Privacy Policy

1. Who we are

Insxoft Technologies ("Insxoft", "we", "us", or "our") is a software agency providing AI automation, ecommerce, WordPress, custom application, ERP, and cloud services. Our principal place of business is OFFICE NO. 301, 3RD FLOOR, PLOT NO. 12-C, 6TH COMMERCIAL LANE,ZAMZAMA COMMERCIAL AREA PHASE-V, DHA, Karachi, Sindh 75500, Pakistan. We also operate from 128 City Road, London, EC1V 2NX, United Kingdom.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit insxoft.com or contact us about our services.

2. Data we collect

2.1 Information you provide directly

• Contact form submissions: name, email address, company name, service interest, budget range, and message content.
• Email correspondence: any information included in messages you send to hello@insxoft.com.
• Project and contractual information: business details, requirements, and technical specifications shared during an engagement.

2.2 Information collected automatically

• Server logs: IP address, browser type, operating system, referring URL, pages visited, and timestamps.
• Cookies and similar technologies: see Section 8 below.

We do not collect sensitive personal data (e.g., health data, biometrics, political opinions) and ask that you do not submit it to us.

3. How we use your data

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Legal basis for processing (GDPR)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f)) - responding to inquiries and operating our business.
• Performance of a contract (Art. 6(1)(b)) - delivering services you have engaged us for.
• Legal obligation (Art. 6(1)(c)) - where we are required to process data by law.
• Consent (Art. 6(1)(a)) - for optional marketing communications (you may withdraw consent at any time).

5. Sharing & third parties

We share personal data only where necessary:

• Service providers: hosting providers, email infrastructure, and project management tools operating under data processing agreements.
• Legal requirements: if required by law, court order, or regulatory authority.
• Business transfers: in the event of a merger or acquisition, personal data may transfer as a business asset; we will notify affected individuals before data is subject to a different privacy policy.

All third-party service providers are contractually bound to protect your data and may not use it for their own purposes.

6. Retention

• Inquiry data (no engagement): retained for up to 12 months, then deleted.
• Client project data: retained for 7 years after project completion for legal and financial record-keeping requirements, then securely deleted.
• Server logs: retained for up to 90 days, then anonymised or deleted.

You may request earlier deletion - see Your Rights below.

7. Your rights

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): ask us to delete your data, subject to legal retention obligations.
• Restriction: request that we limit how we process your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any right, email hello@insxoft.com with the subject line "Privacy Request". We will respond within 30 days. If you are in the UK or EU and are not satisfied with our response, you have the right to lodge a complaint with your supervisory authority (e.g., the ICO in the UK).

8. Cookies

This website uses cookies to support functionality and analyze traffic:

We use Google Analytics to understand visitor behavior and improve our services. You can disable cookies in your browser settings; this will not affect core site functionality.

9. Security

We use industry-standard measures to protect your personal data, including HTTPS encryption for all data in transit, access controls limiting who within Insxoft can access personal data, and regular review of our data handling practices. No transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take reasonable steps to protect your information.

10. Contact & Data Protection Officer

For privacy questions, requests, or complaints:

We may update this Privacy Policy periodically. Material changes will be noted at the top of this page with an updated date. Continued use of our website after changes constitutes acceptance of the revised policy.