Privacy Policy

Who we are

Tekvion Innovations is a web design and development studio founded in 2021. We operate under the registered name Tekvion Solutions and work from River Gardens, Islamabad, Pakistan. This website, tekvion.net, is ours, and we are responsible for the personal information collected through it.

For anything in this policy, the person to write to is business@tekvion.net. There is no privacy department to route you through — the message goes to the founders.

What this policy covers

This policy applies to tekvion.net and to the enquiries that reach us through it. It does not cover the websites and applications we build for clients. When we work on a client's site we act on that client's instructions, under the agreement we have with them, and their own privacy policy governs how visitor data is handled there. It also does not cover third-party sites we link to, such as LinkedIn or Facebook, which have their own policies.

What we collect, and why

The contact form

Our contact form asks for your name, email address, an optional company name, an optional budget range, and your message. We use these to reply to you, to understand whether we are a sensible fit, and to keep the thread together if the conversation continues. The lawful basis is simple: you asked us to get in touch.

Booking a call

The “Book a Call” buttons take you to our scheduling page on Calendly, a third-party service. Whatever you enter there — your name, your email address, the slot you choose and anything you type into the notes field — is held by Calendly on our behalf and passed to us so we can hold the meeting and prepare for it. Their own privacy policy governs what happens on their page, and we have no control over it. If you would rather not use them, email or call us instead and we will arrange a time by hand.

Email, phone and messaging

If you email us, call us, or message us on LinkedIn or Facebook, we keep that correspondence so we have a record of what was discussed and agreed. Files you send us — briefs, brand assets, spreadsheets, credentials — are held only for as long as the work needs them.

Server logs

Like every website, ours is served by a hosting provider that keeps short-lived technical logs: IP address, browser and device type, the pages requested, and the time of the request. These exist to keep the site up, to diagnose faults, and to spot abuse. We do not use them to build a picture of individual visitors, and we do not combine them with anything you send us.

What we do not collect

• No payment details. This site takes no payments; invoices are settled by bank transfer, Wise or Payoneer, arranged directly with you.
• No advertising identifiers, cross-site trackers or fingerprinting.
• No automated decision-making or profiling. A person reads every enquiry and decides what to do with it.
• No special-category data. Please do not send us any through these forms.
• No mailing list. We run no newsletter and operate no subscriber list, so there is nothing here that adds you to one.

Cookies and tracking

This site sets no tracking cookies, no advertising cookies and no analytics cookies. It does not fingerprint your browser, and it does not embed social widgets that watch you. That is why you have not been shown a consent banner: there is nothing here to consent to.

The typefaces used on this site are compiled into it at build time and served from our own domain, so loading a page does not tell a font provider that you visited. At the time of writing we run no analytics product at all. If we ever add one, we will choose a privacy-respecting, cookie-free option, and we will update this page — and this paragraph — before it goes live.

How long we keep it

Enquiries that do not become projects

Kept for up to 24 months from your last message, in case you come back to us, then deleted.

Client project records

Kept for the life of the working relationship and for a reasonable period afterwards so we can support, restore or hand over what we built.

Invoices and accounting records

Kept for as long as tax and accounting law requires us to keep them.

Booked and cancelled meetings

Kept in our calendar and in the scheduling account for as long as the enquiry is live, then removed with the rest of the enquiry record.

Server logs

Kept for the short retention window our hosting provider applies, then rotated out.

If you would rather we deleted something sooner, ask. Unless we are legally required to keep it, we will.

Who else handles your data

We keep the list of companies that touch your information as short as we can. At the time of writing it is:

• Our hosting provider, which serves this website and holds the technical logs described above.
• Our email provider, which carries and stores the correspondence between us.
• A form relay service, if and when the contact form is connected to one. Until that happens the form falls back to opening a pre-addressed message in your own email client, which means your enquiry travels straight from you to us with no third party in the middle.
• Calendly, our scheduling provider, which holds the details you enter when you book a call and syncs the meeting to our calendar.
• Project and accounting tools used to run client work — a shared project board, invoicing software, and the payment providers named above — which apply only once you become a client.

None of these companies may use your information for their own purposes. We do not sell, rent, trade or otherwise share your data with advertisers, data brokers or anyone else.

Where your data is stored

We are based in Pakistan and our clients are spread across four continents, so the providers we use may store or process data on servers outside your country and outside ours. Where a provider offers a choice of region we prefer one close to the people the data belongs to. Whichever region applies, the protections described in this policy travel with your information.

Your rights, and how to use them

You can ask us at any time to:

• tell you what personal information we hold about you, and send you a copy;
• correct anything that is wrong or out of date;
• delete what we hold, where we are not legally required to keep it;
• stop using your information for a particular purpose;
• withdraw consent you previously gave.

Email business@tekvion.net with what you want and we will deal with it within 30 days. We will not charge you for it, and we will not make you jump through hoops — but we may ask a question or two to be sure the request is genuinely yours.

To be straightforward about it: we are established in Pakistan, not in the UK or the European Union, and we make no claim to any certification, seal or accreditation under the UK GDPR, the EU GDPR or any other regime. What we do commit to is handling requests from anyone, anywhere, to the standard those laws set out.

How we protect your information

This site is served over HTTPS. Access to enquiry email, project files and client credentials is limited to the team members who need it, protected by strong unique passwords and two-factor authentication, and reviewed when someone's role changes. Client credentials are stored in a password manager, never in plain text and never in a chat thread.

No system is perfect, and we will not pretend otherwise. If a breach ever affected your information, we would tell you what happened, what we did about it, and what you should do — promptly and in plain language.

Data on sites we build and maintain

When we build or look after a client's website we may be able to see data that site collects — customer orders, form submissions, membership records, support tickets. In that situation we act only on the client's instructions, under the terms of our project or care-plan agreement, and we do not use their data for anything of our own. If you are a visitor or customer of a site we built, your relationship is with that business, and their privacy policy is the one that applies. We will always pass a request on to them if you send it to us by mistake.

Children's data

Our services are sold to businesses and our website is not aimed at children. We do not knowingly collect information from anyone under 16. If you believe a child has sent us personal information, tell us and we will delete it.

Changes to this policy

We update this page when what we do changes — a new tool, a new form, an analytics product we have decided to add. The date at the top always reflects the current version, and material changes will be described in the summary box rather than buried in a paragraph. This policy has no version history published online; if you need to know what it said on a particular date, ask us and we will tell you.

Contact us about privacy