This Privacy Policy explains how National Enterprises & Co. (“National Enterprises”, “we”, “us”) collects, uses, stores, shares and protects information when you visit nationalenterprises.pk (the “Website”), contact us, or when we connect our own Google Business Profile to the Website through Google APIs.

1. Who we are

National Enterprises & Co. is an importer, stockist and distributor of industrial supplies and cutting tools based in Karachi, Pakistan, and the owner of the NECO brand. We are responsible for the information described in this policy.

  • Address: Shop #7, Plot #19, Sheet No SR-03, Saify Imperial Trade Centre, Serai Road, Karachi, Pakistan
  • Email: nationalenterprise.pk@gmail.com
  • Phone: 021-32462953

2. Information you give us

When you send an inquiry or request a quotation, we collect the details you type into the form: your name, phone number, and optionally your company, email address, city, the product you are interested in, quantity and your message. If you contact us by phone, WhatsApp or email, we receive the details you share in that conversation.

We use this information only to answer your inquiry, prepare quotations, process and deliver orders, and keep a record of our business with you. We do not sell it and we do not use it for third-party advertising.

3. Information collected automatically

  • Visitor counter: we count visits and page views per day. A small cookie named ne_visit holds only today’s date so the same visitor is not counted twice; it expires at midnight. The count stores no name, IP address or other personal detail.
  • Security and server logs: our web server records technical information such as IP address, browser type and the pages requested, to keep the Website secure and working. Logs are kept for a limited time and then deleted.
  • Analytics: where enabled, we use Google Analytics, Google Tag Manager, Microsoft Clarity and/or the Meta Pixel to understand how the Website is used. These services may set their own cookies and process data under their own privacy policies. You can block them with your browser’s cookie or tracking settings.
  • App and notifications: if you install our web app or choose “Get product updates”, your browser gives us a push subscription address so we can send product updates. You can turn this off at any time in your browser settings, and the subscription is then removed.

4. Google user data (Google Business Profile integration)

The Website includes a private administration panel that our own staff use to connect our business’s Google Business Profile through Google Sign-In (OAuth 2.0). Members of the public are never asked to sign in with Google on the Website.

4.1 What we access

With the permission granted during sign-in (the Google Business Profile scope https://www.googleapis.com/auth/business.manage), the Website accesses:

  • the list of Business Profile accounts and locations the signed-in administrator manages, so the correct business location can be chosen;
  • reviews of our business location, including each reviewer’s public display name, public profile photo link, star rating, review text, our reply and the review dates, together with the average rating and total number of reviews;
  • the ability to create posts (“Updates”) on our Business Profile.

We do not access the administrator’s Gmail, contacts, Drive, calendar or any other Google service, and we do not request their password.

4.2 How we use it

  • Showing reviews: reviews are copied into the Website’s database and displayed on our home page and Customer Reviews page, exactly as they appear publicly on Google. Anonymous reviewers are shown as “A Google user”.
  • Sharing blog articles: when we publish an article on our blog, the Website can post a short summary, photo and link to that article as an Update on our Business Profile.
  • Connection details: the selected account and location IDs and the OAuth tokens are stored so the Website can refresh reviews and publish posts without asking the administrator to sign in each time.

Google user data is used only to provide these features to our own business. It is not used for advertising, it is not sold, it is not used to build user profiles, and it is not used to train artificial intelligence or machine learning models.

4.3 Sharing

We do not share, transfer or disclose Google user data to any third party, except: (a) review content is displayed publicly on the Website, as it already is on Google; (b) when required by law; or (c) to our hosting provider, which stores the Website’s database on our behalf and is bound to keep it confidential.

4.4 Limited Use

National Enterprises & Co.’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.5 Storage, protection and retention

  • Data is stored in the Website’s private database on our hosting server. The OAuth client secret and tokens are never shown on public pages, and the administration panel is protected by password sign-in, role-based access and HTTPS.
  • Cached reviews are refreshed from Google about every six hours. Reviews that are deleted on Google are removed from our database at the next full refresh, and edited reviews are updated.
  • Access tokens expire after about one hour. The refresh token is kept only while our Business Profile remains connected.
  • A record of which blog articles were shared on Google (status, Google post ID and date) is kept for as long as the article exists on our blog.

4.6 Revoking access and deletion

  • Our administrator can choose Disconnect in the Website’s Google Business settings at any time. This revokes the token with Google and immediately deletes the stored tokens and account and location details.
  • Access can also be removed from your Google Account at myaccount.google.com/permissions.
  • If you wrote a review of our business and want it removed from the Website, delete or edit it on Google (it will disappear from the Website at the next refresh), or email us at nationalenterprise.pk@gmail.com and we will hide or delete it from our database within 7 days.

5. How long we keep information

Inquiries and order records are kept for as long as needed to serve you and to meet our legal, tax and accounting obligations, and are then deleted. Google data is kept as described in section 4.5. You can ask us to delete your inquiry details at any time.

6. Your choices and rights

You may ask us to tell you what personal information we hold about you, to correct it, or to delete it, and you may withdraw any consent you have given (for example to product notifications). Email nationalenterprise.pk@gmail.com and we will reply within 30 days.

7. Security

We use reasonable technical and organisational measures to protect information, including encrypted connections (HTTPS), restricted administrator access, hashed passwords and regular updates. No method of transmission or storage is completely secure, but we work to protect your information and will act promptly if a problem is found.

8. Children

The Website is intended for businesses and adult buyers. We do not knowingly collect personal information from children under 13.

The Website links to services such as Google Maps, WhatsApp and our social media pages. Those services have their own privacy policies, and we are not responsible for how they handle information.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed. Significant changes, especially to how we use Google user data, will be posted on this page before they take effect.

11. Contact us

For any question about this policy or your information, contact National Enterprises & Co. at nationalenterprise.pk@gmail.com, call 021-32462953, or write to us at Shop #7, Plot #19, Sheet No SR-03, Saify Imperial Trade Centre, Serai Road, Karachi, Pakistan.