Privacy Policy
Last Updated: June 1, 2026 | Effective: June 1, 2026
1. Introduction
The Sindh IT Complaint Portal ("the Portal") is operated by the Government of Sindh IT Department. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our complaint management services.
2. Legal Basis
Our data handling complies with:
- Prevention of Electronic Crimes Act (PECA) 2016
- Personal Data Protection Bill of Pakistan
- Sindh Government IT Policies and Circulars
- Right to Information laws applicable in Sindh
3. Data We Collect
From Citizens (Complainants):
- Name (required)
- Email address (optional)
- Phone number (optional)
- CNIC number (optional)
- City of residence (optional)
- Complaint details and supporting documents
From Companies:
- Company name, registration details (SECP/NTN)
- Contact person information
- Staff member details for sub-accounts
Automatically Collected:
- IP address and user agent
- Timestamps of all actions
- Session identifiers
4. How We Use Your Data
- Process and route your complaint to the appropriate government department
- Communicate with you about ticket status
- Maintain audit trails for accountability
- Generate anonymized statistical reports
- Comply with legal obligations
5. Data Sharing
Your complaint data may be shared with:
- The relevant Sindh government department/ministry handling your complaint
- Law enforcement if required by law
- Auditors and oversight bodies
We do not sell, rent, or share your data with third-party commercial entities.
6. Data Retention
- Active tickets: Retained until resolution + 12 months
- Closed tickets: Archived for 7 years per government records policy
- Audit logs: Retained for 10 years for accountability
- Attachments: Retained with ticket, purged with ticket
7. Your Rights
- Access: Track your ticket anytime using ticket number + PIN
- Correction: Reply to your ticket with updated information
- Deletion: Request ticket closure (subject to legal retention)
- Complaint: Contact the Sindh IT Ombudsman
8. Security Measures
- HTTPS encryption (TLS 1.2+) on all connections
- Passwords hashed using bcrypt
- CSRF protection on all forms
- Role-based access controls for government staff
- Complete audit trail of all privileged actions
- Data hosted within Pakistan (data localization)
9. Cookies
- Access: Track your ticket anytime using ticket number + PIN
- Correction: Reply to your ticket with updated information
- Deletion: Request ticket closure (subject to legal retention)
- Complaint: Contact the Sindh IT Ombudsman
8. Security Measures
- HTTPS encryption (TLS 1.2+) on all connections
- Passwords hashed using bcrypt
- CSRF protection on all forms
- Role-based access controls for government staff
- Complete audit trail of all privileged actions
- Data hosted within Pakistan (data localization)
9. Cookies
We use only essential session cookies required for authentication. No tracking cookies, no advertising cookies, no third-party analytics.
10. Contact
For privacy inquiries:
- Email: privacy@sindh.gov.pk
- Phone: 021-99211001
- Mail: Data Protection Officer, Sindh IT Department, Secretariat, Karachi
11. Changes to This Policy
We may update this policy. Significant changes will be announced on the portal homepage. Continued use constitutes acceptance.