1. Who We Are
Briskbase Technologies ("Briskbase", "we", "our", "us") is a privately held technology company operating from Pakistan and Oman. We develop, sell, and operate business software products and provide technology engineering services. This Privacy Policy covers our website at briskbase.com and all software products sold or operated under the Briskbase name.
2. Products Covered by This Policy
This policy applies to personal and payment data collected in connection with the following Briskbase products, all of which process customer payments through the Briskbase Bridge payment gateway:
GulfPOS
Sales, inventory, invoicing, customer management, and multi-branch control for retail and wholesale businesses.
Eventobey
Booking, packages, payments, customer management, and operations software for banquet halls and event venues.
Laundry Management
Order tracking, garment handling, customer records, tokens, invoices, and delivery management for laundry businesses.
Sufra360 Restaurant POS
Orders, tables, billing, kitchen operations, and KOT workflows for restaurants and cafés.
When new products are launched under the Briskbase brand and connected to the Briskbase Bridge payment gateway, this policy automatically extends to cover them.
3. Information We Collect
3.1 Information you provide directly
- Name, email address, phone number, and company details submitted through our contact, enquiry, project request, or demo booking forms.
- Account credentials and profile information when you or your business registers for a Briskbase product subscription.
- Billing name and contact details required to issue invoices for product subscriptions or services.
3.2 Payment and transaction data
When payments are processed through Briskbase Bridge (our payment gateway platform), the following data is handled:
- Transaction amount, currency, and order reference provided by the merchant's application.
- Customer name and email address where submitted by the merchant at the point of checkout.
- Payment status, gateway response codes, and transaction identifiers.
- Card or payment instrument details are not stored by Briskbase. These are handled entirely by our licensed payment processor partners (currently Safepay, operated by DBANK Inc.) who are PCI-DSS compliant. We receive only tokenised references and transaction outcomes.
3.3 Automatically collected data
- IP addresses, browser type, device identifiers, and HTTP request timestamps collected for security, fraud detection, and session integrity purposes.
- Usage patterns within our products (screens visited, actions performed) to support debugging, performance improvements, and product development. This data is not linked to personally identifiable information.
4. How We Use Your Information
- Service delivery: To respond to enquiries and provide the products or services you have subscribed to or purchased.
- Payment processing: To route transactions to our payment processor, issue receipts, and reconcile accounts.
- Account management: To create and maintain your product account, send renewal notices, and handle billing.
- Fraud prevention and security: To detect, investigate, and block fraudulent transactions, unauthorised access, and abuse of our services.
- Legal and regulatory compliance: To meet obligations under the laws of Pakistan and Oman, including record-keeping requirements for financial transactions.
- Product improvement: To understand how our products are used so we can fix issues and improve features. We do not sell this data.
5. Payment Processor Relationship
Briskbase Bridge connects to third-party payment processors to complete card and wallet transactions. Currently, transactions are routed through:
- Safepay (DBANK Inc.) — a Pakistan-based licensed payment service provider. Safepay is responsible for capturing, authorising, and settling card payments. Their own Privacy Policy and terms govern how they handle cardholder data. Briskbase does not have access to raw card numbers, CVVs, or PINs.
We may add or change payment processor partners over time. Any new processor will be held to equivalent data protection standards.
6. Data Sharing
We do not sell, rent, or trade personal information. We share data only where necessary:
- Payment processors: Transaction data is shared with our payment processor partner(s) solely to complete the payment you have initiated.
- Infrastructure providers: We use hosting, email delivery, and monitoring services. These providers process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
- Merchants (Briskbase Bridge): If you are a customer completing a payment for a Briskbase product subscription, the merchant of record is Briskbase itself. If Bridge is used by a third-party merchant, your payment data is visible to that merchant in their dashboard, as you would expect from any transaction.
- Legal authorities: We disclose data when required by a valid court order, subpoena, regulatory directive, or applicable law in Pakistan or Oman.
7. Data Retention
We retain personal data for as long as required to deliver the service and meet legal obligations. Transaction records and financial data are retained for a minimum of five (5) years as required by financial regulations in Pakistan. Account data is retained for the life of the subscription and for a reasonable period thereafter in case of disputes. You may request earlier deletion (see Section 8) where no legal obligation prevents it.
8. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of data we are not legally required to retain.
- Object to processing of your data for purposes other than those described here.
- Withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at sales@briskbase.com. We will respond within 14 business days.
9. Security
All data in transit between your browser, our servers, and our payment processor is encrypted using TLS 1.2 or higher. We apply role-based access controls, secure credential storage, and regular security reviews to protect stored data. No transmission method is 100% secure; we take all commercially reasonable steps to protect your information and will notify affected users of any breach where legally required.
10. Cookies
Our website uses minimal cookies necessary for session management and security. We do not use advertising or behavioural tracking cookies. Our payment checkout pages use session cookies required for secure transaction processing and do not persist beyond your browsing session.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. For significant changes affecting payment data processing, we will notify subscribed merchants directly. Continued use of our products after notice of changes constitutes acceptance of the updated policy.
12. Contact
For any privacy-related questions, data access requests, or to report a concern, contact us at:
sales@briskbase.com
Briskbase Technologies · Pakistan & Oman