Privacy notice
Version 2026-09-v2. The version you accept is recorded with your application.
This notice explains what personal data the National Skill Passport registry collects, why, who can see it, how long it is kept and how to have it corrected or deleted. The registry is operated by PPM Consultant (SMC-Private) Limited on behalf of PPM Consultant (SMC-Private) Limited.
What we collect
| Category | Examples |
|---|---|
| Identity | Names, father's or guardian's name, date of birth, sex, nationality, identity document type and number |
| Photograph | One passport-style photograph. Location, device and time information stored inside the image file is removed before the photograph is saved. |
| Contact | Mobile number, email address, postal address, district |
| Education | Highest level, institution, programme, qualification |
| Skills | Occupations, levels, certifying bodies, certificate numbers |
| Languages | Languages and levels |
| Experience | Employers, roles, dates |
| Documents | Details of the supporting documents you present |
| Technical | The internet address used to register, and a log of verification checks made against your passport |
Why we collect it
To register you, to check your identity and skills evidence, to issue your card and certificate, to let employers and authorities confirm that your passport is genuine, and to protect the registry against fraud and duplicate records.
Legal basis
We process your data on the basis of the consent you give at the last step of registration. You may withdraw consent at any time, as described below. [[OWNER TO CONFIRM: any statutory or contractual basis that applies in addition to consent]]
Who can see what
| Who | What they can see |
|---|---|
| Anyone who types your NSP ID or a card or certificate serial | Your name, nationality, registrant type, skills, languages, and whether your passport is valid, suspended, expired or revoked. No photograph. |
| Anyone who scans the QR code on your card or certificate | The same, plus your photograph |
| Registry officers, signed in under their own accounts | Your full record, in order to check and issue your passport. Every action they take is recorded against their name. |
| Nobody outside the registry | Your identity document number, date of birth, address, mobile number and email address |
If you are under 18, your photograph is never shown on a typed NSP ID or serial lookup.
We do not sell personal data. We share your verified record with a foreign employer, embassy or recognition body only if you agreed to cross-border sharing at registration, or at your later request.
My Pathway
My Pathway is optional guidance on training and career progression. It is prepared only if you agree on the My Pathway page, or tell a registry officer that you agree.
To prepare it, a description of your skills is analysed by a background Support service that works on our behalf. That description contains your occupations, skill levels and the kind of evidence behind each skill, your education level, your languages, your district, your registrant type and your age group. It does not contain your name, identity number, date of birth, address, mobile number, email address or photograph.
What comes back is checked by the registry before you see it, and is stored with your record so that an officer can discuss it with you. You can withdraw your agreement at any time on the My Pathway page. The stored guidance is then deleted. If you ask to be told when a course becomes available, we keep a note of that request so that we can plan new courses; reports drawn from those notes contain no names and no NSP IDs.
Location of the Support service and any onward processing: [[OWNER TO CONFIRM: where the Support service runs, who operates it, and whether data leaves Pakistan]]
How long we keep it
| Data | Retention period |
|---|---|
| Issued passport records | [[OWNER TO CONFIRM: retention period for issued records]] |
| Rejected or withdrawn applications | [[OWNER TO CONFIRM: retention period for rejected applications]] |
| Verification and audit logs | [[OWNER TO CONFIRM: retention period for logs]] |
| My Pathway guidance | Until you withdraw your agreement, or your record is deleted. It is replaced each time it is refreshed. |
| One-time codes and anti-abuse records | Deleted automatically within 7 days |
Your choices
- See your data. Track your application on the Track page, or ask us for a copy of your record.
- Correct it. Tell a registrar at an issuing point, or write to us. We correct the record and keep a note of the change.
- Delete it or withdraw consent. Write to us. We revoke the passport and delete the record, except for information we must keep to show that a passport was issued and later revoked. [[OWNER TO CONFIRM: what is kept after a deletion request, and for how long]]
We aim to answer within [[OWNER TO CONFIRM: response time for data requests]].
Contact
Email support@ppmc.pk, or see Contact and grievances.