Privacy Policy

Digimatic Studio (Private) Limited is a company incorporated in Pakistan (SECP Company Registration No. 0334203). For the personal information described in this policy we are the “controller” under the EU and UK GDPR, meaning we decide how and why it is used.

• Business address: Suite 404, Shae Center, Block 13-C, Gulshan-e-Iqbal, Karachi, Pakistan
• Email: info@digimaticstudio.com
• Telephone: +92 370 7592997

Information you give us. When you use the contact form we collect your name and email address, and anything else you choose to provide: company, phone number, the service or product you are interested in, a budget range and your project details. If you email or call us, we receive the information in that communication.

Technical information. Our servers and hosting provider receive technical data with each request, such as your IP address, browser type, device information, the page requested and the time. This is used to deliver the site and keep it secure. When you submit the contact form, your IP address is also used briefly to limit repeated submissions; our form handler does not store it.

Cookies and similar technologies. Strictly necessary storage is always used. Functional, analytics and marketing cookies are used only if you opt in; see the next sections and our Cookie Policy.

We do not ask for, and ask you not to send us, sensitive information such as health, biometric or financial account details.

Where the EU GDPR or UK GDPR applies, we rely on these legal bases:

• Responding to your enquiry and preparing a proposal: steps taken at your request before entering into a contract (Article 6(1)(b)), and our legitimate interest in responding to business enquiries (Article 6(1)(f)).
• Running, securing and protecting the website, including preventing spam and abuse of the contact form: our legitimate interest in operating a secure website (Article 6(1)(f)).
• Functional, analytics and marketing cookies: your consent (Article 6(1)(a)), which you can withdraw at any time. Consent is also what the UK Privacy and Electronic Communications Regulations (PECR) and the EU ePrivacy rules require before non-essential cookies are set.
• Keeping records we must keep and responding to lawful requests: compliance with legal obligations (Article 6(1)(c)).

Where we rely on legitimate interests, we have balanced them against your rights and expectations, and you can object at any time. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

We group cookies into four categories:

• Strictly necessary: always on, for example to remember your cookie choice.
• Functional: remember choices such as your news filter. Off until you opt in.
• Analytics & performance: not currently in use. Off until you opt in.
• Marketing & tracking: not currently in use. Off until you opt in.

No optional tool loads before you choose. Your choice lasts 12 months, after which we ask again, and we ask again whenever we add a new tool. You can change or withdraw consent at any time in Your Privacy Choices; when you withdraw, collection stops immediately and the related first-party cookies are deleted. A Global Privacy Control signal from your browser is treated as a refusal of analytics and marketing cookies.

We do not sell personal information for money. We share it only as follows:

• Service providers (processors) that act on our instructions: our website hosting provider, and our email delivery provider together with the providers that host our inboxes. One of the inboxes that receives enquiries is hosted by Google (Gmail).
• Authorities and advisers where required by law, to protect our rights or the safety of others, or as part of a business reorganisation or sale, subject to confidentiality.

Digimatic is based in Pakistan, and some providers we use operate in other countries, including the United States. Your information may therefore be processed outside the country where you live, where data protection laws may differ.

Where the EU or UK GDPR applies to a transfer, we rely on a safeguard recognised by that law: an adequacy decision (for example the EU-U.S. Data Privacy Framework and its UK extension, for US companies certified under it), or the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Agreement or Addendum offered by our providers. You can ask us for details of these safeguards.

• Enquiries that do not lead to a project are kept for as long as needed to respond and follow up, then deleted or anonymised.
• If an enquiry leads to a project, related information becomes part of our client records and is kept for the relationship and afterwards as long as needed for legal, accounting or contractual obligations, or to establish or defend legal claims.
• Your cookie choice is kept for 12 months. Cookie lifetimes are listed in the Cookie Policy.
• Technical logs are kept by our hosting provider according to its retention settings.

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), security headers, server-side validation and abuse protection on our contact form, and limiting access to enquiries to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Under the UK GDPR, the Data Protection Act 2018 and the EU GDPR you can ask to access your personal information, correct it, delete it, restrict or object to its use (including objecting to direct marketing at any time), and receive a portable copy of information you provided. Where we rely on consent, you can withdraw it at any time without affecting processing that has already taken place.

You can complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EEA, the authority in the country where you live or work, or where you believe an infringement occurred. We would appreciate the chance to address your concern first.

Depending on the state where you live and whether that state’s privacy law (for example in California, Colorado, Connecticut, Virginia or Texas) applies to us, you may have the right to know what personal information we collect and how we use and disclose it, to access, correct or delete it, to obtain a portable copy, and to opt out of the sale of personal information, its sharing for cross-context behavioural advertising (targeted advertising), and certain profiling.

We do not sell personal information or share it for targeted advertising. We honour Global Privacy Control signals as an opt-out of optional cookies.

We will not discriminate against you for exercising your rights. You may use an authorised agent where the law allows. If we decline your request, you can appeal by replying to our decision; if your appeal is denied, you may contact your state Attorney General. This website is not directed at children under 13, and we do not knowingly collect their personal information (Children’s Online Privacy Protection Act).

We handle personal information in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act, 2016, which protects against unauthorised access to and misuse of personal data. You can ask us to access, correct or delete the information you have provided. If personal data protection legislation comes into force in Pakistan, we will update this policy and our practices to meet it.

Email info@digimaticstudio.com with the subject “Privacy request”, or call +92 370 7592997. We may need to verify your identity before acting. We respond within the time the applicable law requires (for example one month under the UK and EU GDPR, and 45 days under most US state laws), and we will tell you if we need an extension the law allows. Making a request is free unless it is manifestly unfounded or excessive.

This website is intended for businesses and adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 16 (or under 13 in the United States). If you believe a child has sent us personal information, contact us and we will delete it.

We will update this policy when our website or practices change. The date at the top shows when it was last updated, and significant changes will be made clear on this page.

For privacy questions or requests, email info@digimaticstudio.com, call +92 370 7592997, or write to Digimatic Studio (Private) Limited, Suite 404, Shae Center, Block 13-C, Gulshan-e-Iqbal, Karachi, Pakistan. You can also use our contact page.