Privacy Policy

1. Introduction

Welcome to Apna Apartment. We value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Apna Apartment ("we," "us," "our") operates as the Data Controller for the personal data collected through our ERP platform. If you have any questions about this Privacy Policy, you can contact us at

  • Company Name:
  • Apna Apartment
  • Email:
  • info@apnaapartment.com
  • Address:
  • Sarai Kharbuza, Opposite to E-16, GT Road, Islamabad, Pakistan.

3. What Data We Collect

We may collect and process the following personal data

3.1 Personal Information

  • Full Name
  • Email Address
  • Phone Number
  • Job Title
  • Company Name

3.2 Account Usage Data

  • Login credentials
  • IP Address
  • Device Information (browser type, operating system)
  • Activity logs (usage data, interaction with the platform)

3.3 Payment Data

  • Billing address
  • Payment transaction details (processed via third-party payment providers)

4. How We Use Your Data

We use your personal data for the following purposes

  • To provide and manage our ERP services (account creation, access management, user support)
  • To improve our platform (analyzing usage patterns, troubleshooting issues)
  • To communicate with you (product updates, security notifications, service-related messages)
  • To comply with legal obligations (GDPR compliance, financial reporting, fraud prevention)
  • To process payments (billing and invoicing via third-party providers)

5. Legal Basis for Processing Data

We process your personal data under the following legal bases

  • Contractual Obligation – Processing necessary to provide our services.
  • Legitimate Interest – Improving user experience, security measures.
  • Legal Compliance – Fulfilling GDPR and other legal requirements.
  • Consent – When you provide explicit consent for marketing communications.

6. Data Sharing Third-Party Services

We do not sell or rent your personal data. However, we may share it with

  • Service Providers (hosting, payment processing, analytics, customer support)
  • Legal Authorities (when required by law)
  • Business Transfers (in case of mergers or acquisitions)

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy. After this period, we securely delete or anonymize the data

8. Your Rights Under GDPR

  • Right to Access – Request a copy of your personal data.
  • Right to Rectification – Correct inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”) – Request data deletion.
  • Right to Restrict Processing – Limit how we process your data.
  • Right to Data Portability – Transfer your data to another service provider.
  • Right to Object – Object to data processing based on legitimate interests.
  • Right to Withdraw Consent – Opt out of marketing communications at any time.

To exercise any of these rights, contact us at info@islootech.com.

9. Data Security

We implement industry-standard security measures to protect your data, including

  • Encryption Secure Storage
  • Access Controls Authentication
  • Regular Security Audits

10. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other GDPR-compliant mechanisms.

11. Cookies Tracking Technologies

We use cookies to improve user experience. You can manage cookie preferences via your browser settings.

12. Updates to This Privacy Policy

We may update this policy periodically. Changes will be posted on our website with the effective date.

13. Contact Us

For any questions or concerns about this Privacy Policy, contact us at