Privacy Policy

What this platform holds

DijiPeople is a multi-tenant HR platform. Personal data falls into two groups with different controllers.

Enquiry and account data, where DijiPeople is the controller: the name, work e-mail, phone number, company and country given on the contact, partner or subscribe forms, plus attribution (referring URL, UTM parameters, the page the form was on) and the technical record of the submission.

Employee data, where the customer is the controller and DijiPeople is a processor: everything a customer's HR administrators put into their workspace — employee records, attendance, leave, payroll, documents. DijiPeople does not decide what goes in and does not use it for its own purposes.

Consent, and how it is recorded

The privacy notice acknowledgement, marketing consent and cookie consent are recorded separately. Submitting a form never requires agreeing to marketing.

Each acknowledgement stores the exact version of the document that was shown, and published versions are immutable — a correction is published as a new version and the old one is archived rather than edited. That is what makes an acknowledgement evidence rather than an assertion.

Marketing consent can be withdrawn at any time. Withdrawal is recorded as a new entry rather than by editing the original, so the sequence of decisions remains visible.

Retention

Enquiry data is retained while the enquiry is live and for the platform's ordinary business-record period afterwards.

When a customer's subscription ends, their workspace enters a 60-day retention window before erasure. The window length is recorded on the customer's own retention record when it starts, so a later change to the platform default cannot shorten a period a customer was already told about. See the Data Retention Policy.

Rights

Access, correction, erasure and objection requests should be sent to the contact address on the website. Where DijiPeople is a processor rather than a controller — which is the case for all employee data inside a workspace — such a request is passed to the customer who controls it.

Sub-processors

The service uses third parties for hosting, database, payments and e-mail. They are listed, with purpose and status, on the Subprocessors page.

Changes

Material changes are published as a new version with its own effective date. Previous versions are retained because acknowledgements refer to them.

The operator

This service is provided by DijiPeople (SMC-PRIVATE) LIMITED, a company incorporated in Pakistan under SECP registration number 38252358, with its registered office at Hasan Lodge, Block 7, F.B. Area, Karachi, Pakistan and National Tax Number 748234783.

These terms are governed by the laws of Pakistan.