Privacy Policy

Who we are

Sofia Digital Ventures is the data controller for the information described in this policy. Syed Muaz Shah is responsible for how that information is handled and is the point of contact for any privacy question or request.

What this website collects

Because of that, simply reading this website does not create a record of you that we hold. The only routine data generated is what any web server and network provider records automatically in order to deliver the page — for example your IP address, browser type, and the time of the request. These server logs are produced by our hosting provider and our network/CDN provider, are used only to keep the site running and secure, and are not used to build any profile of you.

Information you give us directly

We only receive personal information when you choose to send it — by emailing [email protected], by calling or messaging the number above, or by booking and attending a strategy call. Depending on what you send, that may include:

• your name and the organisation you represent;
• your email address and phone number;
• whatever you tell us about your business, systems, and the problems you want solved.

We use this only to reply to you, to prepare and deliver the work you have asked about, and to keep normal business records such as proposals and invoices. We do not sell it, rent it, or share it for anyone else's marketing. We do not send marketing emails to people who have only made an enquiry.

Client data during a project

If you engage us to design or deploy an automation, we may be given access to systems and data that belong to you — for example an inbox, a CRM, a spreadsheet, or an API. When that happens:

• we access only what is needed for the agreed work;
• we act on your instructions, as a processor acting for you, and you remain the controller of that data;
• we do not use your business data to train models for other clients;
• access is returned or revoked when the engagement ends, and working copies are deleted on request.

Where a project relies on a third-party service, that service handles data under its own terms. We will tell you which providers a build depends on before it goes live, so you can review them.

Who else may see your information

We keep the list short and only use providers where there is a genuine operational need:

• Hosting and network providers, which serve this website and record standard server logs;
• Email providers, which carry and store correspondence with us;
• Professional and financial services — for example accountants or payment providers — where a law or a transaction requires it.

We may also disclose information if we are legally required to do so. We do not sell personal data under any circumstances.

How long we keep it

Enquiries that do not lead to work are deleted once they are clearly no longer relevant. Records connected to actual engagements — contracts, invoices, and correspondence — are kept for as long as needed for the relationship and for any accounting or tax period that applies to them, then deleted.

Security

We use access controls, encrypted connections, and reputable providers to protect the information we hold, and we limit who can reach it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will tell you and any relevant authority without undue delay.

Your rights

You can ask us to show you what personal information we hold about you, correct it if it is wrong, delete it, or stop using it. You can also object to a particular use or ask for a copy in a portable form. Email [email protected] and we will respond within 30 days. There is no charge for a reasonable request.

Depending on where you live, local data protection law may give you additional rights, and you may have the right to complain to your national data protection authority.

International transfers

We operate from Pakistan. If you contact us from elsewhere, your information will be handled here and by the providers listed above, which may be located in other countries. By contacting us you understand that your information will be processed in those locations.

Children

Our services are sold to businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

If we change how we handle personal information, we will update this page and change the date at the top. Material changes will be described here rather than made quietly.

Contact