Effective date: 2025-10-01. This policy applies to services offered in Pakistan by Amniat.pk.
Who we are
Amniat.pk is a Pakistan-focused cybersecurity service providing breach monitoring, vulnerability assessments, incident assistance, and training.
Information we collect
Account data — name, email, phone, organization, role.
Service data — domains/emails monitored, scan targets, incident details you submit.
Technical data — device/browser info, IP, cookies necessary for security and login.
How we use information
Provide services (alerts, scans, dashboards, certificates).
Secure accounts, investigate abuse, and prevent fraud.
Communicate updates, invoices, and security notices.
Legal basis & local compliance
We process data with consent, contract necessity, and legitimate interest, aligned to Pakistan’s Prevention of Electronic Crimes Act (PECA) 2016 and applicable data protection principles.
Sharing & transfers
We may share limited information with vetted security partners solely to deliver requested services, or when lawfully required by authorities. We do not sell personal data.
Retention
We keep incident and scan logs only as long as needed for service and audit, then anonymize or delete.
Your rights
Access, correct, export, or delete your data.
Withdraw consent and opt out of marketing.
Raise a complaint via the contacts below.
Children’s privacy
Services are for users 13+ with guardian involvement for minors where applicable.
Security measures
We use encryption in transit, hardened hosting, access controls, and regular vulnerability reviews.
Breach notification
If we detect a breach affecting your data, we will notify you and relevant authorities as required.