Last updated: October 30, 2026

This policy explains what personal data Auto Act collects when you visit auto-act.com or get in touch with us, why we collect it, and what you can do about it. We have tried to keep it short and plain. If anything is unclear, email us at info@auto-act.com.

Who we are

Auto Act is a digital agency. We help small and growing businesses with AI automation, software, web design and development, marketing, creative design and branding. We have offices in Lahore, Pakistan and Dubai, UAE, and we work with clients around the world.

In this policy, “Auto Act”, “we”, “us” and “our” mean [placeholder: legal entity name], [placeholder: registered address]. We are the controller of the personal data described here.

This policy covers our website and the enquiries we receive through it. When you become a client, your proposal or contract may include extra terms about data we handle for your project, such as data in your own systems.

What we collect

Information you give us

Through our contact form. When you fill in the form on our contact page, we receive:

• your full name
• your email address
• your website link, if you choose to add it
• your message about how we can help

By email, phone or WhatsApp. If you contact us at info@auto-act.com or on +92 300 4336688, we receive whatever you choose to share. That usually means your name, contact details, company name and project details.

As a client. If we work together, we also hold the business contact details, billing details and project information needed to deliver the work.

Information collected automatically

Server logs. Like most websites, our hosting provider records basic technical data when you visit. This includes your IP address, browser type, device type, the pages you request and the date and time of each request. We use it to keep the site running, secure and fast.

Form security data. When you submit the contact form, our website may record technical details with your message, such as your IP address and browser, to help block spam and abuse.

Cookies. Our public pages do not currently set cookies of their own for visitors, and we do not currently use analytics, advertising or tracking tools such as Google Analytics or the Meta Pixel. Some third-party content on our site may set cookies. See the cookies section below.

We do not ask for sensitive information, such as health data or government ID numbers, through our website. Please do not send it to us.

How we use your data

We use your personal data to:

• reply to your enquiry and talk with you about a possible project
• prepare quotes and proposals
• deliver, manage and support projects for our clients
• send invoices and keep business records
• keep our website secure and working properly
• meet our legal, tax and accounting duties

We do not sell your personal data. We do not use it for automated decisions that have legal or similar effects on you.

We will only send you marketing emails if you have agreed to receive them, or if you are an existing client and the law allows it. You can opt out at any time.

Our legal bases (EU and UK visitors)

If you are in the European Economic Area or the United Kingdom, data protection law requires us to have a legal basis for using your data. We rely on:

• Steps before a contract, and the contract itself: when you ask us for a quote or become a client.
• Legitimate interests: to answer general enquiries, run our business and keep our website secure. We balance these interests against your rights.
• Legal obligation: when we must keep records for tax, accounting or legal reasons.
• Consent: for optional marketing, or for any non-essential cookies we may add in future. You can withdraw consent at any time.

Who we share it with

We share personal data only with service providers that help us run our website and our business, and only as much as they need:

• Hostinger hosts our website and processes the data sent through it, including server logs and form submissions.
• Hostinger Mail handles our email, including messages sent through the contact form.
• Google delivers the fonts used on our website (Google Fonts) and the map on our contact page (Google Maps). When your browser loads these, Google receives your IP address and basic browser data.
• WhatsApp (Meta) handles messages if you choose to contact us on WhatsApp.
• [placeholder: other tools, e.g. project management, accounting or file sharing tools used with clients]

We may also share data with professional advisers such as lawyers and accountants, with authorities when the law requires it, or with a buyer or successor if our business is reorganised or sold.

Links to other sites

Our website links to other sites and apps, including Instagram, Facebook, WhatsApp and Google Maps. When you follow those links, the other service’s own privacy policy applies. We are not responsible for how they handle your data.

International transfers

We work from Pakistan and the UAE, and our service providers may store or process data in other countries, including the United States and [placeholder: Hostinger data centre location]. This means your data may be handled outside the country where you live.

When we transfer personal data out of the EEA, the UK or the UAE, we take steps to protect it as the law requires. This may include standard contractual clauses or relying on a provider’s own approved transfer safeguards.

How long we keep it

We keep personal data only as long as we need it:

• Enquiries that do not become projects: up to [placeholder: e.g. 24 months] after our last contact, then deleted.
• Client and project records: for the length of the project and then for [placeholder: e.g. 6 years] to meet tax, accounting and legal duties.
• Server logs: for the period set by our hosting provider, usually a short time [placeholder: confirm with Hostinger].

Security

We use reasonable technical and organisational measures to protect your data. Our website uses encrypted HTTPS connections, and we limit access to enquiries and client data to the people who need it. No website or email system is completely secure, so we cannot guarantee absolute security. If a breach affects your data, we will tell you and the relevant authorities where the law requires it.

Your rights

Depending on where you live, you may have the right to:

• ask what personal data we hold about you and get a copy
• correct data that is wrong or incomplete
• delete your data, unless we must keep it for a legal reason
• restrict or object to how we use your data
• receive your data in a portable format
• withdraw consent you have given, without affecting what we did before
• opt out of marketing emails at any time

To use any of these rights, email info@auto-act.com. We may need to confirm your identity first. We aim to reply within one month, or sooner where the law requires.

EU and UK

You also have the right to complain to your local data protection authority. In the UK, that is the Information Commissioner’s Office (ICO). We would appreciate the chance to sort out your concern first.

California and other US states

If you live in California or another US state with a privacy law, you have the right to know what personal data we collect, to ask us to delete or correct it, and to not be treated differently for using your rights. In the last 12 months we have collected identifiers (such as name, email and IP address), commercial information (such as project and billing details) and internet activity data (such as server logs), for the purposes described above. We do not sell personal information, and we do not share it for cross-context behavioural advertising. You can make a request yourself or through an authorised agent.

United Arab Emirates

If the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to you, you have rights that include access, correction, restriction and objection. You can contact us to use them, and you may also contact the UAE Data Office.

Cookies

Cookies are small files that a website stores in your browser. On the date of this policy:

• Our website does not set its own cookies for normal visitors.
• We do not use analytics, advertising or tracking cookies.
• The Google Maps map on our contact page is provided by Google, which may set its own cookies or read device data when the map loads. See Google’s Privacy Policy.

You can block or delete cookies in your browser settings. If we add analytics or advertising tools in future, we will update this policy and ask for your consent first where the law requires it.

Children

Our website and services are meant for businesses. They are not aimed at children, and we do not knowingly collect personal data from anyone under 16. If you think a child has sent us personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy when our website, tools or the law change. We will post the new version on this page and change the “Last updated” date. If a change is significant, we will make that clear on the site or tell you directly.

Contact us

For any question about this policy or your personal data, contact us:

• Email: info@auto-act.com
• Phone and WhatsApp: +92 300 4336688
• Offices: Lahore, Pakistan and Dubai, UAE
• Legal entity: [placeholder: legal entity name and registered address]