Privacy Policy

Last updated: the date this page was published.

1. What we collect

• Account details: your name, business name, email address, phone number and billing address.
• Billing records: invoices, payments and payment references. We do not store full card numbers.
• Support messages: what you write to us, so we can answer it and refer back to it.
• Technical records: IP addresses, browser type, login times and security events, kept so we can protect the account and investigate abuse.
• The data you back up: stored encrypted, in order to provide the service.

2. Passwords

We never store your password. What is stored is a one-way cryptographic hash, which cannot be turned back into the original. This means nobody at DISK.PK can look up, read, email or tell you your password — and neither can anyone who steals our database. If you forget it, we send a one-time link that lets you set a new one. We will never send you a password in an email, in a WhatsApp message, or over the phone, and we will never ask you for it.

3. Why we hold it

• To provide and support the service you bought
• To bill you and keep the accounting records the law requires
• To secure the service and detect abuse
• To answer your questions
• To send service notices such as failed backups, invoices and expiry warnings

4. Marketing

We send marketing email only to people who asked for it, and every such message has an unsubscribe link. Service notices are not marketing and continue while your account is open.

5. Who we share it with

We do not sell personal information. We share it only with the suppliers we need in order to operate — for example payment processors and email delivery providers — and only what they need. We also disclose information where the law requires it.

6. Your backed-up data

Your files are encrypted before they leave your machine and remain encrypted at rest. Our staff do not browse customer data. Where support genuinely requires access, it is done with your knowledge.

7. How long we keep it

• Account and billing records: for as long as the account exists, and afterwards for the period accounting and tax law requires.
• Backed-up data: for the retention period on your plan, and for a short grace period after cancellation.
• Security logs: for a limited period, then deleted.

8. Your choices

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Write to us through the contact page.

9. Cookies

The website uses the cookies it needs in order to work — signing in, keeping your basket, and protecting forms. If analytics is enabled, it is used to measure which pages are useful, and you can decline it from the notice at the bottom of the page.

10. Changes

If this policy changes materially we will tell account holders by email.