Privacy policy

This policy explains what personal data TechPit Solutions collects through this website and when you contact us, why we use it, who we share it with and the choices you have. It applies wherever you are; extra information for specific countries is in Additional information for your region.

Who we are

TechPit Solutions ("we", "us") provides IT, automation and digital services as a remote team. We are the controller of the personal data described in this policy.

For any privacy question or request, email [email protected]. We have not appointed a formal data protection officer; privacy requests are handled directly by our management team.

What we collect

• Enquiry details you send through our forms: name, email address and, if you choose, phone number, company, country, the service or plan you are interested in, and your message.
• Booking details if you schedule a call through the booking calendar on our contact page: typically your name, email, chosen time and any notes you add.
• Messages you send us by email, phone or WhatsApp, and records of our replies.
• Client information needed to deliver and invoice services if you become a client, such as contact and billing details.
• Technical data our hosting and security providers process to run and protect the site, such as IP address, browser and device type, and pages requested. Spam protection on our forms also assesses browser signals (see Cloudflare Turnstile below).
• Usage analytics, only if you accept analytics cookies: pages viewed, how you arrived at the site, approximate location (country or city), device type and similar aggregated measurements.
• Preferences, such as your cookie choice and, if you pick one, your preferred country.

We do not ask for sensitive information (such as health, financial account or government ID details) through this website. Please do not include it in your message.

Why we use it and our lawful bases

Under the UK GDPR and EU GDPR we must have a lawful basis for each use of personal data. Ours are:

• Replying to enquiries and bookings, and preparing proposals: our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
• Delivering services and invoicing: performance of a contract with you or your organisation, and compliance with tax and accounting obligations.
• Protecting the site and our forms from spam, fraud and abuse: our legitimate interest in keeping our systems secure.
• Remembering your cookie choice and country preference: our legitimate interest in providing the site the way you asked for it. These cookies are strictly necessary or set only after you make a choice.
• Website analytics: your consent, which you can withdraw at any time from our cookie policy page or the cookie banner.

We do not add you to a marketing mailing list without your consent.

We do not sell personal data, we do not use it for targeted advertising, and we do not make decisions about you based solely on automated processing.

Cookies and analytics

Google Analytics 4, loaded through Google Tag Manager, runs only after you accept analytics cookies. Until then we use Google Consent Mode v2 with analytics and advertising storage set to "denied", so no analytics cookies are set. We do not use advertising cookies. Full details, including every cookie we use and how to change your choice, are in our cookie policy.

Who we share it with

We use the following service providers (processors), who handle personal data only on our instructions and under written data processing terms:

• Vercel: website hosting and delivery. Processes technical data such as IP addresses and request logs.
• Supabase: database where enquiries and form submissions are stored.
• Resend: email delivery service that sends new-enquiry notifications to our team.
• Cloudflare (Turnstile): spam and bot protection on our forms. Cloudflare processes your IP address and browser signals to tell people from bots.
• Google (Tag Manager and Analytics 4): website analytics, only with your consent.
• Booking calendar provider: the third-party scheduling service embedded on our contact page, if you use it to book a call. It also applies its own privacy policy to the data you enter.
• Customer relationship management (CRM) tool: where we use one, enquiry details may be forwarded to it so we can track our conversations with you.
• Email, messaging and business tools we use to communicate and run the business, such as our email provider and WhatsApp.

We may also share information with professional advisers (such as accountants and lawyers), or where required by law or to protect our rights. If our business is reorganised or sold, data may transfer to the new owner under this policy.

International transfers

We work from the United Kingdom and Pakistan, and several of our providers are based in, or store data in, the United States and other countries. This means your data may be processed outside the country where you live. Where UK or EU law applies, we rely on safeguards such as an adequacy decision (including the UK Extension to the EU-US Data Privacy Framework where a provider is certified), the EU Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum. Our team in Pakistan accesses data only as needed to respond to you and deliver services, under the same security and confidentiality standards. You can ask us for more information about these safeguards.

How long we keep it

• Enquiries and bookings that do not lead to work: deleted within 24 months of our last contact.
• Client records: for the length of the contract and afterwards for as long as tax and accounting law requires (generally six years in the UK).
• Analytics data (only if you consented): kept in Google Analytics for up to 14 months, then deleted automatically.
• Your cookie choice: 12 months, after which we ask again. Your country preference: until you change it or clear your cookies.
• Hosting and security logs: for the short periods set by our providers, typically days to weeks.

How we protect it

We use access controls, encryption in transit, and reputable providers with their own security certifications. Only staff who need personal data to do their job can access it. No system is perfectly secure, so if a breach affects you we will tell you and the relevant regulator where the law requires.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is inaccurate or incomplete;
• have your data deleted;
• restrict or object to how we use it, including objecting to any use based on our legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time (for example to analytics cookies), without affecting earlier processing; and
• complain to a data protection regulator.

To make a request, email [email protected]. We may need to confirm your identity before acting. We aim to respond within one month (or the shorter or longer period your local law sets) and we will not charge you or treat you differently for exercising your rights.

Children

This website is intended for businesses and is not directed at children under 16. We do not knowingly collect personal data from children.

Additional information for your region

The sections below add to the rest of this policy for visitors and clients in specific countries. If anything here conflicts with the general sections, the section for your region applies to you.

United States (including California)

Under the California Consumer Privacy Act as amended by the CPRA, and similar state laws, we collect the categories of personal information described in "What we collect": identifiers (such as name, email and IP address), professional information (such as company), commercial information (the services you are interested in), and internet activity (only with consent for analytics). We collect them from you and your browser, for the purposes described above, and disclose them only to the service providers listed.

• We do not sell or share personal information, as those terms are defined in the CCPA, and we have not done so in the past 12 months.
• We do not use or disclose sensitive personal information for purposes that would give you a right to limit it.
• You have the right to know what personal information we collect, use and disclose; to delete it; and to correct it. You will not be discriminated against for exercising these rights.
• You can submit a request by emailing [email protected], or through an authorised agent with your signed permission. We will verify your request by matching information you provide with what we hold.
• We honour the Global Privacy Control (GPC) browser signal: if your browser sends it, we treat it as an opt-out and do not load analytics, as if you had declined analytics cookies.

United Kingdom and European Union

The UK GDPR, the Data Protection Act 2018, the EU GDPR and the Privacy and Electronic Communications Regulations apply to our processing as described above. You can complain to the Information Commissioner's Office (ico.org.uk) in the UK, or to the data protection authority in your EU country. We would appreciate the chance to resolve your concern first, so please contact us.

Canada

We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, provincial laws such as Quebec's Law 25. By submitting an enquiry you consent to the uses described in this policy, including storage and processing outside Canada by the providers listed, where it may be accessible to authorities in those countries. You may withdraw consent subject to legal or contractual limits. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Australia

We handle personal information in line with the Privacy Act 1988 and the Australian Privacy Principles (APPs). Personal information may be disclosed to recipients overseas, mainly in the United Kingdom, Pakistan and the United States, as described above, and we take reasonable steps so they handle it consistently with the APPs. You can ask to access or correct your information, and if you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand

Where the Privacy Act 2020 applies, we handle your personal information in line with the information privacy principles. You can ask to access and correct the information we hold about you by emailing [email protected]. If a privacy breach is likely to cause serious harm, we notify the Privacy Commissioner and the people affected as the Act requires. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner.

United Arab Emirates

Where Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) applies, we process your personal data on the bases described above, including your consent where required, and transfer it outside the UAE only with appropriate safeguards. You have rights to information, access, correction, erasure, restriction and objection, which you can exercise by emailing us. Different rules apply in free zones with their own data protection laws, such as the DIFC and ADGM.

Saudi Arabia

Where the Personal Data Protection Law (PDPL) applies, we collect only what is needed for the purposes above, keep it secure and transfer it outside the Kingdom only as the PDPL and its implementing regulations allow. You have the right to be informed, to access and obtain a copy of your data, to correct it and to request its destruction when it is no longer needed. You can contact us, or complain to the Saudi Data and AI Authority (SDAIA).

Pakistan

As of the date of this policy, Pakistan does not have a comprehensive data protection statute in force; a Personal Data Protection Bill has been drafted but not enacted. We apply the same standards and rights described in this policy to everyone in Pakistan, and we comply with applicable laws such as the Prevention of Electronic Crimes Act 2016.

Changes to this policy

We will update this page when our practices change and revise the date at the top. If a change materially affects how we use data you have already given us, we will tell you directly where we can.