Privacy policy

This policy explains what personal data Elixent Digital collects when you use this website, why, on what legal basis, how long it is kept, who processes it, and what rights you have under the EU General Data Protection Regulation (GDPR / DSGVO).

1. Data Controller

For all questions about this policy or about the processing of your data, contact the address above.

2. Data Collected Through the Contact Form

The contact form on this website collects the following personal data:

• Name (required)
• Email address (required)
• Project type (selected from a list)
• Estimated budget range (selected from a list)
• Free-text message (required)
• Technical metadata delivered with your submission (e.g., IP address, user agent, timestamp) which hosting and form-processing providers handle as part of routine operation

Purpose

The data is used to reply to your inquiry, scope a potential engagement, and follow up by email.

Legal Basis

Processing is based on:

• Art. 6(1)(b) GDPR — steps at your request prior to entering into a contract, where your inquiry relates to a potential engagement;
• Art. 6(1)(f) GDPR — legitimate interest in responding to business inquiries, where your message is a general question rather than a pre-contract step.

Retention

Inquiry data is retained for as long as reasonably necessary to handle the conversation and any resulting engagement, and thereafter for up to 24 months in case of follow-up questions, unless a longer statutory retention period applies (e.g., for invoices linked to a signed engagement). You can request earlier deletion at any time (see Section 6).

3. Processors and Third-Party Services

This website relies on the following service providers. Each may process personal data on the data controller's behalf or independently, as indicated below.

4. Cookies and Local Storage

This website uses a minimal set of cookies and browser storage:

• Cloudflare may set technical cookies for security and traffic routing (e.g., __cf_bm, cf_clearance).
• hCaptcha sets cookies and local-storage entries used to verify human interaction on the captcha widget.
• Google Analytics sets cookies (e.g., _ga, _ga_*) to distinguish visitors for aggregate measurement.

No advertising or cross-site tracking cookies are set by Elixent Digital. No cookie banner is displayed because no consent-required (non-essential) third-party tracking is loaded beyond analytics; if you prefer not to be measured by Google Analytics, use your browser's tracking-protection features or the Google Analytics Opt-out Browser Add-on.

5. Public Code Repository

The source code for this website is published on GitHub (github.com/zaifastafa). Visiting GitHub is subject to GitHub's own privacy terms; this website does not embed GitHub tracking scripts into its pages.

6. Your Rights

Under the GDPR, you have the following rights regarding personal data we hold about you:

• Access (Art. 15) — request a copy of your data.
• Rectification (Art. 16) — correct inaccurate data.
• Erasure (Art. 17) — request deletion, subject to legal retention exceptions.
• Restriction (Art. 18) — restrict processing while a dispute is resolved.
• Portability (Art. 20) — receive your data in a machine-readable format.
• Objection (Art. 21) — object to processing based on legitimate interest.
• Withdraw consent at any time, where processing is based on consent (Art. 7(3)), without affecting the lawfulness of prior processing.
• Complain to a supervisory authority (Art. 77) — you can lodge a complaint with the data protection authority in your EU member state of residence.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. International Data Transfers

Because the data controller is based in Pakistan and the site uses US-based hosting and analytics providers, personal data may be processed outside the European Economic Area. Transfers rely on the standard contractual clauses of the respective providers and, where applicable, their Data Privacy Framework certifications.

8. Security

All traffic to this website is encrypted in transit via HTTPS/TLS. Third-party processors listed above apply their own industry-standard security controls. No method of transmission over the internet is 100% secure; if you have concerns about sending sensitive information through the contact form, email [email protected] directly instead.

9. Changes to This Policy

This policy may be updated to reflect changes in services used or in applicable law. The "last updated" date at the top of the page always reflects the current version.