Privacy Policy

Rafin Solutions is a specialist consultancy that provides compliance, governance, and financial-services support to businesses operating in or seeking to enter regulated financial services. For the purposes of data protection law, we act as the controller of the personal information described in this policy.

Our registered office address is: Opposite to Bega Sanitary Store, Gulyana Road, Kharian, District Gujrat, Pakistan.

We collect information that you provide to us directly and information collected automatically when you use our Site. The categories we collect include:

• Contact details you submit through our enquiry form, such as your name, company name, email address, and phone number.
• Information you provide by email, phone, or video call when you request a consultation, ask a question, or instruct us to provide services.
• Details contained in documents you share with us during a consultation or engagement, which may include personal information of your directors, officers, employees, or customers.
• Technical information collected automatically, such as your IP address, browser type, device information, and pages you visit on our Site.
• Information you provide if you apply for a role with us, such as your CV, employment history, and qualifications.
• Details of referrals, if someone recommends our services to you.

We use personal information for the following purposes:

• To respond to enquiries and provide the information, proposals, and services you request.
• To assess whether we can assist you and to prepare scopes of work and proposals.
• To deliver consultancy services under an engagement and to invoice and manage our client relationship.
• To send you relevant updates, insights, or newsletters where you have asked to receive them and you may opt out at any time.
• To understand how visitors use our Site so we can improve it.
• To comply with our legal, regulatory, and professional obligations, including record-keeping requirements.
• To assess job applications and manage our recruitment process.

Where the GDPR and UK GDPR apply, we rely on the following lawful bases:

• Consent, where you have given it clearly, for example to receive marketing communications. You can withdraw consent at any time.
• Performance of a contract, where processing is necessary to provide services you have engaged us to deliver or to take steps at your request before entering an engagement.
• Legitimate interests, such as operating and improving our Site, responding to enquiries, managing our client relationships, and keeping appropriate business records, provided your interests and rights do not override ours.
• Compliance with a legal obligation, where we must process information to satisfy a legal, regulatory, or professional requirement.

Our Site may place small text files known as cookies on your device to help the Site function properly and to collect information about how visitors use it. Cookies may be used to remember your preferences, keep the Site secure, and understand aggregate usage patterns such as the pages visited and time spent on the Site.

Where analytics cookies are used, the information collected is aggregated and used to improve our content and user experience. You can control or delete cookies through your browser settings at any time. Disabling certain cookies may affect how the Site works for you.

We do not sell, rent, or trade your personal information. We only share it where necessary and always in line with this policy, including with:

• Service providers who support our business, such as IT hosting, email, and analytics providers, who process information on our behalf under appropriate contracts.
• Professional advisers such as legal, accounting, and regulatory specialists where needed to deliver our services.
• Regulators, law enforcement, courts, or other authorities where we are required or permitted to do so by law.
• A prospective buyer or successor in the event of a merger, sale, or restructuring of our business.

As a consultancy operating internationally, your personal information may be processed in countries outside the UK and the EEA, including Pakistan where our office is based. Where we transfer personal information outside the UK or EEA, we take steps to ensure it receives an equivalent level of protection, for example through the UK or EU adequacy regulations or by using appropriate safeguards such as standard contractual clauses.

We keep personal information only for as long as necessary for the purposes described in this policy, and to satisfy legal, regulatory, tax, and professional record-keeping obligations. Enquiry and pre-engagement information is typically retained for a limited period. Where an engagement is entered into, records are retained in line with our professional obligations and any applicable regulatory requirements. When information is no longer needed, we delete or anonymise it securely.

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of your personal information in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on our legitimate interests.
• Request portability of information you have provided to us in a structured, machine-readable form.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO), if you are concerned about how we handle your information.

To exercise any of these rights, please contact us using the details below. We will respond within the timeframes required by applicable law and may need to verify your identity before responding.

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration, and disclosure. These include access controls, secure storage of records, and confidentiality obligations on our team and service providers. Please note that no method of transmission over the internet is completely secure, and we cannot guarantee the absolute security of information transmitted to us electronically.

Our Site and services are directed at businesses and are not intended for children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Our Site may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to read the privacy policy of any website you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The latest version will always be available on this page, and the “Last updated” date above will be revised accordingly. Where changes are significant, we will take reasonable steps to bring them to your attention.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

• Email: rafinsolutions@outlook.com
• Phone: +92 304 5896617
• Address: Opposite to Bega Sanitary Store, Gulyana Road, Kharian, District Gujrat, Pakistan