Privacy Policy

1. Introduction

Stratos Fintech (Private) Limited ("Stratos Fintech", "we", "us", or "our") is committed to protecting the privacy and personal data of individuals who interact with stratosfin.pk. This Privacy Policy explains how we collect, use, store, disclose and protect your personal information, in accordance with applicable Pakistani law including the Prevention of Electronic Crimes Act 2016.

2. Information We Collect

• Identity data: name, CNIC/passport number (where required for KYC).
• Contact data: email address, phone number, postal address.
• Technical data: IP address, browser type, operating system, pages visited, and cookies.
• Correspondence data: messages sent through our contact form or by email.
• Business data: company name and transaction information where applicable.

3. How We Use Your Information

• Responding to enquiries and support requests.
• Providing, maintaining and improving our technology platforms and services.
• Complying with legal and regulatory obligations, including AML/KYC requirements.
• Sending service updates and important notices.
• Detecting and preventing fraud, security breaches and unlawful activity.
• Analysing usage patterns to enhance the user experience.

We do not sell, rent or trade your personal information to third parties for marketing purposes.

3A. SMS / mobile messaging

If you provide a mobile number and tick the SMS consent box on signup, or enroll SMS two-factor authentication in the portal, Stratos Fintech (Private) Limited may send transactional SMS to that number: verification codes, account notices (such as KYC status) and fraud/security alerts. We do not send marketing SMS and we do not buy phone lists. Mobile numbers and SMS consent are not sold or shared with third parties or affiliates for their own marketing. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. You can also contact support@stratosfin.pk. STRATOS FINTECH (PRIVATE) LIMITED is the parent company of Stratos Fintech LLC (Wyoming filing 2026-002071705) and owns 100% of that subsidiary. Consent is not a condition of using the website without SMS; leave the phone field blank if you do not want messages. SMS terms: Mobile Terms of Service. How consent is collected: SMS opt-in.

4. Legal Basis for Processing

• Your consent, where explicitly provided.
• Performance of a contract or pre-contractual steps at your request.
• Compliance with legal obligations applicable to us.
• Our legitimate interests in operating a secure, compliant fintech technology business.

5. International / GDPR Considerations

Where we process personal data of individuals in the UK or European Economic Area, we apply GDPR-aligned safeguards including purpose limitation, data minimisation, retention controls, and appropriate transfer safeguards. International merchants may be asked to complete onboarding documentation and processing-protection acknowledgements before services are activated (once licensed and operational).

6. Data Sharing & Disclosure

We may share information with:

• Service providers who assist in operating our websites and platforms (under data processing agreements).
• Regulatory and law enforcement authorities when required by law, court order or regulatory directive.
• Professional advisers (lawyers, auditors) under confidentiality obligations.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Regulatory and transaction records may be retained for a minimum of five (5) years, or longer where the applicable law requires it.

8. Data Security

We implement appropriate technical and organisational measures including encryption in transit and at rest, access controls, firewalls, and regular security assessments.

9. Your Rights

• Access a copy of your personal data we hold.
• Request correction of inaccurate or incomplete data.
• Request deletion where there is no lawful basis for continued processing.
• Withdraw consent at any time (where processing is consent-based).
• Lodge a complaint with the relevant authority.

To exercise these rights, contact support@stratosfin.pk.

10. Cookies

See our Cookie Policy for details of cookies and similar technologies.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date.

12. Contact

Stratos Fintech (Private) Limited
Office No 10, 2nd Floor, Business Arcade Plaza, Defence Chowk, Cantonement, Lahore, Punjab 54810, Pakistan
Email: support@stratosfin.pk