This Privacy Policy explains how Numeretic collects, uses, stores, and protects personal data when you use our website or our professional services in Norway and Pakistan.
We are committed to handling personal information responsibly and in accordance with applicable data protection laws, including:
• General Data Protection Regulation (GDPR) for Norway / EEA
• Relevant data protection laws applicable in Pakistan
When This Policy Applies
This policy applies when you:
• Visit our website
• Contact us by email or form
• Become a client or request our services
• Subscribe to marketing communication
• Interact with us for payroll, accounting, VAT, or advisory services
What Personal Data We Collect
We may collect the following types of personal data:
• Name and contact details
• Organization number or registration details
• Position and workplace information
• Identification information (where required for compliance)
• Financial and payroll information
• Tax-related data
• Communication records
• Website usage data (via cookies)
We do not process sensitive personal data unless required for service delivery or legal compliance.
Why We Process Personal Data
We process personal data for the following purposes:
• Delivering accounting, payroll, VAT and advisory services
• Preparing and filing statutory reports
• Conducting customer due diligence under anti-money laundering laws
• Communicating with clients
• Invoicing and payment follow-up
• Marketing (where consent is given)
• Improving website functionality
• Preventing fraud and misuse
We only process personal data that is necessary for these purposes.
Legal Basis for Processing
For clients in Norway / EEA, processing is based on:
• Contract performance (GDPR Art. 6(1)(b))
• Legal obligations (e.g., tax, accounting, AML laws)
• Legitimate interest (e.g., business administration)
• Consent (for marketing communications)
For clients in Pakistan, processing is based on:
• Contractual obligations
• Legal compliance under applicable tax and corporate laws
• Legitimate business interest
Payroll and Accounting Assignments
When we provide accounting or payroll services:
• The client is normally the data controller
• Numeretic acts as data processor
• A Data Processing Agreement governs this relationship
We may collect employee payroll information, tax details, and financial records necessary to perform agreed services.
We may also receive data from public authorities such as tax authorities or regulatory bodies.
Under accounting regulations, we are required to retain certain documentation for statutory periods (typically up to 5 years or as required by local law).
Customer Due Diligence and AML
To comply with anti-money laundering laws, we may process:
• Identification documents
• Ownership details
• Company registration information
In certain cases, we may be required by law to report suspicious activity to relevant authorities.
Marketing
If you have consented, we may send newsletters or service updates.
You may withdraw your consent at any time. Withdrawal will not affect lawful processing already carried out.
Marketing consent is not required to use our services.
Sharing of Personal Data
We may share personal data with:
• IT system providers
• Cloud storage providers
• Professional advisors
• Regulatory authorities (where required by law)
• Payment and invoicing partners
All third parties are required to maintain confidentiality and adequate data protection standards.
We do not sell personal data.
International Transfers
Because Numeretic operates in Norway and Pakistan, personal data may be transferred between these jurisdictions where necessary for service delivery.
For EEA clients, international transfers are made only where appropriate safeguards are in place, such as:
• Standard contractual clauses
• Adequacy decisions
• Secure processing agreements
Data Retention
We retain personal data only as long as necessary to:
• Fulfill contractual obligations
• Comply with legal requirements
• Resolve disputes
• Maintain accounting records
When data is no longer required, it is securely deleted or anonymized.
Your Rights
Depending on your jurisdiction, you may have the right to:
• Request access to your personal data
• Request correction of inaccurate data
• Request deletion (where legally permitted)
• Restrict processing
• Object to certain processing
• Request data portability (where applicable)
• Withdraw consent
Requests may be submitted via the contact details below.
