As enshrined in the Constitution of Islamic Republic of Pakistan, 1973, the Prevention of Electronic Crimes Act, 2016 (the “PECA”) as well as any laws regulating data privacy, for the time being in force in Pakistan, and in consonance with the International Covenants of Civil and Political Rights (“ICCPR”), the Gift University (“University”) commits to protect the data privacy while using this University’s Website (the “Website”). This privacy policy, strictly in terms of the prevalent laws as mentioned above, is applicable to the personal data we process and collect during the course of our day-to-day business affairs. This information shall be used in compliance with the applicable laws of Pakistan, including the PECA, laws relating to personal data protection and privacy, international conventions and any other law, rules and regulations relating to data privacy and protection form the time being in force.
For the purposes of this Privacy Policy, University is the controller of personal data. This means that the University determines the purposes for which, and the manner in which, Personal Data is collected, used and disclosed.
Explanation: “Personal Data” means any information that relates directly or indirectly to a data subject, either a natural or juristic person, who is identified or identifiable from that information or other information in the possession of a data controller and / or data processor, including any sensitive or critical personal data.
When you interact with the University’s website, the servers may collect Personal Data from you when you use certain services. For example, a visitor may be asked to provide details when ordering a prospectus, applying for admission, registering with a society, applying for a vacancy or such other activity as may be performed on the website requiring inputting certain data. This data may be stored manually or electronically and by providing such information, you consent to the University holding and using it only for the purpose for which it was supplied. Furthermore, such information will be retained for as long as necessary to fulfill that purpose.
In addition to the information you provide directly, as mentioned above, the University’s servers may automatically collect certain technical information to help us administer the Website and improve user experience. This may, inter alia, include:
Note: This information is collected for purposes of security and statistical analysis only. It is reviewed only in aggregate form and does not directly identify individual users. The data enables the University to monitor Website’ performance and ensure that contents within it is delivered in the most effective way for all the visitors.
The University is committed to protect Website users’ rights as per the prevalent law. Under the relevant laws in force, you have important rights over the personal information that you share with University through this Website. You can ask us for a copy of the information we hold about you and request that any details which are inaccurate, or incomplete be corrected.
If a visitor has given consent to use the information we hold (for instance, by filling out an online form as detailed above), such visitor has the right to withdraw that consent at any time. They may also ask us to delete their personal information, unless we are legally required to keep it for record-keeping or regulatory purposes or where retention is required to comply with audit or accounting obligations, to exercise, establish or defend legal claims, to fulfill any ongoing contractual arrangements, or to maintain legitimate interests of the institution such as academic records or ensuring safety standards. These situations shall be treated as standard erasure exceptions.
To exercise any of these rights, we may be contacted at: data.protection@gift.edu.pk.
The personal information or data collected is solely used for the purpose clearly stated at the time of collection. We will not sell or provide your personal information to any third party without your explicit consent. The personal information collected through the website shall remain protected under the prevalent laws of Pakistan as well as the international conventions regulations and best practices.
All personal information collected by the University is stored and used in accordance with the laws of Pakistan, including the PECA and any prevalent law relating to the Personal Data privacy and protection. Information is stored securely and retained only for as long as necessary to fulfil the purpose for which it was collected, with framed retention schedules applied, for example, the user data may be retained for up to four (4) years after the admission cycle ends. In respect to general website enquiries or support tickets, information may be retained for two (2) year after closure, unless a longer period is required for legal or regulatory purposes).
In addition to the information you provide directly, we may collect demographic and statistical data about how visitors use our Website, which includes assessing which pages are most frequently visited or how long visitors stay on certain sections. As detailed above, the relevant information collected through the abovementioned modes shall be dealt with under the prevalent laws. These statistics are used to assess and improve the user experience. Any reporting or disclosure of this data is carried out in aggregate form and does not identify individual users.
The University respects your privacy and gives you control over how your personal information / data is used strictly in terms of PECA and any other law for the time being in force.
For international users, under the California Consumer Privacy Act (“CCPA/CPRA”), residents of California have the right to choose not to “sell” or “share” their personal information with third parties. University does not sell personal information to third parties especially those protected under the abovementioned law. However, if you would like to ensure that your details are not shared for marketing or promotional purposes, you may exercise your right to opt-out at any time.
Similarly, under the General Data Protection Regulation (“GDPR”), individuals in the European Economic Area, the United Kingdom, and Switzerland have the right to reject the processing of their personal data. “Processing” includes the use of personal data for analytics, marketing, or other non-essential purposes. We may, subject to your consent and discretion, disclose your data to our advertising team so that they can show you ads that are more relevant to your interests. Some of these disclosures may be considered a “sale” or “sharing” of data under relevant law.
If you prefer to opt-out or be removed from our communication lists, please select the option provided therein.
The University primarily processes and stores personal data within Pakistan. However, in limited circumstances, personal data may be transferred to service providers, academic partners, or cloud platforms located outside Pakistan in order to support admissions, academic collaborations, or technical services being availed from such platforms.
Whenever such transfers of data occur, the University makes sure that appropriate and secure safeguards are in place to protect your person specific information in that data. These safeguards may include contractual obligations with the recipient, reliance on recognized international standards of data protection, or requiring your consent where required by law. Regardless of where your data is processed at, the University remains committed to ensuring that your personal information is handled strictly in accordance with applicable data protection laws, the PECA, and international conventions, rules and best practices so that an equivalent level of protection is maintained.
The University uses automated tools in certain processes, such as admissions scoring, scholarship assessments, or other academic evaluations, to support timely and consistent decision-making. These systems assist authorized University personnel in reviewing applications and other matters, but do not replace human oversight and assessment of applications or other matters subject to such process. Final decisions are confirmed by the relevant academic or administrative staff.
Where such automated decision-making, including profiling, produces legal effects or significantly affects you, submissions or applications, the University will inform you in advance of such processing. The University ensures that this is done only where it is necessary to process your application or manage your enrollment with the University, required and authorized by applicable law, or based on your explicit consent. In these cases, you will also have the right to obtain human intervention, to express your point of view, and to contest the decision. The University does not base such automated decisions on sensitive personal data unless explicitly permitted by law and protected by additional safeguards.
The University does not generally collect any sensitive personal information such as religious details or biometric data through its Website. If such information is required for a specific service, it will only be collected with your explicit consent, as a part of the relevant form, in compliance with applicable laws.
In the unlikely event of a data breach affecting personal information collected through the Website, the University will act quickly to investigate and resolve the issue. Where necessary, we will notify both the affected users and the relevant authorities within the time limits set by law.
Any changes we may make to our Privacy Policy in the future will be posted on this page, be announced whenever the Website is accessed and, where appropriate, notified to you by email, if you have subscribed to such updates.
If you wish to exercise your rights or have concerns about how your information is being handled, you can contact the University at data.protection@gift.edu.pk or post your queries addressed to the Data Protection Office, University, Near Sialkot Bypass, Gujranwala
This Privacy policy is in place with effect from 23 September 2026.
