Privacy Policy
1. Who we are and how to contact us
This policy explains how Nexevol Technologies (“we”, “us”) processes personal data when you visit this website or contact us through it. The controller responsible for this processing is:
Nexevol Technologies
Karachi, Pakistan
Email: [email protected]
We keep the data we collect to a minimum. We do not sell personal data, and we do not use it for advertising or cross-site tracking.
2. Visiting this website
Hosting and delivery
This website is hosted and delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) through its global network. When you visit a page, your browser sends technical data that is needed to deliver it: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system. Cloudflare processes this data on our behalf to deliver the website and protect it against attacks and abuse.
- Legal basis: our legitimate interest in a secure, reliable website (Art. 6(1)(f) GDPR).
- Retention: Cloudflare keeps request logs for a limited period in line with its data processing addendum. We do not combine this data with other sources.
Country-based content
Cloudflare derives the country you are browsing from based on your IP address. We use only this country code, for example to mention your region on the homepage and to show budget ranges in your currency on the contact form. The country code is used while the page is generated and is not stored.
- Legal basis: our legitimate interest in presenting relevant content (Art. 6(1)(f) GDPR).
Fonts
Fonts are hosted on our own infrastructure. No connection to third-party font services is made.
3. Contact form and email
When you send a project inquiry, we process the details you enter: your name, business email address, company, website (optional), the service you are interested in, approximate budget, desired timeline, project description and how you heard about us (optional). If you email us directly, we process your email address and the content of your message.
We use this data only to respond to your inquiry and, if you wish, to prepare a proposal or project. Form submissions are delivered to us by email through Resend, Inc. (USA), which acts as our processor.
- Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), and otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR).
- Retention: if your inquiry does not lead to a business relationship, we delete it after 12 months. If it does, we keep it for as long as the relationship requires and then for any statutory retention period.
4. Spam and abuse protection
The contact form uses Cloudflare Turnstile (Cloudflare, Inc., USA) to check that a submission comes from a person rather than an automated program. Turnstile processes technical data such as your IP address and characteristics of your browser and device. It does not show you visual puzzles or use the data for advertising.
To limit repeated submissions, our server also keeps your IP address in memory for up to 10 minutes. The form includes a hidden field and a timing check, which do not collect additional personal data.
- Legal basis: our legitimate interest in protecting the form against spam and abuse (Art. 6(1)(f) GDPR).
6. Links to other services
This website links to external services, such as our LinkedIn page and our booking page for discovery calls. These links are ordinary links: no data is sent to those services until you click them. When you use them, the provider’s own privacy policy applies.
7. Transfers outside the EU
Cloudflare and Resend are based in the United States. Where personal data is transferred there, it is protected by the EU–U.S. Data Privacy Framework where the provider is certified, and otherwise by the European Commission’s Standard Contractual Clauses included in our data processing agreements.
8. Security
All connections to this website are encrypted with TLS. Access to inquiries is limited to the people who need it to respond to you.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data deleted (Art. 17)
- restrict how we process it (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on our legitimate interests (Art. 21)
- withdraw consent at any time, with effect for the future (Art. 7(3))
To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.
10. Visitors from the United States and Canada
We do not sell or share personal information, as those terms are defined in California privacy law, and we do not use it for targeted advertising. Depending on the state you live in, you may have the right to know what personal information we hold about you, and to have it corrected or deleted. We will not treat you differently for exercising these rights.
If you are in Canada, you can ask to access or correct the personal information we hold about you. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.
To make a request, email [email protected]. We may need to verify your identity before responding.
11. Changes to this policy
We update this policy when our website or the way we process data changes. The date at the top of this page shows when it was last revised. Please check it from time to time.