Legal Document

Privacy Policy

Last update: January 20, 2025

We respect your privacy and are committed to protecting your personal data. This policy explains how we handle your information.

1. Information We Collect

We only collect information necessary to provide our services:

Information You Provide:

  • Name and email address (contact forms) - Legal basis: Consent & Contract
  • Project requirements and business details - Legal basis: Contract
  • Communication preferences - Legal basis: Consent
  • Payment information (processed by third parties) - Legal basis: Contract

Automatically Collected:

  • IP address and browser type - Legal basis: Legitimate Interest (security)
  • Pages visited and time spent - Legal basis: Legitimate Interest (analytics)
  • Device information (mobile/desktop) - Legal basis: Legitimate Interest
  • Referral source - Legal basis: Legitimate Interest

We never sell your data to third parties.

2. How We Use Your Information

✅ We Use Your Data To:

  • Respond to inquiries within 24 hours
  • Deliver contracted services
  • Send project updates
  • Improve user experience
  • Prevent fraud and abuse

❌ We Never:

  • Sell your data to advertisers
  • Share data without consent
  • Send spam or unsolicited emails
  • Track you across other websites
  • Use data for unrelated purposes

3. Cookies & Tracking

We use minimal cookies for essential functionality:

🔒 Essential Cookies (Required)

Theme preference, cookie consent, security tokens

📊 Analytics Cookies (Optional)

Google Analytics for traffic analysis you can opt out

Control cookies via browser settings. Disabling may affect functionality.

4. Data Sharing & Third Parties

⚠️ We NEVER Sell Your Data

Your information is never sold, rented, or traded to third parties for marketing.

We only share data with trusted service providers:

Vercel - Website hosting (USA)
Google Analytics - Traffic analysis (anonymized)
Web3Forms - Contact form processing
Payment Processors - Stripe/PayPal (PCI compliant)

All providers are contractually bound to protect your data.

5. Data Security

We protect your data with industry standard security:

🔒 Encryption

HTTPS/TLS for all data transmission

🛡️ Rate Limiting

Protection against brute force attacks

📝 Input Validation

All inputs sanitized and validated

🔐 Secure Headers

CSP, HSTS, X Frame Options

Important: No internet transmission is 100% secure. While we use best practices, we cannot guarantee absolute security.

6. Your Privacy Rights (GDPR & CCPA)

You have full control over your personal data:

Right to Access

Request a copy of all data we have about you

Right to Correction

Update or correct inaccurate information

Right to Deletion

Request complete removal of your data

Right to Portability

Receive your data in a machine readable format

Right to Opt-Out

Unsubscribe from all communications anytime

Exercise Your Rights: Email muhammadtanveerabbas.contact@gmail.com with your request. We respond within 30 days as required by law (typically within 48 hours).

7. Data Retention

We retain your data only as long as necessary:

  • Contact inquiries: 2 years or until you request deletion
  • Project data: Duration of project + 1 year for support
  • Analytics data: 26 months (Google Analytics default)
  • Legal records: 7 years (tax/legal requirements)

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through:

  • Standard Contractual Clauses (EU Commission approved)
  • EU-US Data Privacy Framework certified providers
  • GDPR compliant data processing agreements

9. Children's Privacy

Our services are not intended for individuals under 13 (US/COPPA) or 16 (EU/GDPR). We do not knowingly collect data from children. If you believe we have collected data from a minor, contact us immediately for deletion.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be notified via email or prominent website notice 30 days before taking effect. Continued use after changes constitutes acceptance.

Contact & Legal

📧 Privacy Questions

Email: muhammadtanveerabbas.contact@gmail.com

Response: Within 48 hours

Legal Entity: Muhammad Tanveer Abbas (Sole Proprietor), Pakistan

Governing Law: Pakistan laws apply. International clients' local data protection laws (GDPR, CCPA) are respected.