Data Governance & User Privacy

Privacy Policy & Data Protection

“How personal information is gathered, safeguarded, and respected across our institutional platform.”

Effective Date: September 2026 · Data Protection Office · GIFT University

This policy explains what types of personal information will be gathered when you visit the GIFT University's website, the Centre for Moral Nexus (CMN) platform, and how this information will be used. Please note that this policy applies to the University's main web pages (i.e. those in www.gift.edu.pk) and associated institutes. All colleges, divisions, faculties, departments, schools, centers, academic services, libraries, museums and collections of the University run and maintain their own websites on the gift.edu.pk domain. These sites may carry their own privacy policy or provide additional information relating to their activities, which will supersede or supplement this Privacy Policy.

Information collected

On some parts of the website, you may be asked to provide some limited personal information in order to enable the provision of certain services (e.g. prospectus ordering, registering with a society, fellowship enrollment, submitting moral reflections, or applying for a vacancy). The University may store this information manually or electronically. By supplying this information you are consenting to the University holding and using it for the purpose for which it was provided. Information provided will be held for as long as necessary to fulfill that purpose.

We may also collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our webmasters. This is statistical data about our users' browsing actions and patterns which does not identify any individual and allows us to ensure that content from our site is presented in the most effective manner for you and for your computer.

How the information collected is used

Personal information provided to the University by you will only be used for the purposes stated when the information is requested. Personal information will not be sold to third parties, or provided to direct marketing companies or other such organizations without your permission. Personal information collected and/or processed by the University is held in accordance with the provisions of the Data Protection legislation. Demographical and statistical information about user behavior may be collected and used to analyze the popularity and effectiveness of the University's website. Any disclosure of this information will be in aggregate form and will not identify individual users.

How we store information collected

Information which you provide to us will ordinarily be stored on our secure servers. However, we also work with third party contractors, some of whom host and operate certain features of the website. Accordingly, information that we collect from you may be collected in or transferred to a destination outside Pakistan. That information may be processed by staff operating outside Pakistan who work for us or for one of our contractors. By submitting personal information, you agree to this transfer, storing and processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

How we use cookies

Most of our web pages use “cookies”. A cookie is a small file of letters and numbers that we place on your computer or mobile device if you agree. These cookies allow us to distinguish you from other users of our website, which helps us to provide you with a good experience when you browse our website and enables us to improve our website. For more detailed information on the cookies we use on the University's main web pages and the purposes for which we use them, please see our Cookie Statement.

Access to information

Data protection legislation gives you the right to access information held about you. For further information about this right and how to exercise it, please contact our Data Protection Officer at data.protection@gift.edu.pk.

Changes to our Privacy Policy

Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email.

University Policy on Data Protection

The primary purpose of current data protection legislation is to protect individuals against possible misuse of information about them held by others. It is the policy of the University to ensure that all members of the University and its staff are aware of the requirements of data protection legislation under their individual responsibilities in this connection. The Act covers personal data, whether held on computer or in certain manual files.

The University is obligated to abide by the data protection principles embodied in this legislation. These principles require that personal data shall:

1Be processed fairly and lawfully;

2Be held only for specified purposes and not used or disclosed in any way incompatible with those purposes;

3Be adequate, relevant and not excessive in relation to the stated purpose;

4Be accurate and kept up-to-date at all times;

5Not be kept for longer than necessary for the particular purpose;

6Be processed in strict accordance with data subjects' legal rights;

7Be kept secure against unauthorized access, loss, destruction, or damage;

8Not be transferred outside Pakistan unless the recipient country ensures an adequate level of data protection.

Individual Rights Under the Legislation

The Act provides individuals with rights in connection with personal data held about them. It provides individuals with the right to access data concerning themselves (subject to the rights of third parties). It also includes the right to seek compensation through the courts for damages and distress suffered by reason of inaccuracy or the unauthorized destruction or wrongful disclosure of data. Information on how to make a request for access to personal data under the Act may be obtained from data.protection@gift.edu.pk.

Conditions for Fair and Lawful Processing

Under the terms of the Act, processing of data includes any activity to do with the data involved. All staff or other individuals who have access to, or who use, personal data, have a responsibility to exercise care in the treatment of that data and to ensure that such information is not disclosed to any unauthorized person. In order to comply with the first principle (fair and lawful processing), at least one of the following conditions must be met:

The individual has given his or her consent to the processing;

The processing is necessary for the performance of a contract with the individual;

Processing is required under a legal obligation;

Processing is necessary to protect the vital interests of the individual;

Processing is necessary to carry out public functions;

Processing is necessary in order to pursue the legitimate interests of the controller or third parties (unless it would prejudice the interests of the individual).

Sensitive Personal Data

In the case of sensitive personal data, which includes information about racial or ethnic origins, political beliefs, religious or other beliefs, trade union membership, health, sex life, criminal allegations, proceedings or convictions, there are additional restrictions and explicit consent will normally be required.

Security and Technical Measures

The Data Controller (the University) must take appropriate technical and organizational measures against unauthorized or unlawful processing of personal data and against accidental loss or destruction of or damage to personal data and sets out specific considerations for ensuring security. Staff and other individuals should be aware that guidelines and regulations relating to the security of manual filing systems and the preservation of secure passwords for access to relevant data held on computer should be strictly observed.

Web Publishing & International Transfers

Under the principle which restricts the transfer of material outside Pakistan, personal data about an individual placed on the World Wide Web is likely to breach the provisions of the Act unless the individual whose data is used has given his or her express consent. It is important that all those preparing web pages, address lists and the like, are aware of these provisions, and seek advice from the Data Protection Officer if in doubt.

The Act specifies arrangements for the notification of processing undertaken by the institution. Any members of staff who are uncertain as to whether their activities or proposed activities are included in the University's notification should consult the Data Protection Officer in the first instance.

Contact Information

Any queries or concerns about privacy or data protection on this website should be sent by email to data.protection@gift.edu.pk or addressed to:

Data Protection Office

GIFT University, Near Sialkot Bypass, Gujranwala, Punjab, Pakistan