Privacy Policy

We collect only the information you give us through the contact form and what your browser sends to our servers automatically (like IP address and page paths). We don’t run advertising trackers, we don’t sell your data, and we don’t share your contact details with anyone unless we’re legally required to.

If you never fill out the contact form or email us, we have no way to identify you personally.

Information you give us. When you submit the contact form or write to us directly, we receive your name, email address, and any of the optional details you choose to include (phone, company, service interest, and the message itself). If we go on to work together, we’ll also hold the standard project materials you send us — brand assets, credentials for platforms you own, and the like.

Information your browser sends. Our web server logs standard access information for every request: IP address, browser and device type, referring URL, and timestamp. These logs help us keep the site secure and understand broad traffic patterns.

Cookies. The public site does not set marketing or advertising cookies. A small functional cookie may be set during a session to remember your theme preference or, if you log into the admin area, to keep you signed in. That’s it.

We use the information we collect to:

• Respond to your inquiry and, if it becomes a project, deliver the work you hired us for.
• Send you follow-up correspondence about the project you started with us.
• Operate, maintain, and secure the website and our infrastructure.
• Comply with legal obligations if we’re asked to.

We do not use your information for behavioural advertising, and we do not train third-party AI models on your data.

We keep your information inside Multidex except in a few narrow cases:

• Infrastructure providers that host our servers, database, and email. They process data on our behalf under contracts that require them to keep it confidential.
• Communication channels you choose to use — for example, if you contact us via WhatsApp, the message is subject to WhatsApp’s (Meta) terms in addition to ours.
• Professional advisors (accountants, lawyers) when required to run the business.
• Legal disclosure where compelled by a valid court order, subpoena, or statute.

We do not sell your personal information, and we do not share it with advertising networks.

Contact-form submissions and project records are stored in a PostgreSQL database on servers we control. Access is limited to the people at Multidex who need it to do the work.

We keep contact and project records for as long as we need them to serve you and to meet business, tax, and legal requirements — typically no longer than seven years after the end of an engagement, unless a longer period is required by law. Server access logs are rotated on a rolling basis, usually within 90 days.

You can ask us to delete your record earlier at any time — see “Your rights” below.

Depending on where you live, you may have the right to:

• Know what personal information we hold about you.
• Correct information that’s inaccurate or out of date.
• Ask us to delete your information.
• Object to or restrict certain uses.
• Receive a copy of the information you gave us in a portable form.
• Withdraw a consent you previously gave.
• Lodge a complaint with the data-protection authority in your jurisdiction.

To exercise any of these, email us at mail@kabirhafeez.co. We’ll respond within a reasonable timeframe — and always within any deadline that applicable law sets.

We take reasonable technical and organisational steps to protect the information you share with us. That includes hashed passwords, encrypted connections (HTTPS end-to-end), scoped access to production systems, and regular backups. No system is perfectly secure, though. If we ever learn of a breach that materially affects your information, we’ll notify you and the relevant authorities as required by law.

Our services are aimed at business owners and operators. We don’t knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe we’ve inadvertently collected information from a child, email us and we’ll delete it.

Our servers are located in North America. If you’re writing to us from outside that region, understand that your information will be transferred to and processed in a country whose data protection laws may differ from your own. We apply the same standards to your data regardless of where it’s stored.

We may update this policy from time to time to reflect changes in our practices, our services, or the law. When we do, we’ll update the “Last updated” date at the top of this page. Material changes will be highlighted at that same location or communicated directly if we hold your email.

Questions, requests, or concerns about this policy or your personal information — email: