GDPR Compliance

1. Applicability

This GDPR Compliance statement applies to personal data of individuals located in the United Kingdom (UK GDPR) and European Union (EU GDPR). Nexivol serves UK-based Pakistani diaspora clients and may receive enquiries from EU residents. Where we process personal data of such individuals, we comply with the principles set out below.

2. Data Controller

Nexivol Technologies (SMC-Private) Limited acts as the Data Controller for personal data collected through our website and in the course of providing professional services. Our registered address is Blue Area, Islamabad, Pakistan. Our operating address is Dubai, UAE.

Contact for data protection matters: info@nexivol.com

3. Lawful Basis for Processing

We process personal data on the following lawful bases:

• Contract performance: Processing necessary to deliver the professional services you have engaged us for (tax filing, company registration, accounting)
• Legal obligation: Processing required to comply with tax laws, anti-money laundering regulations, and other legal requirements in Pakistan, UAE, UK, or USA
• Legitimate interests: Processing necessary for our legitimate business interests such as responding to enquiries, improving our services, and maintaining business records — where these interests are not overridden by your rights
• Consent: For any processing not covered above, we obtain your explicit consent

4. Your Rights Under GDPR

If you are located in the UK or EU, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data, subject to our legal retention obligations
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any right, email info@nexivol.com. We will respond within 30 days.

5. International Data Transfers

As a Pakistan-registered firm operating from Dubai and serving clients in the UK and USA, data you provide to us may be processed in Pakistan and UAE. Both jurisdictions have data protection laws in place. Where we transfer data for the purpose of completing a UK or US tax filing, such transfer is necessary for the performance of the contract you have requested.

6. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected or as required by applicable law. Tax and financial records are retained for a minimum of 6 years consistent with HMRC and FBR requirements. Enquiry data is retained for 12 months.

7. Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, contact your national data protection authority.

Contact Us

Questions about this document:

Email: info@nexivol.com
WhatsApp: +92 333 104 4500
Registered Office: Blue Area, Islamabad, Pakistan
Operating Address: Dubai, United Arab Emirates