Privacy Policy

Last updated: 17 July 2026

At GPSWaves, operated by Experts InfoTech (Pvt) Ltd. ("we", "our", "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our GPS tracking platform, or engage with our services.

1. Information We Collect

We collect the following categories of information to provide and improve our GPS tracking services:

Personal Information You Provide

• Account data: full name, email address, phone number, CNIC/passport (for invoicing), billing address.
• Company data: company name, registration number, fleet size, vehicle registration numbers.
• Payment data: handled by our PCI-DSS compliant payment processor — we never store full card numbers.
• Support data: any information you share when contacting our support team.

Vehicle & Telemetry Data (collected automatically via our devices)

• Real-time GPS location, speed, heading, altitude.
• Ignition status, engine hours, mileage.
• Fuel level (where a fuel sensor is installed).
• Temperature & humidity readings (cold-chain sensors).
• Driver-behavior events: harsh braking, acceleration, cornering, speeding.
• Geofence entries/exits, panic-button presses, tamper alerts.

2. How We Use Your Information

We use the collected data to:

• Provide, operate, and maintain the GPSWaves platform.
• Process your subscription and billing.
• Send you service-related notifications (alerts, downtime, security).
• Respond to support requests and improve our services.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with applicable laws and lawful government requests.

We never sell your personal or vehicle data to third parties.

3. Legal Basis for Processing

We process your data under the following legal bases:

• Contract: to deliver the services you have subscribed to.
• Consent: for marketing communications and non-essential cookies (you may withdraw at any time).
• Legal obligation: to comply with tax, accounting, and lawful-authority requests.
• Legitimate interest: to secure our platform, prevent fraud, and improve our services.

4. Sharing Your Information

We share data only with vetted parties who help us operate the service:

• Payment processors to handle subscription billing.
• Cloud hosting providers for secure data storage.
• SMS / push-notification providers to deliver alerts.
• Law-enforcement when required by a valid court order under Pakistani law.

All third parties are bound by confidentiality and data-processing agreements.

5. Data Retention

• Account data: kept for the lifetime of your account plus 7 years for tax/legal compliance.
• Telemetry / history: retained per your subscription plan (30 days / 6 months / 12 months) and securely deleted thereafter.
• Support correspondence: retained for 24 months.

6. Data Security

We protect your data using industry-standard safeguards:

• TLS 1.3 encryption in transit; AES-256 encryption at rest.
• ISO 27001-aligned controls and regular third-party penetration tests.
• Role-based access control and full audit logging.
• 24/7 security monitoring and an in-house incident-response team.

Despite our efforts, no system is 100% secure. If a breach affects your data, we will notify you within 72 hours as required by law.

7. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention obligations).
• Object to or restrict certain processing activities.
• Request data portability in a machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Pakistan Personal Data Protection Authority.

To exercise any of these rights, email privacy@gpswaves.com. We respond within 15 business days.

8. Cookies & Tracking

Our website uses cookies to ensure proper functionality, remember your preferences, and analyse traffic. For full details, see our Cookie Policy. You can manage your cookie preferences at any time from the cookie banner or your browser settings.

9. Third-Party Links

Our website may link to third-party sites (e.g., payment portals, Google Maps). We are not responsible for the privacy practices of those sites — please review their policies separately.

10. Children's Privacy

Our services are intended for business and adult users. We do not knowingly collect data from anyone under 18. If you believe a minor's data has been collected, please contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and a prominent notice on our website at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

For any privacy-related questions or to exercise your rights: