Privacy Policy

Epnexa is a software services company based in Lahore, Pakistan.

For website and enquiry data, Epnexa generally acts as the data controller. When we process information on behalf of a client under a services agreement, that agreement governs our role.

General enquiries: hello@epnexa.com
Privacy requests: privacy@epnexa.com

Depending on how you interact with us, we may collect:

• Name and work email address
• Phone number, if you provide it
• Company name, role, and area of interest
• Project details and other information you include in the contact form or later messages
• Information you send by email, phone, or LinkedIn
• Basic technical data from hosting and security logs (such as IP address, browser type, requested URLs, and timestamps)

Please do not submit sensitive personal information through the website form unless it is necessary and we have agreed to receive it.

We use personal information to:

• Review and respond to project enquiries
• Understand requirements and discuss next steps or proposals
• Deliver services and manage client relationships when engaged
• Keep business records and professional communications
• Protect the security and integrity of our website and systems
• Meet legal, contractual, accounting, or regulatory obligations

We do not sell personal information.

We do not add contact-form submissions to unrelated marketing lists.

Where UK GDPR, EU GDPR, or similar laws apply, we typically rely on:

• Steps prior to a contract — when you ask us to discuss a project or proposal
• Contract — when needed to deliver agreed services
• Legitimate interests — responding to business enquiries, maintaining professional relationships, and securing our systems
• Legal obligation — where retention or disclosure is required
• Consent — only where we specifically ask for it

We share personal information only as needed to run the website, communicate with you, deliver services, or meet legal requirements.

Current and typical recipients include:

• Hostinger — website and application hosting
• Resend — delivery of website enquiry emails when configured
• Professional advisers or contractors bound by confidentiality, where needed
• Authorities when disclosure is legally required

If you contact us via LinkedIn or another platform, that platform processes data under its own terms.

We do not currently use Google Analytics, advertising pixels, third-party behavioural analytics, or third-party CAPTCHA on this website.

Epnexa is based in Pakistan. Hosting and email providers may process data in other countries. Where transfer rules apply, we rely on the contractual or organisational safeguards available for those services. Contact privacy@epnexa.com for details about a specific transfer.

We keep personal information only as long as reasonably needed:

• Project enquiries: generally up to 12 months after the last meaningful contact
• Client and contract records: for the relationship and afterward as required for legal, accounting, or dispute purposes
• Security and server logs: shorter operational periods, unless needed for an investigation

Information may be deleted or anonymised when no longer required.

We use reasonable administrative and technical measures to protect personal information. No internet transmission or storage method is completely secure.

We do not currently use advertising cookies or behavioural analytics. Strictly necessary technologies may be used for security and basic site functionality. If we add non-essential cookies or analytics later, we will update this policy and provide notice or choice where required.

Depending on your location, you may be able to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where applicable, and to lodge a complaint with a data-protection authority.

Email privacy@epnexa.com to make a request. We may need to verify your identity first.

We do not use personal information for solely automated decisions that produce legal or similarly significant effects.

This website and our services are for businesses and professionals. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact privacy@epnexa.com.

We may update this policy when our practices, providers, or legal requirements change. The revised version will appear on this page with a new “Last updated” date.

Epnexa
Lahore, Pakistan
privacy@epnexa.com

For project enquiries: hello@epnexa.com or the contact form.