Privacy notice
Your information, handled with care.
How Northblanc (private) limited handles personal information on this website. Effective October 2, 2026.
Who is responsible
Northblanc (private) limited, Islamabad, Pakistan, is responsible for personal information collected through this company website. Contact contact@northblanc.org for questions or to exercise a privacy right. This notice covers the marketing website. Recruiting has an additional applicant notice; client projects and future SaaS products may require separate notices and contracts.
What we collect and why
If you send an enquiry, we process the name, email address, company, and message you provide to respond and discuss a potential engagement. Our hosting and security providers process connection information such as IP addresses and request metadata to deliver the site, diagnose failures, and prevent abuse. Please do not include identity documents, payment details, medical records, or other sensitive information in the enquiry form.
Legal bases where GDPR applies
We process business enquiries to take steps at your request before a contract, or under our legitimate interest in responding to business correspondence. Site operation and proportionate abuse prevention rely on legitimate interests in maintaining a reliable service. We may also process records to meet legal obligations. Where processing requires consent, we will request it for that specific purpose and provide a way to withdraw it.
Providers and international handling
The site uses Cloudflare for hosting and security, and Cloudflare Email Routing delivers enquiries to our inbox; Resend may also deliver them when configured. Our team operates in Pakistan, and providers may process information in other countries. Where applicable law requires safeguards for an international transfer, appropriate contractual or other lawful safeguards must cover that transfer. Contact us for information about the arrangement relevant to your enquiry.
Retention and disclosure
We retain correspondence for as long as needed to respond, manage an engagement, meet applicable recordkeeping duties, or handle a dispute. Security records have a separate operational purpose and provider retention period. We assess deletion requests against those needs. Website enquiry data is not sold or shared for cross-context behavioral advertising. Access is limited to people and providers who need it for the purposes described here, or where disclosure is legally required.
Your choices and rights
Depending on the law that applies, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent for consent-based processing and complain to your local data protection authority. Email our contact address; we may need proportionate information to verify your identity. We respond within the period required by applicable law and do not discriminate against people for exercising their rights.
Cookies, children, and changes
This site does not install advertising or analytics trackers. Optional chess features use browser storage as explained in our cookie notice. Security providers may use necessary security mechanisms. The website is intended for business audiences and is not directed to children. We update this notice when the site’s data practices change and show the effective date above.