Privacy Policy

Nome Digital builds websites for businesses. To do that, and to answer the people who contact us, we collect a small amount of personal data. This policy explains what we collect, why, how long we keep it, who else handles it, and what you can ask us to do with it.

It applies to this website, to the enquiries and quotations we send, and to the projects we deliver. Where we build a website for you, the data on that website is yours to govern, and we act on your instructions as the site owner rather than as its controller.

• Contact details you give us: your name, your business name, your email address, your WhatsApp number and your phone number.
• Project information: the brief, the messages, the files, the brand assets, the copy, the images and the product data you send us, and the notes we keep while working with you.
• Transaction data: the amount, the milestone, the invoice reference and the payment status. We never see or store full card numbers, because card details are entered and handled on Safepay's own secure pages.
• Technical data collected automatically when you use this site: your IP address, browser and device type, the pages you visit and the page you arrived from, through server logs and, where you have accepted it, analytics.
• Your communication preferences: how you asked to be contacted, and whether you have asked to receive project updates by email or on WhatsApp.

• To reply to enquiries, prepare quotations and answer questions about our packages and process.
• To design, build, test, launch and support your project.
• To issue invoices and keep the accounting and tax records we are required to keep.
• To hold a written record of what was agreed, so that both sides know what was promised.
• To understand how this website is used, so we can improve the pages that matter and remove the ones that do not.
• To send you messages about your project. Marketing messages are sent only where you have asked for them, and every one of them carries a way to stop.

We do not sell, rent or trade your personal data, and we do not use your project material to train other people's systems or to train ours for unrelated purposes.

You can ask us to delete any of it earlier. A small number of records have to be kept for legal and tax reasons, and where that applies we will say so rather than quietly ignoring the request.

• Essential cookies keep the site working: session management, security checks and remembering the state of a form. They cannot be switched off, because the site would not function without them.
• Analytics cookies are set only if you accept them. They tell us which pages are useful and which are ignored. Refusing them changes nothing about what you can do on the site.
• You can clear or block cookies in your browser at any time. Blocking essential cookies can stop parts of the site working, which is the trade-off those cookies exist to avoid.

We use a short list of processors, each with one job. Each of them receives only the data it needs for that job.

• Safepay, for payment processing. Card details go directly to Safepay and are never stored by us.
• Our email provider, to send you your invoices, project updates and our replies.
• WhatsApp, when you choose to talk to us there. Your number and your messages are processed under their terms, not ours.
• The hosting and DNS providers who host a site we have built for you.
• The analytics provider, where you have accepted analytics cookies.

We choose providers that publish their own security and data-protection commitments, and we review that they are holding to them. If we change a provider for something material, we will tell you.

• We share data only with the providers listed above, and only what each provider needs to do its job.
• Some of those providers operate outside Pakistan. Where they do, your data is transferred on the basis of their standard contractual protections.
• We do not sell, rent or trade your personal data to anyone.
• We will disclose data if we are legally required to do so, and we will tell you unless the law prevents us from doing so.

• Access to project files is limited to the people working on your project.
• Accounts use individual credentials, never a shared login, and multi-factor authentication wherever the provider supports it.
• We keep encrypted backups and test that they restore.
• We do not ask for or store passwords for services we can access another way.
• No system is perfect. If a breach affects your data, we will tell you, and we will tell the relevant authority where we are required to.

You can ask us to do any of the following, and we will do it. There is no charge for a reasonable request.

• Tell you what personal data we hold about you, and give you a copy.
• Correct anything that is inaccurate or incomplete.
• Delete your data where we are not required to keep it for legal reasons.
• Stop processing your data where the processing depends on your consent.
• Object to processing we carry out based on our legitimate interests.
• Withdraw consent at any time, without giving a reason.
• Complain to the relevant authority in Pakistan if you believe we have not handled your data properly.

To exercise any of these, email noumanshaban6@gmail.com. We acknowledge every request and respond within thirty days. If a request concerns a live project, tell us which one and we will handle it faster.

This site and our services are intended for businesses. We do not knowingly collect personal data from anyone under eighteen, and if we discover that we have, we delete it.

We update this policy when our processing changes. The last reviewed date at the top of the page tells you when it last changed. A change that materially affects a project already running is communicated to that client directly, not just published here.

Questions about any of this, or a request under section 9, go to noumanshaban6@gmail.com. You can also reach us on WhatsApp at +92 300 4597971. We are based in Karachi, Pakistan, and we answer our own email.