Privacy Policy

VIE Tech (Private) Limited ("VIE Tech", "we", "us" or "our") operates www.Vietech.pro and provides Vie Compliance Software, Vie Academy and Vie Advisory services. This Privacy Policy applies to personal information processed through the website and those services.

By personal information or personal data, we mean information relating to an identified or identifiable individual, or information treated as personal data under applicable law. This Policy is intended to provide a clear description of our privacy practices and to apply in a manner consistent with mandatory law.

This Policy does not change the ownership or contractual rights applicable to Customer Content under the Terms & Conditions or an applicable written customer agreement.

Website visitors and people who contact Vie Tech.

Customers and prospective customers.

Authorized Users of Vie Compliance Software.

Vie Academy participants, trainees and training contacts.

Vie Advisory clients and their designated contacts.

Business partners, suppliers and other professional contacts.

VIE Tech acts as a controller, or equivalent role under applicable law, when it determines the purposes and means of processing personal information for its own business operations. This includes website administration, account administration, customer support, billing, communications, security, service administration and Vie Tech marketing.

For Customer Content submitted to Vie Compliance Software where the customer organization determines the purposes and means of processing, Vie Tech generally acts as a processor or service provider. The customer organization remains responsible for determining the lawful purposes of its processing and for providing appropriate notices and obtaining permissions where required.

Vie Tech (Private) Limited | Privacy Policy | 92v3

Where a separate data-processing or customer agreement applies, that agreement may contain additional processor obligations, instructions, security terms, subprocessor terms and data-return or deletion provisions.

4.1 Information You Provide

Name, business email address, telephone number, job title and organization.

Account registration and authentication information.

Billing and transaction information necessary to administer subscriptions or purchases. Payment-card details may be processed directly by payment providers rather than stored by Vie Tech.

Information submitted through contact forms, demonstrations, support requests, correspondence, contracts, proposals and service communications.

Training registration, attendance, completion and assessment information for Vie Academy.

Information supplied in connection with Vie Advisory engagements.

4.2 Information Collected Automatically

IP address and approximate technical location derived from network information.

Browser, device, operating-system and language information.

Pages Viewed, navigation and interaction information.

Login, session, diagnostic, security and error information.

Service and feature usage information.

Cookies and similar technologies, subject to applicable consent requirements.

4.3 Customer Content

Customer organizations and their Authorized Users may upload or create documents, records, audit findings, tasks, issues, compliance information, reports, training records and other business information through Vie Compliance Software. Customer Content remains the customer's content. Vie Tech processes Customer Content only as necessary to provide, secure, maintain and support the applicable Services, to comply with law, or as otherwise authorized by the customer or applicable agreement.

Provide, operate and administer the Services.

Create and manage accounts and user access.

Authenticate users and maintain account security.

Process subscriptions, purchases, invoices and payments.

Deliver Vie Academy courses, learning activities, assessments and completion records.

Deliver Vie Advisory services and manage professional engagements.

Respond to questions, support requests and service communications.

Maintain, troubleshoot, secure and improve the Website and Services.

Detect, investigate and prevent fraud, abuse, security incidents and unauthorized access.

Communicate important operational, contractual, security and service information. Vie Tech (Private) Limited | Privacy Policy | 92v3

Send marketing communications where permitted by applicable law and consistent with your choices.

Comply with legal obligations and respond to lawful requests.

Establish, exercise or defend legal rights and manage disputes.

Where a law requires VIE Tech to identify a lawful basis, the applicable basis will depend on the processing activity and the circumstances. Depending on applicable law, we may rely on performance of a contract, compliance with a legal obligation, legitimate interests, consent, or another lawful basis recognized by that law.

Where consent is required, we will request it before the relevant processing and provide an appropriate method to withdraw it. Withdrawal of consent does not affect processing already carried out lawfully before withdrawal.

The Website and Services may use essential, functional, analytics and marketing technologies. Essential technologies may be necessary for security, authentication, navigation and core functionality. Optional technologies are used only where permitted by applicable law and, where consent is required, after the required consent has been obtained.

Cookie and tracking technologies may change as the Website and Services evolve. You can manage available cookie preferences through the Website's consent controls when provided and through your browser settings. Blocking essential cookies may affect functionality.

We do not intentionally use cookies to collect sensitive personal information for unrelated purposes.

We do not sell personal information. We may disclose or make personal information available only as reasonably necessary for the purposes described in this Policy, the Terms & Conditions, an applicable agreement, or as permitted or required by law.

Service providers and subprocessors that support hosting, infrastructure, storage, payments, communications, security, analytics, support or other service functions.

Customer organizations and account administrators where the relevant information is part of an organizational account or training arrangement.

Professional advisers, auditors and insurers where reasonably necessary for business or legal purposes.

Government authorities, courts or law-enforcement bodies where disclosure is required or legally permitted.

A purchaser, successor or other transaction party in connection with a merger, acquisition, restructuring, financing or sale of assets, subject to applicable law.

Other parties where you direct us or otherwise authorize the disclosure. Service providers are authorized to process information only for legitimate service purposes and subject to appropriate contractual or legal protections. The identity of providers may change as our technology and business requirements change. Vie Tech (Private) Limited | Privacy Policy | 92v3

VIE Tech is based in Pakistan and may use service providers or infrastructure located in other countries. Personal information may therefore be processed internationally.

Where applicable law restricts an international transfer, VIE Tech will use a legally recognized transfer mechanism or other appropriate safeguard required by that law. Depending on the jurisdiction, this may include an adequacy mechanism, contractual safeguards or another permitted transfer basis.

For Customer Content processed on behalf of a customer organization, international-transfer requirements may also be addressed through the customer's applicable agreement or data-processing terms.

We implement technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss and misuse. Depending on the system and information involved, these measures may include encrypted communications, encryption at rest where supported, access controls, role- based permissions, multi-factor authentication for administrative access, logging and monitoring, backups, vulnerability management, secure development practices and personnel confidentiality obligations.

No internet or information system can be guaranteed to be completely secure. Security controls are reviewed and improved as appropriate to the risks and the nature of the Services.

VIE Tech's management-system materials reference ISO/IEC 27001 as part of its integrated management approach. Nothing in this Policy constitutes a representation that VIE Tech holds an ISO/IEC 27001 certification unless expressly identified as a current certification by VIE Tech.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, to provide the Services, maintain appropriate business and financial records, resolve disputes, enforce agreements, protect our systems, and comply with legal obligations.

Retention periods vary by data type and context. When information is no longer required, we will delete, anonymize or otherwise securely dispose of it, subject to lawful retention requirements, backups, legal holds and legitimate business needs.

For Customer Content, retention and deletion following termination are governed by the Terms & Conditions and any applicable customer agreement. Customers are responsible for exporting information they require before termination where export functionality is available.

Depending on your location and applicable law, you may have rights relating to your personal information, including access, correction, deletion, restriction, objection, portability and withdrawal of consent. You may also have the right to lodge a complaint with a competent supervisory or regulatory authority.

Vie Tech (Private) Limited | Privacy Policy | 92v3

To request exercise of a right, contact support@Vietech.pro. We may need to verify your identity and may apply lawful exceptions or limitations. We will respond within the period required by applicable law.

If the information is Customer Content processed by Vie Tech on behalf of a customer organization, the customer is generally responsible for responding to the individual's request. Vie Tech will provide reasonable assistance as required by the applicable customer agreement or law.

We may send service, security, account, transaction and other operational communications that are necessary to provide the Services. These communications are not marketing messages.

We may send marketing communications where permitted by applicable law and consistent with your preferences. You can opt out of marketing communications at any time by using the unsubscribe mechanism in the communication or contacting support@Vietech.pro. Opting out of marketing does not stop essential service or transactional communications.

The Services are designed primarily for businesses and professional users and are not directed to children. We do not knowingly collect personal information from children where such collection is prohibited by applicable law. If you believe a child has provided personal information to VIE Tech contrary to applicable requirements, contact support@Vietech.pro so that we can assess and take appropriate action.

VIE Tech maintains processes for identifying, investigating, containing and mitigating information-security incidents. Where a personal-data incident triggers a notification obligation under applicable law or an applicable customer agreement, Vie Tech will provide the required notification within the applicable period and through the appropriate channel.

If you believe your account or information has been compromised, contact support@Vietech.pro promptly and provide sufficient information for us to investigate.

The Website and Services may contain links to third-party websites or integrate with third-party services. Those third parties may process information under their own terms and privacy notices. Vie Tech is not responsible for third-party privacy practices that are outside Vie Tech's control.

Customers are responsible for ensuring that information they provide to Vie Tech, including Customer Content, may lawfully be collected, used and submitted to the Services. Customers should provide appropriate privacy notices to

Vie Tech (Private) Limited | Privacy Policy | 92v3

their personnel, customers, trainees and other data subjects and obtain any consent or authorization required by applicable law.

Customers must not use the Services to process information in a manner prohibited by law or contrary to the Terms & Conditions.

We may update this Privacy Policy to reflect changes in our Services, technology, business practices or applicable legal requirements. The updated version will be published on the Website with a revised Last Updated date. Where applicable law requires notice or consent for a material change, we will provide the notice or obtain the consent required by law.

For privacy questions, requests or concerns, contact Mr. Muhammad Rashid Khan, Privacy Contact at support@Vietech.pro

Vie Tech (Private) Limited

Compliance Software | Academy | Advisory

Headquarters: 3F-18, Marbella Drive Residency, Jati Umrah Chowk, Raiwind Road, Lahore-Pakistan.

Sales Office: 89-Central District, Street 4, Phase 1, Bahria Town Orchard, Lahore-Pakistan.

General contact: +92 334 1111655 | support@vietech.pro info@vietech.pro

Website: www.vietech.pro

The Vie Tech Terms & Conditions govern access to and use of the Website and Services, including subscriptions, payments, Customer Content, acceptable use, intellectual property, suspension, termination and liability. This Privacy Policy governs Vie Tech's handling of personal information. Where a separately signed customer agreement contains specific data-processing terms, those terms govern the relevant customer processing relationship to the extent they lawfully apply.

Vie Tech (Private) Limited | Privacy Policy | 92v3