Privacy Policy

Last Updated: February 13, 2026

This Privacy Policy outlines how Family Educational Services Foundation ("we," "us," or "the Organization") collects, uses, handles, and protects data within our internal web tools, automation portals, and mobile applications (collectively, "the Services").

By using these Services, you acknowledge that you have read, understood, and agree to the terms outlined below and our general Terms and Conditions.

1. Scope of Use

Our Services are strictly designed for the use of authorized employees, partners, and affiliates only. Access is granted for professional and educational purposes and is subject to organizational oversight and compliance requirements.

            Important: Unauthorized access, misuse, or sharing of credentials may result in immediate account suspension and potential disciplinary action.
        

2. Access and Registration

Approval-Based Access

While some portals allow for self-registration, all accounts require manual review and approval by the Organization's IT Department or designated administrators.

Right of Revocation

The Organization reserves the right to suspend or terminate access to any Service at any time, for any reason, without prior notice. Reasons may include, but are not limited to:

Termination of employment or partnership
Violation of usage policies
Security concerns or suspicious activity
Extended periods of inactivity

3. Information We Collect

We collect and process the following types of information:

Account Information: Name, email address, phone number, employee ID, designation, and department
Device Information: IP address, device type, operating system, browser type, and app version (for mobile applications)
Usage Data: Login timestamps, activity logs, feature usage, and performance metrics
Work-Related Content: Files, documents, messages, forms, and other data created or uploaded through the Services

4. How We Use Your Information

Information collected through our Services is used for the following purposes:

Providing, maintaining, and improving the Services
User authentication and access control
Monitoring system performance and security
Troubleshooting technical issues
Generating reports and analytics for organizational decision-making
Ensuring compliance with organizational policies and legal requirements
Communicating important updates, maintenance schedules, or policy changes

5. Data Collection and Ownership

Work Product

Any data, files, communications, or information uploaded, created, or transmitted through our Services are considered work-related data and organizational assets.

Organizational Property

In accordance with our internal policies and employment agreements, all data processed through these Services is the exclusive property of the Organization.

No Right to Deletion

Because the data is organizational property and may be subject to legal, regulatory, or operational requirements, users do not have a right to request the deletion or export of data uploaded during the course of their professional duties. However, personal data unrelated to work may be subject to review upon request.

6. Data Retention and Security

We take data integrity and security seriously and implement the following protections:

Security Measures

All data is encrypted at rest and in transit using industry-standard protocols (TLS/SSL)
Regular security audits and vulnerability assessments
Access controls based on role-based permissions
Multi-factor authentication where applicable
Regular backup procedures to prevent data loss
Network monitoring and intrusion detection systems

Data Retention

We retain data for as long as it is deemed necessary for business operations, legal compliance, or as required by applicable regulations. Retention periods may vary based on data type and organizational needs.

No Third-Party Sharing

We never sell your data. We do not share data with third parties unless:

Required by law, court order, or legal process
Necessary for specific, authorized service integrations (e.g., cloud hosting providers, authentication services)
Needed to protect the rights, property, or safety of the Organization or its employees

7. User Responsibilities

Users of our Services are expected to:

Maintain the confidentiality of login credentials
Use the Services only for authorized professional purposes
Report any security incidents or suspicious activity immediately
Comply with all organizational policies and applicable laws
Not attempt to access unauthorized areas or data
Not share access credentials with unauthorized individuals

8. Cookies and Tracking Technologies

Our web-based Services may use cookies and similar tracking technologies to:

Maintain user sessions and authentication states
Remember user preferences and settings
Analyze usage patterns to improve user experience
Monitor system performance and security

Users can manage cookie preferences through their browser settings, though disabling certain cookies may affect functionality.

9. Compliance with Play Store Requirements

For applications distributed via the Google Play Store, we collect minimal device information strictly for functional performance, security monitoring, and troubleshooting. No personal browsing data or unrelated device information is harvested.

Our mobile applications comply with Google Play's data safety requirements and user privacy standards.

10. Data Breach Notification

In the event of a data breach that affects user information, we will:

Investigate the incident promptly and take necessary remediation steps
Notify affected users within a reasonable timeframe
Report to relevant authorities as required by applicable regulations
Implement additional security measures to prevent future incidents

11. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children. In cases where educational services involve minors, data is collected and managed in accordance with applicable child protection laws and organizational safeguarding policies.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, Services, or legal requirements. When we make material changes, we will:

Update the "Last Updated" date at the top of this policy
Notify users via email or in-app notifications where appropriate
Post the updated policy on our website and relevant platforms

Continued use of the Services after such changes constitutes acceptance of the updated policy.

13. Your Rights

While organizational data remains the property of the Organization, you may have certain rights regarding your personal information, subject to applicable laws and organizational policies:

Access: Request information about what personal data we hold about you
Correction: Request correction of inaccurate personal information
Restriction: Request restriction of processing under certain circumstances
Objection: Object to processing of your personal data in certain situations

To exercise these rights, please contact our IT Department using the information below.

Contact Information

For questions regarding this policy, data protection inquiries, or technical support, please contact:

IT Department
Family Educational Services Foundation

Email: it [dot] manager [at] fesf [dot] org [dot] pk

Website: fesf-it.com

We aim to respond to all inquiries within 5 business days.