Privacy
policy.

What we collect

When you use the contact form

We store your name, email address, phone number if you give one, the service you selected, your message, and the IP address the submission came from, along with the time it arrived. The IP is recorded for one reason: to rate-limit the form so a script cannot bury us in spam. It is not used to profile you.

When you request a package

Requesting a package creates a record holding your name, email, phone, company name if supplied, the package you chose, its listed price, and anything you typed into the notes field.

There is no online payment and no card field anywhere on this site. We never ask for card numbers, expiry dates or CVCs, so there is nothing of that kind to store, leak or lose. Once the scope is agreed we invoice you directly and you pay through your own bank.

When you just read the site

Nothing personal. There is no analytics script, no advertising pixel, no third-party tracker and no cookie banner, because there is nothing to consent to. The only cookie this site can set is a session cookie for our own staff signing into the admin panel, and it is never issued to visitors.

Data belonging to our clients

While building or maintaining a site we are often given access to hosting accounts, content, customer records and analytics that belong to the client. We act on the client's instructions regarding that data, use it only to deliver the agreed work, and hand back or destroy access at the end of the engagement.

Why we use it

• To answer your enquiry and prepare a quote.
• To deliver, invoice and support work you have commissioned.
• To keep the financial records our accountants and tax obligations require.
• To keep the site standing up - rate limiting, abuse prevention, security logging.

We do not sell personal data, we do not rent mailing lists, and we do not send marketing email to people who only filled in the contact form. If we ever start a newsletter it will be opt-in and separate from this.

Who else sees it

Only the processors we need to run the business, and each one sees only its own slice:

Where a client project needs a new processor - an email service, a CRM, a search provider - that is agreed with the client before anything is connected.

Where it lives

Our servers and database may be located outside Pakistan. By submitting the contact form or a package request you accept that your information is transferred and stored in those locations under the safeguards those providers maintain.

How long we keep it

We prune rather than hoard. Concretely:

How it is protected

Security here is not a paragraph written to reassure you, it is configuration you can verify:

• The whole site is served over HTTPS with HSTS, so browsers refuse to fall back to plain HTTP.
• A Content Security Policy restricts what the page is allowed to load, and framing is blocked outright.
• Admin passwords are hashed with Argon2, never stored in a form that can be reversed.
• Admin accounts use two-factor authentication, and the 2FA secrets are encrypted at rest.
• Sign-in attempts are throttled per account and globally, and every administrative action is logged.
• Admin pages are marked no-index and never cached by browsers or CDNs.

No system is perfect. If you believe you have found a vulnerability, email info@orcanix.com and we will respond.

Your rights

You can ask us to:

• Tell you what personal data of yours we hold.
• Correct anything that is wrong.
• Delete it, where we are not required to keep it for tax or legal reasons.
• Send you a copy in a portable format.
• Stop processing it for a particular purpose.

Email info@orcanix.com with the request. We reply within 30 days, and we do not charge for it. You do not need a lawyer or a specific form of words - a plain email is enough.

Children

This site sells development services to businesses. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has sent us information, tell us and we will remove it.

Changes to this policy

If our practices change we will update this page and move the date at the top. Material changes affecting existing clients will also be sent by email rather than left here to be discovered.