Privacy Policy
We are committed to protecting your personal data and respecting your privacy. This policy explains what we collect, why, and what rights you have — no matter where you are in the world.
Effective date: 1 May 2025 · Applies to: https://solutionsbyte.tech
1. Overview
Solutionsbyte("we", "our", or "us") is a software engineering studio operating at https://solutionsbyte.tech. We act as the data controller for personal information collected through our website and services.
This Privacy Policy applies to all visitors, enquirers, clients, and contractors who interact with our website or engage our services. It is written to comply with:
- EU GDPR — Regulation (EU) 2016/679 (General Data Protection Regulation)
- UK GDPR — UK General Data Protection Regulation and the Data Protection Act 2018
- CCPA / CPRA — California Consumer Privacy Act and California Privacy Rights Act (USA)
- PECA / PDPB — Pakistan Electronic Crimes Act 2016 and the Personal Data Protection Bill
Where applicable law grants you additional rights, those rights prevail. If you have questions, contact us at privacy@solutionsbyte.tech.
2. Data We Collect
2.1 Information you provide directly
When you contact us, request a quote, or engage our services, we collect:
- Full name and job title
- Business and personal email address
- Phone number (if provided)
- Company name and website
- Project details and message content
- Payment and billing information (processed by our payment provider; we do not store card data)
- Any other information you voluntarily include in communications with us
2.2 Information collected automatically
When you visit our website we automatically receive:
- IP address and approximate geolocation
- Browser type, version, and operating system
- Pages visited, referral URL, and time on site
- Device identifiers and screen resolution
- Cookie and session identifiers (see Section 9)
2.3 Information from third parties
We may receive information about you from:
- Social platforms (LinkedIn, Twitter/X) if you interact with our content
- Analytics and advertising partners (aggregated and pseudonymised)
- Publicly available professional directories
2.4 Special category data
We do not intentionally collect sensitive personal data (health, biometric, racial/ethnic origin, political opinions, religious beliefs, etc.). Please do not send us such data unsolicited.
3. How We Use Your Data
We use collected data for the following purposes:
| Purpose | Examples |
|---|---|
| Service delivery | Responding to enquiries, project management, invoicing |
| Contract performance | Onboarding, deliverables, client communication |
| Legal compliance | Tax records, fraud prevention, regulatory obligations |
| Legitimate interests | Website security, product improvement, analytics |
| Marketing (with consent) | Newsletters, case studies, service updates |
| Support & troubleshooting | Resolving technical issues, customer support |
We never sell your personal data to third parties and we do not use it for automated individual decision-making or profiling that produces legal effects.
4. Legal Bases for Processing (GDPR / UK GDPR)
For individuals in the European Economic Area (EEA) or the United Kingdom, every processing activity rests on one of the following lawful bases under Article 6 UK/EU GDPR:
- Contract — processing is necessary to perform or prepare a contract with you (Art. 6(1)(b)).
- Legal obligation — processing is required to comply with applicable law (Art. 6(1)(c)).
- Legitimate interests — we have a legitimate business interest that is not overridden by your rights (Art. 6(1)(f)), e.g. website security and service improvement.
- Consent — you have given clear, freely withdrawable consent for a specific purpose, such as marketing emails (Art. 6(1)(a)).
You may withdraw consent at any time by emailing privacy@solutionsbyte.tech or clicking the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of prior processing.
6. International Data Transfers
Solutionsbyte operates globally. Your data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.
Where we transfer personal data from the EEA or UK to a third country, we ensure an adequate level of protection through:
- An adequacy decision by the European Commission or UK Secretary of State; or
- Standard Contractual Clauses (SCCs) approved by the European Commission / UK ICO; or
- Binding Corporate Rules or other legally approved transfer mechanisms.
For transfers involving Pakistani residents, we comply with the cross-border data transfer provisions of the Personal Data Protection Bill and any regulations issued by the National Commission for Personal Data Protection (NCPDP) once enacted.
You may request a copy of the applicable safeguards by contacting privacy@solutionsbyte.tech.
7. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law:
| Category | Retention Period |
|---|---|
| Client contracts and records | 7 years (tax / legal compliance) |
| Enquiry and contact form data | 3 years from last interaction |
| Marketing consent records | Until consent is withdrawn + 3 years |
| Website analytics | 26 months (rolling) |
| Security / server logs | 90 days |
| Payment records | 7 years (financial regulations) |
After the applicable retention period, data is securely deleted or anonymised.
8. Your Rights
8.1 EU & UK residents (GDPR / UK GDPR)
You have the right to:
- Access — obtain a copy of your personal data (Art. 15)
- Rectification — correct inaccurate or incomplete data (Art. 16)
- Erasure— request deletion ("right to be forgotten") where applicable (Art. 17)
- Restriction of processing — limit how we use your data in certain circumstances (Art. 18)
- Data portability — receive your data in a structured, machine-readable format (Art. 20)
- Object — object to processing based on legitimate interests or for direct marketing (Art. 21)
- Withdraw consent — at any time, without affecting prior processing
- Lodge a complaint — with your national supervisory authority (e.g., ICO in the UK, your EU DPA)
8.2 California residents (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know — what personal information we collect, use, disclose, and sell
- Delete — your personal information (with certain exceptions)
- Correct — inaccurate personal information
- Opt-out of sale or sharing — we do not sell or share personal information for cross-context behavioural advertising
- Limit use of sensitive personal information
- Non-discrimination — we will not discriminate against you for exercising your rights
To submit a CCPA/CPRA request, email privacy@solutionsbyte.tech with the subject line "California Privacy Request". We will respond within 45 days as required by law.
8.3 Other US residents
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states with comprehensive privacy laws have similar rights to access, correct, delete, and opt out of certain uses of personal data. Contact us at privacy@solutionsbyte.tech to exercise these rights.
8.4 Pakistani residents (PECA / PDPB)
Under the Prevention of Electronic Crimes Act 2016 (PECA) and the forthcoming Personal Data Protection Bill (PDPB), you have the right to:
- Be informed about the collection and use of your personal data
- Access personal data held about you
- Correct inaccurate personal data
- Object to processing of your personal data where the processing is not based on legitimate grounds
- Lodge a complaint with the National Commission for Personal Data Protection (NCPDP) once operational
We are committed to upholding these rights as Pakistani data protection law continues to develop. Contact us at privacy@solutionsbyte.tech.
To exercise any right, email privacy@solutionsbyte.tech with proof of identity. We will respond within 30 days (or the shorter period required by your jurisdiction).
10. Children's Privacy
Our website and services are directed at businesses and professionals aged 18 and over. We do not knowingly collect personal data from children under 13 (or under 16 where required by local law).
If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@solutionsbyte.tech and we will delete it promptly.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- TLS/HTTPS encryption for all data in transit
- Encryption at rest for databases containing personal data
- Role-based access controls and least-privilege principles
- Regular security audits and vulnerability assessments
- Incident response procedures with notification timelines
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR, UK GDPR, and applicable US state laws.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the effective date at the top of this page
- Post a prominent notice on our website or notify you by email where required by law
We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes your acknowledgement of the updated policy.
13. Contact Us
For any privacy-related questions, requests, or complaints, please contact our privacy team:
Solutionsbyte
Privacy & Data Protection
Email: privacy@solutionsbyte.tech
Website: https://solutionsbyte.tech
EU / UK Supervisory Authorities
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:
- UK:Information Commissioner's Office (ICO) — ico.org.uk
- EU: Your national Data Protection Authority — edpb.europa.eu/about-edpb/about-edpb/members_en
- California: California Privacy Protection Agency (CPPA) — cppa.ca.gov
- Pakistan: National Commission for Personal Data Protection (NCPDP, once operational)
Last reviewed: 1 May 2025. This document does not constitute legal advice. Consult a qualified lawyer for legal guidance specific to your situation.