Privacy policy
Last updated: 8 November 2026. This policy explains what personal data AbdulTSD Solutions collects, why, where it goes and how to exercise your rights.
1. Who is responsible
AbdulTSD Solutions is the trading name used by Abdul Rehman, an independent business based in Lahore, Pakistan. For the purposes of the EU and UK GDPR, AbdulTSD Solutions is the data controller for the personal data described here. Contact: contact@abdultsd.com.
2. What we collect
- Enquiry data: name, email address, phone or WhatsApp number, business name, website URL, budget range and the message you send.
- Project data: the information and files you share to deliver the work, including hosting, CMS or analytics access where you provide it.
- Billing data: invoice details, company name, tax identifiers and payment status. Card details are handled by the payment provider, not stored on this site.
- Technical data: server logs (IP address, browser, requested URL, timestamp) and, only with your consent, Google Analytics and Meta Pixel data.
3. Why we use it and the lawful basis
| Purpose | Lawful basis |
|---|---|
| Reply to an enquiry and prepare a quote | Steps taken at your request before a contract |
| Deliver a project, invoice it and keep business records | Performance of a contract; legal obligation |
| Protect the site, prevent abuse and fix errors | Legitimate interests (security and reliability) |
| Google Analytics and Meta Pixel | Consent, which you can withdraw at any time |
| Occasional service updates to past clients | Legitimate interests, with an opt-out in every message |
4. Who receives it
Data is shared only where needed to run the site or deliver the work:
- Hosting and email providers that store the site and mailbox.
- Google (Analytics) and Meta (Pixel), only after consent.
- Cal.com for call booking, if you choose to book.
- Banks, Wise or Payoneer for invoicing and payment.
- Professional advisers or authorities where required by law.
We do not sell personal data and do not use client data to train public AI models.
5. International transfers
The business is based in Pakistan. Where personal data from the EU or UK is processed in Pakistan, the transfer relies on the EU Standard Contractual Clauses (and the UK Addendum where relevant), supported by a data processing agreement. A copy of the DPA is available on request before you share any data.
6. How long we keep it
- Enquiries that do not become projects: up to 24 months.
- Client and invoice records: up to 7 years where tax or contract law requires it.
- Analytics: according to the Google Analytics retention setting (currently 14 months).
- Backups: rolling 30 days.
7. Your rights
Subject to applicable law, you can ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw analytics consent at any time from the cookie policy.
Email contact@abdultsd.com with the request. We reply within 30 days. If you are in the EU or UK, you also have the right to complain to your national data protection authority.
8. Cookies and tracking
The site uses one essential session cookie. Analytics and marketing scripts are blocked until you accept them. The exact cookies and durations are listed in the cookie policy.
9. Security
Access is limited to the accounts needed for the work, credentials are transferred through a password manager or one-time link where possible, and access is removed at handover unless a care plan is agreed. The site's own incident history and current controls are described in the security note.
10. Children
The services are intended for businesses. The site is not directed at children under 16 and we do not knowingly collect their data.
11. Changes
If this policy changes materially, the date at the top changes and, where appropriate, clients are notified by email.