Privacy Policy

Who we are, and who to contact

Digiradix is a sole proprietorship based in Lahore, Pakistan, working with businesses in the United States, United Kingdom, Canada, Australia and Pakistan. Where this policy says "we", "us" or "our", it means Digiradix.

For the purposes of UK and EU data protection law, Digiradix is the data controller for the personal data described below. We have not appointed a separate data protection officer, our size does not require one, so every request goes to the same inbox and is handled by the person who runs the business.

Email hello@digiradix.com or message +92 349 1444526 on WhatsApp. We reply within one working day.

What we collect, and when

There is no account to create here, no login and no profile. We only hold what you actively send us, plus standard technical data from the web server.

When you send the contact form, we receive your name, your email address, and optionally your company name, an indicative budget range and the message you write.

When you request a free audit, from the home page or the audit page, we receive your website address, your email address and, if you fill it in, a short note on what you want us to look at.

When you book a call, the scheduling is handled by Cal.com. You give it your name, email address, timezone and any notes you add, and it passes those to us so the meeting can be set up.

When you email or message us on WhatsApp, we hold whatever you choose to send, including the message history, for as long as that conversation is useful.

When you become a client, we hold the business details needed to run the engagement and invoice correctly: contact and billing details, plus the credentials or delegated access you grant us to your website, hosting, domain, Google or advertising accounts.

When you simply read the site, our web server records standard log data (IP address, browser and device type, the page requested, the time) and Google Analytics records a non-identifying view of how the site is used. Neither is used to work out who you are.

One thing worth knowing about how this works: nothing you type into a form is saved to a database on this website, because there isn't one. A submission is turned straight into an email and sent to our inbox, where it sits like any message you might have written to us directly. That is also why the retention periods further down talk about correspondence rather than records.

What we never collect

• Payment card details. Invoices are settled by bank transfer, Wise or Payoneer, and those details stay with the provider you pay through. They never touch this website.
• Advertising or retargeting pixels. There are none on this site. Nothing here follows you anywhere else.
• Bought or scraped contact lists. We do not use them, in either direction.
• Special category data (health, race, religion, politics, biometrics). We never ask for it, and you should not send it to us.

Why we use it, and the legal basis

Under UK and EU data protection law, every use of personal data needs a lawful basis. Ours are straightforward:

• Replying to your enquiry, sending the audit you asked for, preparing a proposal. Basis: taking steps at your request before entering into a contract.
• Delivering work you have engaged us for, invoicing, keeping records. Basis: performing our contract with you, plus our legal obligation to keep accounting records.
• Understanding how the site is used so we can improve it. Basis: our legitimate interest in running a website that works, weighed against the fact the data is aggregated and does not identify you.
• Following up once or twice on an enquiry that went quiet. Basis: legitimate interest. Say the word and we stop, permanently.

We do not send newsletters or run marketing campaigns, and there is no mailing list to be added to. If that ever changes it will be opt-in, with a working unsubscribe, and this page will be updated before it launches, not after.

Cookies and analytics

This site sets no cookies of its own, and there is no consent banner because there is nothing of ours to consent to.

One small exception, stated for completeness: if a form fails to send, your browser holds what you typed in its own session storage just long enough to put it back in the form so you do not have to retype it. It never leaves your device, it is not a cookie, and closing the tab clears it.

We use Google Analytics 4 to see which pages people read and where visitors arrive from. It sets its own cookies and records a truncated, non-identifying view of your visit. We have not switched on Google Signals, advertising features, or data sharing with Google products for advertising purposes.

We use Google Search Console, which reports the search queries that led people here. It shows aggregated data only and never identifies an individual.

The booking page embeds Cal.com in an iframe. That embed loads only when you open that page, and it is subject to Cal.com's own cookie and privacy terms.

Fonts are self-hosted on our own server, so reading this site does not quietly send a request to Google Fonts or any other font CDN. Neither does anything else on the page: there are no third-party scripts here beyond the two named above.

You can block or delete cookies in your browser settings, or install Google's official opt-out add-on, and this site will keep working normally.

Who else sees your data

We do not sell, rent or trade personal data. We share it with the service providers we need to run the business, and only as far as their job requires:

• Google, in two separate roles worth stating plainly. Analytics and Search Console measure how the site is used, in aggregate. Gmail is also our inbox, so Google stores the actual content of anything you send us, through a form or by email, for as long as we keep it.
• Cal.com, scheduling the intro call.
• Our web host, serving this site, relaying the email a form submission turns into, and holding the server logs.
• Payment providers (our bank, Wise, Payoneer), processing the invoices you pay.
• Our accountant, and where legally required, the tax authorities, keeping the books straight.

We will also disclose data where a law or a valid court order requires it. If that happens and we are permitted to tell you, we will.

When we work inside your systems (your website, hosting, Google Business Profile or ad accounts) we are acting on your instructions as a processor, not for our own purposes. We use that access for the agreed work only, and we hand it back or ask you to revoke it when the engagement ends.

Where your data is held

We operate from Pakistan, and the providers listed above hold data on servers in the United States, the European Union and elsewhere. If you are in the UK or the EU, your data leaves your jurisdiction when you contact us.

Pakistan does not currently hold a UK or EU adequacy decision. Where a transfer of your personal data to us falls under UK or EU data protection law, we rely on your explicit consent, given by choosing to get in touch, or on the transfer being necessary to perform a contract with you. Our major providers, Google and Cal.com among them, operate Standard Contractual Clauses covering their own transfers.

If this matters to your organisation, raise it before you engage us and we will put a written data processing agreement in place. We would rather do that at the start than argue about it later.

How long we keep it

• Enquiries that do not become projects, up to 24 months, then deleted.
• Client project records, contracts and correspondence, the life of the engagement plus 7 years, which is what tax and accounting rules require.
• Invoices and financial records, 7 years, same reason.
• Access credentials to your accounts, removed as soon as the engagement ends.
• Google Analytics data, 14 months, the shortest retention Google offers for it.
• Web server logs, typically 30 days, on our host's rotation.

Ask us to delete your data sooner and we will, with the exception of records we are legally required to keep. We will tell you which ones those are.

Your rights

Wherever you are in the world, you can ask us to:

• tell you what personal data we hold about you, and give you a copy of it;
• correct anything that is wrong;
• delete it;
• stop using it for a particular purpose, including any follow-up;
• send it to you or to another provider in a portable format;
• withdraw consent you gave earlier, without affecting anything that was lawful before you withdrew it.

Email hello@digiradix.com. There is no charge, we may ask one question to confirm who you are, and we respond within 30 days.

If you are in the UK or EU and you are not happy with how we handled it, you can complain to your national supervisory authority, the Information Commissioner's Office in the UK. We would much rather you came to us first and gave us the chance to put it right.

If you are a California resident, you have parallel rights to know, to delete, and to opt out of the sale of your information. We do not sell personal information, so there is nothing to opt out of, and we will never treat you differently for exercising a right.

Keeping it secure

The site is served over HTTPS. Client credentials live in a password manager with two-factor authentication enabled wherever the provider supports it, and are shared only with whoever is doing the work.

No system is perfectly secure and we will not pretend otherwise. If a breach affects your personal data and poses a real risk to you, we will tell you and the relevant regulator without undue delay, and we will tell you what we are doing about it.

Children

This site sells business services and is not directed at children. We do not knowingly collect data from anyone under 16. If you think a child has sent us personal data, email us and we will delete it.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. If a change is significant, a new analytics tool, a new category of data, a new provider, we will say what changed rather than quietly reissuing the page.

Questions

Email hello@digiradix.com or message +92 349 1444526 on WhatsApp. A real person reads it, and you will get a real answer.