Pakistan-based. EU-ready paperwork.
I am not going to pretend to have a London office. I am in Lahore, I say so, and I remove the friction that usually makes a European buyer hesitate: currency, contract, data protection, time zones and a named person who answers.
1. The time overlap is real
Pakistan does not observe daylight saving. The window below is when I hold calls and answer messages in your working day.
| Your time | Pakistan (PKT) |
|---|---|
| 07:00–14:00 London (GMT, winter) | 12:00–19:00 |
| 08:00–15:00 London (BST, summer) | 12:00–19:00 |
| 08:00–15:00 Berlin / Paris / Amsterdam (CET, winter) | 12:00–19:00 |
| 09:00–16:00 Berlin / Paris / Amsterdam (CEST, summer) | 12:00–19:00 |
Outside that window, email and WhatsApp still arrive; I answer them the next working morning.
2. Money: EUR invoices, no surprises
- Currency: EUR or GBP. The quote and the invoice use the same currency.
- Payment: bank transfer or Wise. Payoneer is available. Card processing through a merchant of record can be arranged on request.
- Structure: 50% to start, 50% on delivery, unless the written scope says otherwise.
- Invoice entity: AbdulTSD Solutions, Lahore, Pakistan. The invoice shows the service, the period and the tax treatment.
- Tax: EU B2B services are generally subject to the reverse-charge mechanism. The invoice states the applicable treatment; confirm the wording with your accountant.
3. Contract, NDA and DPA
Every project starts with a written scope: deliverables, exclusions, price, timeline, payment milestones and change control. The scope is the contract attachment.
- NDA: available on request, before you share access or credentials.
- DPA: a data processing agreement is available where the work involves EU personal data.
- Transfers: where personal data moves from the EU/UK to Pakistan, the transfer terms are based on the EU Standard Contractual Clauses (and the UK Addendum where relevant).
- Governing law: Pakistan law by default. For EU/UK contracts I will agree to a neutral arbitration seat (for example London) if your procurement team requires it. That is a change of forum, not a change of where the work happens.
- Liability: capped at the fees paid for the engagement, excluding indirect losses.
4. Data protection in practice
For a typical website or rescue job I may process: contact details, business information, hosting and CMS access, analytics exports and any files you send. I do not sell data, and I do not use client data to train public models.
- Access is limited to the accounts needed for the job.
- Credentials are transferred through a password manager or a one-time link, not plain email where avoidable.
- Access is removed at handover unless you ask me to keep a care plan.
- Processors are listed in the privacy policy.
- Analytics on this site is consent-gated; see the cookie policy.
5. Security and continuity
The studio recovered its own site after a webshell compromise in October 2026. The incident note is public because a rescue provider should be able to explain its own recovery.
6. What you can ask for before paying
- A sample scope and a sample invoice.
- The NDA and DPA templates.
- A reference call with a past client, where that client has agreed.
- The security note and the accessibility statement.
- A paid, fixed-price audit first if you want to test the working relationship before a build.
7. What I will not do
- Claim an EU office, team or phone number that does not exist.
- Publish your name, logo or results without written permission.
- Promise a price before the scope is understood.
- Use your data for anything outside the engagement.
Questions a European buyer usually asks are welcome before the call. Email contact@abdultsd.com or message +92 348 624 2544.