers

As we operate in both the UK and Pakistan, data may be transferred between these jurisdictions to facilitate service delivery.

Such transfers are protected by standard contractual clauses and internal data-handling protocols to ensure an equivalent level of protection as required under UK GDPR.

9. Data Retention

We retain personal and project data only for as long as necessary to fulfil the purposes for which it was collected or to meet legal and regulatory obligations.

Typical retention periods include:

Client contracts and invoices – 7 years
Support logs and incident records – 3 years from closure
Marketing contact details – until withdrawal of consent

10. Cookies and Tracking

Our website uses cookies and analytics tools (Google Analytics, Meta Pixel etc.) to improve user experience and measure site performance.

You can adjust your browser settings to decline cookies or delete existing cookies at any time. Essential cookies required for security and core functionality cannot be disabled.

11. Data Security

We employ technical and organisational measures to safeguard your data including:

Encrypted storage and transmission of all sensitive data (SSL/TLS)
Role-based access control and two-factor authentication for internal systems
Regular backups and disaster recovery protocols
Secure disposal of obsolete hardware and WEEE-compliant recycling
Staff training in information security and incident response

12. Your Data Protection Rights

Under UK GDPR and applicable local laws, you have the right to:

Request access to your personal data
Request correction of inaccurate information
Request erasure (“right to be forgotten”)
Object to or restrict processing
Request data portability
Withdraw consent at any time (for marketing purposes)

To exercise any of these rights, please contact us at info@innovativeecom.io.

We will respond within one calendar month.

13. Marketing Communications

We may send news, updates, or promotional offers related to our services (e.g., OrderWire, PAR POS solutions, Odoo ERP modules).

You can unsubscribe at any time using the link in emails or by contacting us directly.

We never share your information with third parties for their own marketing purposes.

14. Children’s Privacy

Our services are intended for business clients and not for children under 16 years of age. We do not knowingly collect personal data from minors.

15. Changes to This Policy

We may update this policy periodically to reflect legal changes or business practices. The latest version will always be posted on our website with the effective date.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact: