Privacy Notice
How we handle personal information across our website, inquiries, recruitment, accounting and client work.
Draft for review. The effective date will be added when the company approves publication.
This notice explains how VIRTUAL VALLEYS (PRIVATE) LIMITED ("Virtual Valleys", "we", "us") handles personal information in connection with our website, business inquiries, recruitment, accounting, and service relationships. Questions and requests can be sent to complaints@virtualvalleys.com.
Our role
For information used to manage our own website, recruitment, billing, and business relationships, we determine the relevant purposes of use. When we handle information for a client, our role and permitted activities depend on the service agreement and applicable law. We may act as a service provider or processor on the client's instructions.
The client's privacy notice and instructions may therefore also apply. This notice does not give us independent permission to use a client's customer information for unrelated purposes.
Information we handle
Depending on your interaction with us, information may include your name, business name, email, phone number, location, correspondence, service requirements, and documents you choose to provide. Accounting records may include invoice references, billing contact details, and payment or transaction records relevant to our services.
Recruitment information may include your resume, work and education history, availability, salary expectations, application answers, and recruitment correspondence. If you take a Careers assessment, we also collect the answers, score, category results, timing, submission status, and records needed to administer the assessment.
Website and service systems may generate technical records such as IP addresses, device or browser details, access times, authentication events, and error or security logs. The information generated depends on the functions and providers used.
Information handled for clients may include their business records and personal information about customers, employees, applicants, or other people, but only within the authorized service scope. Please do not send passwords, one-time codes, complete payment-card details, identity documents, or sensitive customer records through general website forms or ordinary complaint emails. Ask for an appropriate transfer method first.
Sources and purposes
We receive information from you, from the systems you use to interact with us, and where appropriate from authorized clients or representatives. We use it to respond to inquiries, communicate about and deliver agreed services, assess applications, administer accounts and invoices, maintain records, protect systems, address complaints, and meet applicable legal obligations.
Where a particular legal basis is required, it must be appropriate to the activity, such as steps toward or performance of a contract, a legal obligation, a properly assessed legitimate interest, or consent. Where consent is required, it must be obtained separately. Visiting the website is not blanket consent to every use or transfer of personal information.
Job applications and assessments
Where the timed Careers assessment is offered, answers are scored automatically against a fixed answer key. The stated pass threshold controls access to the application form. The assessment instructions explain the time limit and automatic submission of saved answers when the time expires. Passing the test does not guarantee an interview or employment.
Authorized recruitment personnel may review assessment results and submitted applications. Results may be sent to muhammad@virtualvalleys.com through our recruitment notification system. To request an accommodation before starting, raise a technical concern, or request human review of an assessment outcome, contact complaints@virtualvalleys.com. The assessment is one recruitment step and does not establish a person's overall ability.
Sharing and permitted access
Information may be made available to authorized personnel and service providers supporting functions such as hosting, authentication, email delivery, recruitment, record storage, and accounting, only to the extent needed for those functions. Client information must be handled within the client's instructions and any required approvals and contractual restrictions.
We may also disclose relevant information where required by applicable law or valid legal process, or where lawfully necessary to establish or defend rights, investigate misuse, or address a security incident. Disclosures should be limited to the purpose and legal authority involved. Nothing in this notice prevents lawful reporting to a competent authority.
Our policy prohibits selling client confidential information, using it for unrelated advertising, or placing it into public AI services or general model-training datasets without the necessary written authorization and lawful basis. A client engagement does not itself authorize such uses.
International access and processing
Virtual Valleys operates from Pakistan, and authorized personnel in Pakistan may access information to perform agreed work. Information may also be handled in countries where a client's systems or our approved service providers operate. We do not represent that all information remains in the United States or in a single country.
Where applicable law or a client agreement requires specific permissions, contractual safeguards, or another transfer mechanism, those requirements must be addressed before the relevant access or transfer. This notice alone is not an international data-transfer agreement. Contact complaints@virtualvalleys.com to ask about the arrangements relevant to your information.
Retention
Retention depends on the purpose of the record, the length of the relationship or recruitment process, applicable legal requirements, client instructions, and the need to address complaints or legal claims. Information must not be kept indefinitely without a justified purpose.
Client records should be returned or deleted in accordance with the engagement and lawful instructions, subject to required retention or preservation. Backup copies and records held by client systems may follow separate documented schedules. A deletion request does not automatically remove information that must lawfully be retained; we will explain relevant limitations when responding.
Cookies and other website technologies
Cookies and browser storage can support functions such as authentication, form sessions, preferences, and security. External services linked from or embedded in the website may apply their own privacy and storage practices.
If optional analytics, advertising, or similar tracking is used, its purposes, providers, and choices must be explained in the applicable cookie information, and consent obtained where required before it is activated. Browser settings can help control storage, although blocking necessary storage may affect site functions. This notice does not treat continued browsing as consent to optional tracking.
Requests and choices
Depending on the law that applies, you may have rights to access, correct, delete, or obtain a copy of your information, restrict or object to certain processing, withdraw consent, or complain to a competent regulator. These rights and any exceptions depend on the circumstances. Withdrawing consent does not make earlier lawful processing unlawful.
Send requests to complaints@virtualvalleys.com with enough information to identify the relevant interaction. We may need proportionate verification before disclosing or changing information. Do not send a full identity document unless a suitable verification method is agreed. Where we act for a client, we may need to refer the request to that client or obtain instructions while meeting our own obligations.
You can ask us to stop promotional communications. Necessary service, security, accounting, or application messages may still be sent where appropriate. We will handle requests within applicable legal time limits; this notice does not shorten those rights or require you to complain to us before contacting a regulator.
Children and sensitive submissions
Our business website is not directed at children. Please contact us if you believe a child has supplied personal information inappropriately so that we can review the circumstances and take suitable action. Information submitted about children or other vulnerable individuals in client work must have a lawful, authorized purpose and appropriate safeguards.
Changes and contact
We may update this notice to reflect changes in our practices or applicable requirements. The published version will show its effective or updated date. Material changes will be communicated, and further consent obtained, when required. Changes do not retroactively authorize an incompatible use of information.
Privacy contact: complaints@virtualvalleys.com. Operator: VIRTUAL VALLEYS (PRIVATE) LIMITED, Lodhran, Punjab, Pakistan. General business inquiries: muhammad@virtualvalleys.com.