Privacy Policy

What we collect

Only what you type into one of the four forms on this site. There is no account to create, nothing is collected in the background, and browsing the site without submitting a form tells us nothing about you.

• Enquiry form — your name, email address, company name if you give one, and your message.
• Call request — your name, email address, phone number, and the day and time slot you prefer.
• Chat — the answers you type into it: your name, email address, the service you are interested in, your timing, and any detail you add.
• Newsletter — your email address, and nothing else.

Every one of those fields is optional in the sense that nothing makes you fill the form in. We ask for no more than we need to write back to you, which is why there is no budget field anywhere on this site.

Why we collect it

To answer you. An enquiry becomes an email in our inbox and we reply to it, usually within one business day. A copy also goes to our own office system, where an AI assistant drafts a reply; a person reads, edits and approves every reply before it is sent. The only email sent to you automatically is one short confirmation that your message or call request arrived. A newsletter address is used to send occasional notes about building websites, and nothing else.

We do not build profiles or use what you send to target advertising.

Before a form reaches us it is checked for spam, automatically: that the email address's domain can receive mail (a lookup of the domain, never of you), that the message is not a known sales pitch, and that the same form has not been sent many times in a row. A submission that fails is discarded, not stored.

Our legal basis

If you are in the United Kingdom or the European Union, data protection law asks us to say which legal ground each use rests on:

• Enquiries, call requests and the chat — you have asked us to respond about work you may want done, so we use what you send to take steps at your request before entering into a contract, and because it is in our legitimate interests to answer the people who write to us.
• The newsletter — your consent, which you give by subscribing and can withdraw at any time.
• Spam checks, and the cookieless page and button counts described below — our legitimate interests in keeping the forms usable and knowing which pages are read. Neither identifies you.

Who else sees it

These companies handle your information on our behalf, because running a website, sending email and keeping spam out requires it:

• Resend delivers the email that carries your form submission to us, and the one confirmation we send back to you. Your details pass through their service on the way.
• Vercel hosts this website. Like any web host, their servers keep technical request logs, which can include your IP address and browser.
• Vercel Web Analytics counts visits to each page. It sets no cookie and keeps no identifier that outlasts your visit, so it can tell us a page was read and never which person read it.
• Upstash stores the view counts for our blog articles: how many times each article was opened, on which day, and the name of the website that linked to it — no name, no email address and no IP address with those counts. It also holds a copy of each enquiry and call request, exactly as you typed it into the form, for at most 30 days until our office system collects it; it is then deleted from Upstash.
• Groq runs the AI model that helps us draft replies. When a reply to your enquiry is drafted, the text of your enquiry is sent to Groq. Groq states that it does not keep request data by default and does not use it to train its models.
• Vercel Speed Insights measures how fast each page loads in your browser — timings such as how long the largest image took to appear. It sets no cookie and records no personal information.
• Google reCAPTCHA checks that a form is being sent by a person rather than a script. It loads only once you start filling in a form or open the chat, never while you are just reading, and Google then receives information about your device and how the page was used, under Google's own Privacy Policy and Terms of Service.

Beyond those services, nobody. We do not sell your information, rent it, trade it, or pass it to anyone else — and we do not "sell" or "share" personal information in the sense those words carry in US state privacy laws such as California's. No advertising or profiling service runs on this site, and nothing you type into a form reaches any of them.

Where your information goes

We are based in Pakistan, and that is where your enquiry is read and answered. The companies named above — Resend, Vercel, Upstash, Groq and Google — are based in the United States and may process information there and in other countries.

So if you write to us from the United Kingdom or the European Union, what you send leaves your country. Those providers each publish the safeguards they rely on for such transfers, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, in their own privacy documentation. If you would rather your details did not travel that way, email us directly instead of using a form — and tell us, and we will keep the conversation to email.

Cookies and tracking

This site sets no cookies of its own. There is no advertising pixel, no cross-site tracking and no third-party embed watching you read the page. That is why you have not been asked to accept anything — reading the site stores nothing on your device.

The one exception is Google reCAPTCHA, which protects the forms and the chat from spam. It is loaded only when you start on a form or open the chat, and at that point Google may set a cookie of its own, used to tell people from automated scripts. If you never use a form, nothing is loaded from Google.

We do use Google Search Console, which reports how the site performs in search results. It shows us totals — how many people saw a page in search and how many clicked — never who they were.

We also use Vercel Web Analytics, which counts page views, which question was reached in the chat, that an enquiry form was sent, and presses on the site's main buttons — for example "Start a project", or the email and WhatsApp links. It is cookieless: nothing is stored on your device and no identifier follows you between visits or between sites. It records which button, form or question it was and the page it was on, never who pressed it and never what you typed — your answers go to us by email and to our own office system, as described above. Separately, the site keeps a short note in your browser's session storage of the page you first landed on, the website that linked you here and any campaign tag in the link (for example from one of our emails). It is deleted when you close the tab, and it reaches us only if you send a form, as part of that enquiry.

Blog articles are also counted by the site itself: each time an article is opened we add one to that article's total, note the name of the website you came from (for example "google.com" — never the page or what you searched for), and show ourselves how many people have it open at that moment. To tell two open tabs apart the page makes up a random number, which lives only in that open page: it is not saved on your device, is forgotten when you close or reload the page, and is dropped from our records within a few minutes. Your IP address is not stored with any of it.

Two things are remembered in your own browser and never sent to us: whether you chose the light or dark theme, and whether you paused the site's animations. Both are settings, not identifiers.

How long we keep it

Your enquiry stays in our email records and our office system for 24 months after the last message in the conversation, and is then deleted. We keep it that long so we can pick a conversation back up months later, not so we can market to you. If the enquiry becomes a project, the correspondence is kept with that project's records for as long as tax and accounting rules require.

A newsletter address is kept until you ask us to remove it. Reply to any email we send you, or write to us, and it is removed.

Your choices

Write to hello@devartistryhub.com and ask us to show you what we hold, correct it, or delete it. We will do it — there is no form to fill in and no reason we would refuse. Deleting what you sent means deleting the email thread, so we will lose the conversation too; that is your call to make.

You can also ask us to stop using your information, object to how we use it, ask for a copy in a form you can take elsewhere, or withdraw a consent you gave — unsubscribing from the newsletter, for one. Same address, same answer.

If you are in the United Kingdom or the European Union and think we have handled your information wrongly, you also have the right to complain to a data protection authority: the Information Commissioner's Office (ICO) in the UK, or the authority in the EU country where you live. We would rather hear from you first and put it right.

Children

This is a website for businesses commissioning work. It is not aimed at children, and we do not knowingly collect anything from anyone under 16.

Changes to this policy

If we add anything that changes what is described here — a cookie of any kind, a mailing list provider, an advertising or profiling tool — we will update this page and change the date at the top of it.

Contact us

Any question about this policy, or about anything you have sent us, goes to hello@devartistryhub.com.