1. Who we are
ibdaX Digital (“ibdaX”, “we”, “us”) is a Pakistan-based digital agency serving clients in the United States, the United Kingdom and Canada. We run the website www.ibdaxdigital.com.
- Address: Suite LS3, 1st Floor, Block 14, Gulistan-e-Johar, Karachi, Pakistan
- Email: info@ibdaxdigital.com
We decide how and why your personal information is used on this website. In UK data protection terms, we are the “controller”.
This policy covers this website and enquiries you send us. If you become a client, your written agreement with us and our mutual NDA also apply to the information you share during the project.
2. The short version
- We collect what you type into our contact form, plus anything you send us by email, phone or WhatsApp.
- We use it to reply to you and, if you want, to prepare a proposal.
- We use Google Analytics to see how people use the site. It sets cookies only if you accept them.
- We do not sell your personal information.
- You can ask us to see, correct or delete your information at any time by emailing info@ibdaxdigital.com.
3. What we collect
Information you give us through the contact form
| Field | Required? |
|---|---|
| Your name | Yes |
| Email address | Yes |
| Phone / WhatsApp number | Optional |
| Company or brand | Optional |
| Your message | Yes |
We also record which page’s form you used (for example “homepage”) and the date and time you sent it. Our team may add internal notes to your enquiry, such as the status of a call or proposal.
Information you send us directly
If you email us, call us, or message us on WhatsApp, we receive your name, contact details and whatever you choose to tell us. WhatsApp links on our site open WhatsApp, a service run by Meta; WhatsApp’s own privacy policy applies to that app.
Information collected automatically
- Analytics. We use Google Analytics 4 (GA4), loaded through Google Tag Manager. GA4 collects information such as the pages you view, how long you stay, the device and browser you use, your approximate location (country or city, worked out from your IP address), and the website that sent you to us. If you accept analytics cookies, it uses cookies and a random identifier to recognize a returning browser. If you reject them or do not choose, no analytics cookies are set; Google may still receive a basic signal that a page was viewed, without a cookie or identifier.
- Clicks on our contact links. When you click our email, phone or WhatsApp link, we record that the click happened (not what you then say) so we can see which contact methods people use.
- Form submissions. When you send the form successfully, we record that a form was sent and from which page.
- Server and security logs. Our hosting provider records technical information about each request, such as IP address, browser type, the page requested and the time. Our server briefly keeps your IP address in memory to stop the form from being flooded by repeated submissions. We do not save it with your enquiry.
We do not ask for payment details, government ID numbers or sensitive information (such as health data) on this website. Please do not include them in your message.
4. Why we use your information, and our legal basis
UK visitors: UK data protection law requires us to tell you our “legal basis” for each use.
| Why we use it | Information | Legal basis (UK GDPR) |
|---|---|---|
| To reply to your enquiry and arrange a free 30-minute consultation | Form details, emails, calls, WhatsApp messages | Steps you ask us to take before a possible contract; and our legitimate interest in answering business enquiries |
| To prepare a proposal and, if you go ahead, a mutual NDA and agreement | Contact and business details you share | Steps before a contract, then performance of the contract |
| To understand how the site is used and improve it | Analytics data | Analytics cookies: your consent, given on our cookie banner. Basic signals without cookies: our legitimate interest in understanding and improving our website |
| To keep the site and form secure and stop spam | IP address, server logs | Our legitimate interest in protecting our website |
| To meet legal, tax or accounting duties (clients only) | Client records | Legal obligation |
Canadian visitors: by sending us an enquiry, you consent to our using your information for the purposes above. You can withdraw that consent at any time (see Section 10).
We do not use your information for automated decisions that have legal or similarly significant effects on you.
We will not add you to a marketing mailing list because you sent an enquiry.
5. Who we share it with
We share your information only with service providers who help us run the website and handle enquiries. They process it on our behalf.
| Provider | What they do for us | Where |
|---|---|---|
| Vercel Inc. | Hosts the website and the form’s server code; keeps server logs | United States (servers in other regions may also be used) |
| Supabase Inc. | Hosts the database where form enquiries are stored | Singapore |
| Resend | Sends us an email notification containing your enquiry | United States |
| Hostinger | Hosts our email inbox, where enquiry notifications and your emails arrive | Hostinger data centres, which may be in Europe, the United States or Asia |
| Google LLC (Google Analytics, Google Tag Manager) | Website analytics | United States and other countries |
We may also share information:
- with professional advisers (such as accountants or lawyers) where needed;
- if the law requires it, or to protect our rights or the safety of others;
- with a buyer or successor if our business is sold or reorganized. We would tell you if that happens.
6. We do not sell your information
We do not sell your personal information. We do not share it with third parties for cross-context behavioral advertising.
7. International transfers
Our team works from Pakistan, and our service providers store data in the United States, Singapore and other countries where they operate. This means your information is processed outside the UK and Canada.
Where UK data protection law applies, we rely on the safeguards our providers offer for international transfers (such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK-US “data bridge” where the provider is certified). You can ask us for more detail at info@ibdaxdigital.com.
Canadian visitors: your information may be accessed by courts, law enforcement and national security authorities in the countries where it is processed.
8. Cookies
Analytics cookies are set only after you click “Accept” on our cookie banner.
| Cookie | Set by | Purpose | Typical duration |
|---|---|---|---|
_ga | Google Analytics | Tells one browser apart from another for visitor counts | Up to 2 years |
_ga_CG3S7E3QPF | Google Analytics | Keeps track of your visit (session) on our site | Up to 2 years |
Google Tag Manager itself does not set cookies; it loads the Google Analytics tag.
Strictly necessary cookies: used only for secure sign-in by our staff; visitors don’t receive them.
Your choices. When you first visit, a banner asks whether you accept analytics cookies. “Accept” turns them on; “Reject” keeps them off, and the site works the same either way. We remember your choice in your browser so the banner does not keep coming back. You can change your mind at any time with the “Cookie settings” link at the bottom of every page. You can also block or delete cookies in your browser settings, or install Google’s opt-out add-on at tools.google.com/dlpage/gaoptout.
9. How long we keep it
- Enquiries that do not lead to a project: 24 months.
- Client records: 5 years after the contract ends, or longer if the law requires it.
- Google Analytics data: 14 months.
- Server logs: kept by Vercel for a short period under its own policies.
When we no longer need information, we delete it or make it anonymous.
10. Your rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete your information;
- stop using it, or limit how we use it;
- give you your information in a portable format (UK);
- withdraw your consent, where we rely on consent (this does not affect what we did before).
How to ask: email info@ibdaxdigital.com with the subject “Privacy request”. We may need to confirm your identity first. We will reply within the time the law sets (for example, one month under UK GDPR and 30 days under PIPEDA). We do not charge for this unless a request is clearly excessive.
If you are not happy with our answer, you can complain to your regulator:
- UK: Information Commissioner’s Office (ICO), ico.org.uk
- Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca
- United States: some states give residents specific privacy rights. We will respond to any request above wherever you live.
We would appreciate the chance to sort out your concern first.
11. Security
We take reasonable steps to protect your information. Our website is served over HTTPS, and the systems where our staff view enquiries need a password to sign in. No system is completely secure, so we cannot promise that information will never be accessed without permission. If a breach affects you, we will tell you where the law requires it.
12. Children
Our website and services are for businesses. They are not aimed at anyone under 16, and we do not knowingly collect information from children. If you think a child has sent us information, email info@ibdaxdigital.com and we will delete it.
13. Links to other websites
Our site links to other services, such as WhatsApp and our social media profiles. Their own privacy policies apply when you use them. Some blog images may load from third-party image-hosting services, which can see your IP address when the image loads.
14. Changes to this policy
We will update this policy when our website or our practices change, for example if we add a new analytics or advertising tool. The effective date at the top shows the latest version. If a change is significant, we will make it clear on the website.
See also our Terms of Service.
15. Contact us
ibdaX Digital
Suite LS3, 1st Floor, Block 14, Gulistan-e-Johar, Karachi, Pakistan
Email: info@ibdaxdigital.com