Privacy Policy

1. Statutory Framework & Scope

This Privacy Policy governs the manner in which Globonex (hereinafter referred to as the "Company", "we", "us", or "our") collects, uses, maintains, and discloses information gathered from clients, subscribers, and visitors (each, a "User" or "Client") accessing our portal at https://globonex.com and associated storefront, APIs, and cloud services.

We process personal and technical data in strict compliance with the laws of the Islamic Republic of Pakistan, including the Prevention of Electronic Crimes Act, 2016 (PECA 2016), the Electronic Transactions Ordinance, 2002 (ETO 2002), and applicable national regulations governing data integrity, consumer rights, and cybersecurity.

2. Information We Collect

To provision, invoice, and securely maintain your digital services, we may collect the following categories of data:

• Account & Contact Data: Full legal name, company/organization name, email address, mobile/telephone number, and physical mailing address provided during registration, cart checkout, or support interaction.
• Domain Name Registration Details: Registrant, technical, and billing contact details as legally mandated by domain registries, including PKNIC for .pk / .com.pk national domains and accredited ICANN registrars for international TLDs (.com, .net, .org). Where requested by Pakistani domain regulations, National Identity Card (CNIC) or Passport numbers may be validated for registrar compliance.
• Billing & Payment Information: Invoices issued, payment receipt logs, currency selection, and transaction references returned by authorized financial institutions (such as Bank Alfalah APG, JazzCash, Easypaisa, or 1BILL). Please note: We do not store raw credit/debit card numbers or Card Verification Values (CVV) on our application servers; all sensitive payment credentials are encrypted directly by PCI-DSS compliant banking gateways.
• Technical & Security Metadata: Internet Protocol (IP) addresses, browser user agent, login timestamps, two-factor authentication tokens, and server access audit logs, recorded to defend our infrastructure against unauthorized access, brute-force attacks, and cyber threats under PECA 2016.

3. Purpose and Legal Grounds for Processing

Your information is processed under the following lawful business bases:

1. Contractual Performance: Automated provisioning of cloud hosting packages, VPS servers, software licensing keys, domain name registration/renewals, and execution of your customer orders.
2. Client Communication & Service Intimations: Dispatching essential invoice issuances, renewal notices, service expiration intimations, password resets, and critical infrastructure maintenance alerts.
3. Statutory Accounting & Tax Compliance: Maintaining commercial invoice and general ledger books for provincial sales tax on services (e.g., PRA, SRB) and Federal Board of Revenue (FBR) tax documentation.
4. Cybersecurity & Abuse Prevention: Enforcing our Acceptable Use Policy (AUP), monitoring server network loads, preventing denial of service, and mitigating identity theft under Sections 13 and 14 of PECA 2016.

4. Third-Party Service Providers & Data Sharing

We do not sell, rent, or trade your personal information to marketing third parties. We share data only with authorized service partners strictly necessary for completing your orders:

• Banking & Payment Processors: Bank Alfalah, JazzCash, Easypaisa, PayFast, Safepay, and Stripe for settlement and fraud screening.
• Domain Registrars & Authorities: PKNIC (for .pk domains), ResellerClub, Namecheap, and Cloudflare for registry DNS and ownership allocation.
• Law Enforcement Authorities: We may disclose data when strictly required by a court order, subpoena, or lawful warrant issued by Pakistani law enforcement agencies (such as the Federal Investigation Agency - FIA Cyber Crime Wing, or Pakistan Telecommunication Authority - PTA) in accordance with Section 32 of the Prevention of Electronic Crimes Act, 2016.

5. Data Security Standards

Globonex implements robust technical and organizational measures to safeguard your personal data:

• Encryption: High-grade 256-bit SSL/TLS encryption across all customer portal connections.
• Password Protection: One-way cryptographic hashing (Bcrypt/Argon2) for user authentication credentials.
• Two-Factor Authentication (2FA): Optional and mandatory multi-factor authentication modes to prevent credential compromise.
• Access Control: Granular privilege restrictions limiting internal database access solely to vetted systems administrators.

6. Customer Rights & Data Retention

You hold the right to review, update, and rectify your account details at any time by logging into the Client Portal Profile. Data is retained for the active lifecycle of your subscribed products, plus a statutory period of 5 years following account closure to comply with commercial tax audits and corporate record-keeping rules under Pakistani law.

7. Privacy Officer & Grievance Redressal

For questions, clarifications, or privacy requests regarding your personal data, please contact our designated Privacy Compliance Officer: