Privacy Policy

1. Who we are

Digihub Software Company (SMC-Private) Limited ("Digihub", "we", "us") is a software company registered in Pakistan. We are the controller of the personal data described in this policy.

Address: Office No 757, First Floor, Deans Trade Centre, Saddar Road, Cantt, Peshawar, Pakistan. Email: info@digihubsoftwares.com. Phone and WhatsApp: +92 315 0935072.

We have no office in the United Kingdom or the United Arab Emirates and serve clients there remotely from Pakistan. We have not appointed a representative in the UK or the EU; if that changes, the details will appear here.

2. What we collect

We collect only what we need:

• Contact form: your name, email address and message, and if you choose to give them, your company, phone number, budget range and timeline.
• Emails, WhatsApp messages and calls you start with us: the content of the conversation and your contact details.
• Meeting bookings, if you schedule one: your name, email address, the time you chose and anything you add, collected through Google Calendar's booking page and kept in our Google Calendar.
• Clients: contact and billing details, contracts, invoices and project communication.
• Website logs kept by our host: IP address, browser type, the page requested and the time, used for security and to keep the site running.
• Analytics, only if you accept cookies: pages visited and how the site is used, through Google Analytics (see the Cookie Policy).

3. Why we use it, and our legal basis

Under the UK GDPR each use needs a lawful basis:

• Replying to your enquiry and preparing a quote: taking steps at your request before a contract (Article 6(1)(b)), and our legitimate interest in answering business enquiries (Article 6(1)(f)).
• Delivering a project or service you've bought: performance of a contract (Article 6(1)(b)).
• Invoices, tax and accounting records: legal obligation (Article 6(1)(c)).
• Security, preventing spam and abuse, and keeping the website running: legitimate interests (Article 6(1)(f)).
• Website analytics: your consent (Article 6(1)(a)), which you can withdraw any time through Cookie settings.

4. What we never do

We never sell or rent personal data. We don't use it for advertising profiles, and we don't send marketing emails or WhatsApp messages unless you've asked to receive them. We make no decisions about you by automated means.

5. Who we share it with

Only with service providers who help us run the business, under their data-protection terms:

• Google (Gmail, where enquiries arrive, and Google Analytics if you accept analytics cookies).
• Hostinger, which hosts this website.
• Meta (WhatsApp), when you choose to contact us there; WhatsApp's own terms apply.
• Professional advisers (accountants, lawyers) and authorities where the law requires it.

6. International transfers

We are based in Pakistan, so personal data you send us is processed in Pakistan. The UK and the EU have not issued an adequacy decision for Pakistan. We apply the protections in this policy to all personal data regardless of where it is processed, and we use providers (Google, Hostinger) that operate under recognised transfer safeguards such as standard contractual clauses, the UK International Data Transfer Addendum or the UK-US Data Bridge.

For people in the UAE: by sending us an enquiry, you consent to your data being processed in Pakistan and by the providers above for the purposes in this policy, as permitted by the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

7. How long we keep it

• Enquiries that don't lead to a project: deleted within 24 months of our last contact.
• Client records, contracts and invoices: kept for at least 6 years after the end of the relevant tax year, as tax and accounting laws require.
• Website logs: kept by our host for a limited period for security, then deleted.
• Analytics data, if you accept: kept for 14 months, then deleted automatically.

8. How we protect it

The website is served only over encrypted HTTPS. The contact form sends your message over an encrypted connection straight to our inbox, and our accounts use two-factor authentication. Only people who need personal data to do their work can access it. No method is perfectly secure, but we take the steps a careful business should and review them regularly.

9. Your rights

Depending on where you live, you have the right to:

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased, where we no longer need it or you withdraw consent.
• Restrict or object to how we use it, including at any time to processing based on legitimate interests.
• Receive your data in a portable format, where processing is based on consent or a contract.
• Withdraw consent at any time, without affecting what was done before.

10. How to use your rights or complain

Email info@digihubsoftwares.com with "Privacy" in the subject line. We acknowledge every privacy request or complaint within 30 days and respond fully within one month (extendable by two months for complex requests, in which case we'll tell you why). We may ask you to confirm your identity first.

If you're not satisfied, you can complain to a regulator: in the UK, the Information Commissioner's Office (ico.org.uk); in the UAE, the UAE Data Office. We'd appreciate the chance to resolve it with you first.

11. Pakistan

Pakistan does not yet have a general data-protection statute. We voluntarily apply the standards in this policy to everyone, comply with the Prevention of Electronic Crimes Act 2016, and will update this policy when new data-protection law takes effect.

12. Children

This website and our services are for businesses. We don't knowingly collect data from children.

13. Changes to this policy

When we change this policy we update the date at the top. Significant changes will also be noted on this page.