Privacy Policy

SMEDA collects information that you voluntarily provide when registering for an account, subscribing to newsletters, submitting helpdesk tickets, downloading pre-feasibility studies, or applying for training programs and government financial schemes.

Personal data collected may include: full name, CNIC number (where statutory formalization requires it), business or enterprise name, official email address, mobile telephone number, business sector, district, and province of operation.

We also automatically collect technical log data when you browse our platform, including IP addresses, browser types, device identifiers, referring URLs, and interaction timestamps, used exclusively to ensure site stability, DDoS protection, and traffic analytics.

All personal and business information is processed in strict compliance with the statutory mandate of SMEDA Ordinance 2002 to facilitate Pakistani micro, small, and medium enterprises (MSMEs).

Your data is utilized to: deliver requested resources (such as pre-feasibility PDFs and legal contract templates), authenticate your administrative or citizen portal session, process helpdesk inquiries, provide enterprise advisory, and issue training enrollment certifications.

Aggregated and anonymized statistics may be shared with the Ministry of Industries & Production, State Bank of Pakistan, and official development partners for national policy formulation, sector surveys, and MSME growth metrics.

SMEDA implements multi-layered physical, technical, and managerial safeguards to protect your personal and business data against unauthorized access, loss, alteration, or disclosure.

Our platforms utilize modern TLS 1.3 cryptographic protocols for all data in transit. Sensitive credentials and session tokens are encrypted using industry-standard hashing algorithms (Bcrypt/Argon2id).

Access to administrative dashboards is restricted using Role-Based Access Control (RBAC) and monitored via real-time security audit trails.

Our portal utilizes essential HTTP session cookies to authenticate logged-in users, maintain security state, and remember interface preferences (such as collapsed navigation state and active portal filters).

We do not employ invasive third-party tracking cookies or sell your browsing behavioral data to commercial advertising networks. You may configure your browser to decline non-essential cookies, though certain administrative functions may be impaired.

This website provides direct digital links to affiliated government portals, including the SME Registration Portal (smerp.smeda.org), SME Banking Portal (banks.smeda.org), and Consultants Database (consultants.smeda.org).

While affiliated under SMEDA governance, external websites linked from this portal operate under their respective privacy disclosures. We advise reviewing privacy notices on third-party government services upon transition.

Pakistani citizens and registered enterprise owners have the right to inspect, update, or request deactivation of their registered profile stored on the SMEDA digital platform.

For inquiries concerning data protection, personal data retention, or administrative records, please contact the SMEDA Directorate of Information Technology via email at [email protected] or through our National Helpdesk.