Privacy Policy

Techaft ("Techaft", "we", "us") is a software engineering studio. This policy explains what personal data we collect through this website and during client engagements, why we collect it, how long we keep it, and the choices you have.

It applies to this website and to the services we deliver directly. It does not cover third-party websites we link to, which have their own policies.

Information you give us. When you submit the contact form or email us, we receive your name, email address, and — where you choose to provide them — your company, budget range, and the contents of your message.

Information collected automatically. Our servers record standard technical data when you visit: IP address, browser and device type, referring page, pages viewed, and timestamps. This is used to keep the site secure and working.

Client project data. During an engagement we may process data belonging to a client — including systems access, source code, and end-user records — strictly as instructed by that client and under the contract signed with them.

We do not knowingly collect special-category data (health, biometrics, political opinions) and ask that you do not send it to us through this website.

• To respond to enquiries and prepare proposals, estimates and statements of work.
• To deliver, support and invoice the services you have engaged us for.
• To operate, secure, debug and improve this website.
• To send service updates about work already in progress.
• To meet legal, accounting and tax obligations.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

Where the GDPR or a comparable law applies, we rely on the following bases: contract — to take pre-contractual steps at your request and to perform an agreement with you; legitimate interests — to run and secure our business and website, balanced against your rights; consent — for optional communications, which you can withdraw at any time; and legal obligation — for records we are required to retain.

When we handle data on behalf of a client, that client is the data controller and we act as a processor under their instructions.

We use a small number of cookies that are necessary for the site to function — for example, to keep an authenticated administrator signed in. These cannot be switched off without breaking the site.

If we add analytics or performance cookies, they will be limited to aggregate usage measurement and disclosed here first. You can block or delete cookies in your browser settings; strictly necessary cookies aside, the site will continue to work.

We share personal data only where it is needed, and only with:

• Infrastructure and hosting providers that run our website, database and email under contract.
• Professional advisers — accountants and lawyers — where required.
• Authorities, where we are legally compelled to disclose, or to establish or defend legal claims.
• A successor entity, if the business is merged or acquired; you will be notified of any change of control affecting your data.

Every provider is bound by confidentiality and data-protection terms.

Enquiries that do not become projects are kept for up to 24 months so we can pick up the conversation if you return. Project and billing records are kept for the length of the engagement plus the period required by tax and contract law — typically seven years. Server logs are rotated within 90 days. When a retention period ends, data is deleted or irreversibly anonymised.

We use encryption in transit (TLS), access controls and least-privilege permissions, hashed administrator credentials, isolated environments for client work, and regular dependency and infrastructure patching. No system is perfectly secure, but if a breach affects your personal data we will notify you and any relevant regulator as required by law.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct data that is inaccurate or incomplete.
• Request erasure of data we no longer have a valid reason to keep.
• Object to or restrict processing based on legitimate interests.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local data-protection authority.

To exercise any of these, email support@techaft.com. We respond within 30 days and never charge a fee for a reasonable request.

We work as a distributed team and use reputable providers that may store data outside your country. Where data leaves the UK or European Economic Area, we rely on an adequacy decision or on Standard Contractual Clauses together with appropriate technical safeguards.

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect their data; if you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy as our services or the law change. The revision date at the top of the page always reflects the current version, and material changes will be highlighted on this page before they take effect.

For privacy questions or requests, email support@techaft.com, call +923041709440, or write to us at Bahawalpur, Pakistan.