Legal
Privacy
Policy.
How we collect, use, and protect your information — written in plain language, not legal jargon.
This Privacy Policy applies to everyone who visits budgetic.pk or engages our services — website development, eCommerce, graphic design, social media management, and accounting. We’ve written this in plain language so you actually know what’s going on with your data. Questions? We’re happy to talk.
Who We Are
Budgetic is a full-service digital agency based in Islamabad, Pakistan. We work with clients globally — including in the UK, UAE, and USA — to deliver WordPress development, eCommerce, design, social media management, and professional accounting services.
What Information We Collect & Why
We only collect what we actually need. Here’s what that looks like:
When you contact or enquire:
- Your name, email, phone number, and business details — so we can respond to you properly
- Details about your project or requirements — so we can put together the right proposal
When you become a client:
- Project files, content, and assets you share with us — needed to complete your project
- Financial records, invoices, and accounting data (accounting clients only) — needed to provide the service
- Social media login credentials (social media management clients only) — kept strictly confidential and deleted when the engagement ends
Automatically, when you visit our website:
- IP address, browser, and device type — standard web analytics data
- Pages visited and time spent — helps us understand what’s useful on our site
- Referral source — so we know how people find us
This automatic data is collected through Google Analytics and is anonymised where possible. We don’t sell it or use it to target you with ads.
How We Use Your Information
- To deliver your project or service — the main reason we have your information at all
- To communicate with you — project updates, questions, invoices, and support
- To improve our website — understanding what works and what doesn’t
- To occasionally let you know about relevant services — only if you’ve worked with us or given us permission. You can opt out at any time by replying to any email or contacting us directly.
- To comply with legal obligations — tax records, accounting regulations, and applicable law
We will never sell your data, share it for third-party marketing, or use it in any way you wouldn’t reasonably expect.
Financial Data — Extra Care
If you engage our accounting or bookkeeping services, you’ll be sharing sensitive financial information with us. We take this seriously.
- Your financial data is only ever accessed by the team member working directly on your account — no one else
- We use encrypted, cloud-based software (QuickBooks, Xero, or Odoo) for all financial data — each with their own strong security standards
- We will never share your financial information with any third party without your explicit, written consent — except where required by law
- When our engagement ends, all your financial records are returned to you and our copies are securely deleted within 30 days
Who We Share Your Data With
We don’t sell or trade your information. The only situations where your data is shared with anyone outside Budgetic:
- Tools we use to operate — Google Analytics, our email provider, and accounting software. These are standard professional tools, each with their own privacy policies. They process your data only as required to perform their function.
- Legal requirement — If a court, regulator, or law enforcement authority requires us to disclose information, we will — and we’ll notify you where legally permitted to do so.
- If Budgetic is sold or acquired — In the unlikely event of a business transfer, your data would move to the new entity under the same privacy protections. You would be notified.
Cookies
Our website uses cookies — small files that help it work properly and help us understand how people use it. Here’s what we use:
- Essential cookies: Keep the site functioning — things like form submissions and sessions. These can’t be turned off.
- Analytics cookies: Google Analytics helps us understand traffic patterns. These are anonymised.
- Marketing cookies: Meta Pixel and Google Ads cookies help us understand if our advertising is reaching the right people. These are optional.
You can manage cookie preferences through your browser settings at any time. If you’re visiting from the UK or EU, you’ll see a cookie consent notice on your first visit where you can choose what to accept.
Your Rights — You’re in Control
You have real rights over your personal data. These apply regardless of where you’re based:
- See what we hold: Ask for a copy of any personal data we have about you
- Fix it: Ask us to correct anything that’s wrong or out of date
- Delete it: Ask us to remove your data (we’ll do this unless we’re legally required to keep it)
- Limit how we use it: Ask us to restrict processing in certain circumstances
- Take it with you: Request your data in a portable format
- Opt out of marketing: Stop receiving any marketing communications at any time — just ask
- Withdraw consent: Where we’ve asked for your consent, you can take it back at any time
To exercise any of these rights, email us at contact@budgetic.pk. We’ll respond within 14 days (often much faster).
If you’re in the UK or EU and feel we haven’t handled your data correctly, you have the right to raise a concern with your local data protection authority (in the UK, that’s the ICO at ico.org.uk).
How We Keep Your Data Safe
We take reasonable and appropriate steps to protect your information:
- SSL encryption across all our websites and client communication channels
- Encrypted cloud storage for any sensitive documents
- Access limited strictly to the team members who need it to do their job
- Regular software updates and security reviews
- Secure credential management for client social media accounts
No system is 100% secure — but we treat your data the same way we’d want our own treated.
How Long We Keep Your Data
We keep your data for as long as it’s needed and not a day longer:
- Enquiries that didn’t become projects: 12 months, then deleted
- Active client records: Kept for the duration of our relationship plus 2 years
- Accounting records: Minimum 6 years (UK HMRC requirement) or 5 years (Pakistan FBR), whichever applies to your engagement
- Social media credentials: Deleted within 7 days of engagement end
- Website analytics: Retained in anonymised form only
International Clients
We work with clients in the UK, UAE, USA, and beyond. When we process data from UK or EU clients, we do so in compliance with GDPR and the UK GDPR. Our practices meet or exceed the standards required in these jurisdictions.
If data is transferred internationally (for example, from the UK to our Pakistan-based team), we ensure it’s handled with the same level of protection as required in your country.
Children’s Privacy
Our services are for businesses and adults only. We don’t knowingly collect information from anyone under 16. If you believe someone under this age has submitted data to us, please contact us and we’ll delete it immediately.
Updates to This Policy
We’ll update this policy when necessary — for example, if we add a new service or a law changes. The updated version will always be posted here with a new effective date. If you’re an active client and the changes are significant, we’ll let you know directly by email.
Questions or Concerns?
Privacy matters, and so does your peace of mind. If you have any questions about how we handle your data — or if you’d like to exercise any of your rights — please get in touch:
We aim to respond to all privacy enquiries within 2 business days.