Privacy Policy

Last updated: 28 October 2026

This Privacy Policy explains the information PICSS may collect through this website and how that information is used in connection with accounts, subscriptions, individual-report access, payments, communications and website operation.

1. Information we collect

PICSS may collect information you provide directly, including your name, email address, organisation, phone number, account details, access-plan selections, invoice/billing notes and correspondence with PICSS.

When you use bank transfer, PICSS may also receive a bank transaction/reference number and any receipt or transfer advice you choose to upload. Uploaded transfer documents are stored in protected administrative storage rather than the public Media Library.

2. Payment information

PICSS does not store full payment-card numbers or CVVs. Card entry and card authentication are handled by the payment provider. PICSS may retain transaction references, status, contribution amount, settlement amount and other non-card payment metadata needed to verify and administer access.

3. Account and access information

PICSS records information necessary to operate My PICSS Accounts, including subscriptions, individual-report grants, validity periods, payment references, briefing credits and access status.

4. Technical and security information

The website and its hosting/security systems may record technical information such as IP address, browser/device information, login activity, error logs and security events. This information is used to operate, secure and troubleshoot the service.

5. Cookies and similar technologies

Essential cookies may be used for sign-in, account sessions, security and normal WordPress functionality. If analytics or other optional measurement tools are enabled, they may use additional technologies. Embedded third-party content, such as YouTube video players, may transmit information to the relevant provider when you choose to load or play that content.

6. How we use information

PICSS uses personal information to create and manage accounts; process and verify access requests; deliver reports and subscriber services; generate invoices; send password, payment, expiry and renewal communications; respond to enquiries; prevent misuse; and maintain the security and reliability of the website.

7. Service providers

PICSS may use specialist providers for website hosting, email delivery, payment processing and other technical functions. Information is shared with such providers only as reasonably necessary for the relevant service. PICSS does not sell personal information to advertisers.

8. Retention

PICSS retains information for as long as reasonably necessary to provide the service, maintain payment/accounting and audit records, protect the security of the platform, resolve disputes and meet applicable legal or regulatory requirements. Retention periods may differ according to the type of record.

9. Your choices and requests

You may request correction of inaccurate account information or ask PICSS about the personal information associated with your account. Requests for deletion will be considered subject to records that PICSS must reasonably retain for payment, security, legal or audit purposes.

10. Social Media Publishing and Meta Platform Data

The Pakistan Institute for Conflict and Security Studies (PICSS) uses its internally developed PICSS Social Publisher application to publish and distribute articles, research reports, news updates and other publicly intended content through its official social media accounts, including Facebook and Instagram.

Information processed: When authorised PICSS administrators connect institutional social media accounts, the application may process account and Page identifiers, administrator-authorised access tokens, publishing permissions, article titles, summaries, featured images, website links, publishing status and related technical records.

Purpose and use: This information is used exclusively for connecting authorised social media accounts, publishing and scheduling PICSS content, monitoring publication results, and diagnosing technical problems. PICSS does not use information obtained through these integrations for unauthorised advertising, profiling or the sale of personal information.

Data sharing and security: Content selected for publication is transmitted to the relevant social media platform through its authorised API. Access credentials and publishing records are maintained within the restricted administrative systems of the PICSS website, subject to appropriate security measures. Published content is also governed by the privacy policies and terms of the respective social media platforms.

Data deletion and withdrawal of access: Individuals or authorised account administrators may request access to, correction of, or deletion of personal information held by PICSS in connection with these integrations by emailing info@picss.net, with the subject line “Meta Data Deletion Request”. Requests should identify the relevant account or information without including passwords or access tokens.

PICSS will review and verify such requests, delete information no longer required for legitimate operational or legal purposes, and revoke associated authorisations where applicable. Administrators may also withdraw the application’s access through the relevant Facebook or Instagram business integration settings. Deleting information held by PICSS does not automatically delete content already published on third-party platforms; removal of such content is governed by the applicable platform procedures.

11. Security

PICSS uses reasonable technical and organisational safeguards appropriate to the nature of the service. No online system can be guaranteed to be completely secure, and users should protect their account credentials and notify PICSS of suspected unauthorised access.

12. Contact

Privacy enquiries may be sent to info@picss.net. Subscriber-account enquiries may be sent to subscriptions@picss.net.