Privacy policy.

1. Who we are

Quantivs ("we", "us") is a digital execution studio operating from Karachi, Pakistan. For questions about this policy or about data we hold on you, write to info@quantivs.com.

2. What we collect

Information you give us. When you submit the contact form we receive your name, email address, and — if you choose to fill them in — your company name, service interest, budget range and message. These are the fields on the form; there are no hidden ones.

Information collected automatically. Alongside a form submission we record your IP address and browser user-agent string. These are used solely for rate limiting and spam prevention. Our web host also keeps standard server access logs, as effectively every web host does.

Analytics. We use Google Analytics 4 (GA4) to measure which pages are viewed, how visitors move through the site, and what device and browser they use. This data is processed by Google on our behalf. GA4 may set first-party cookies (for example, _ga and _ga_<property-id>) to distinguish unique visitors and sessions. We do not send Google personally identifiable information from the contact form, and we do not enable Google Signals or ad personalization.

Advertising measurement. We use the Facebook/Meta Pixel to measure the performance of our advertising and to understand how visitors who arrive from our ads use the site. The Pixel is loaded from Meta's servers and may set or read cookies (for example, _fbp and fr) so Meta can recognise you across sites that use its services. Meta processes this data under its own privacy policy. We do not send Meta personally identifiable information from the contact form.

What we do not collect. Fonts are served from our own domain rather than a third party, so no font provider sees your visit. We do not fingerprint browsers, run session recording, or build behavioural profiles. We do not sell data to anyone.

3. Why we process it

Contact form data is processed to reply to your enquiry and, if we end up working together, to deliver the work. The lawful basis under GDPR Article 6(1)(b) is steps taken at your request prior to entering a contract. IP addresses and user-agent strings are processed under Article 6(1)(f), legitimate interest — specifically, keeping the form usable rather than drowned in automated spam.

4. How long we keep it

Enquiries that don't become projects are deleted within 24 months. Project correspondence is kept for the duration of the engagement plus seven years, which is what tax and accounting obligations require. Spam-prevention records are purged after 30 days.

5. Who else sees it

We do not sell, rent, or trade personal data. It is shared only with:

• Our hosting provider, which necessarily processes traffic to this site
• Our email provider, which delivers form submissions to our inbox
• Authorities, where a valid legal obligation requires it

Both providers act as processors under written terms and cannot use your data for their own purposes.

6. International transfers

We operate from Pakistan, and our hosting and email providers may process data in the EU or the United States. Where data moves out of the UK or EEA, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

7. Your rights

Depending on where you live, you may have the right to access the data we hold on you, correct it, delete it, restrict or object to how we process it, receive it in a portable format, or complain to your data protection authority. Email info@quantivs.com and we'll respond within 30 days. There's no charge and we won't make you justify the request.

8. Cookies

The site sets three kinds of cookies:

• PHP session cookie, only on the contact page, used to issue the anti-forgery token that protects the form. It is strictly necessary, contains no personal data, and expires when you close your browser.
• Google Analytics cookies (for example, _ga and _ga_<property-id>), used to distinguish visitors and sessions. These are analytics cookies, not advertising cookies.
• Facebook/Meta Pixel cookies (for example, _fbp and fr), used to recognise your browser across sites that use Meta services and to measure ad performance. These are advertising/tracking cookies.

Consent. Google Analytics cookies are only set after you accept analytics cookies via the banner that appears on your first visit. The Facebook/Meta Pixel loads unconditionally; if you are in a jurisdiction where advertising trackers require consent, you should use your browser's cookie controls or a blocking extension to stop Meta cookies. Your analytics choice is remembered for 180 days. If you change your mind, clear your browser cookies for quantivs.com and the banner will appear again.

9. Security

The site is served over HTTPS with HSTS. The contact form is protected by origin checking, rate limiting and anti-forgery tokens. Submissions are stored with restricted filesystem permissions. No system is perfectly secure, but we don't collect data we don't need, which is the most effective protection available.

10. Children

This site is aimed at businesses and is not directed at anyone under 16. We do not knowingly collect data from children. If you believe a child has submitted information, tell us and we'll delete it.

11. Changes

If we change this policy we'll update the date at the top. Material changes will be noted on the homepage for at least 30 days.