Privacy policy.

1. Who we are

Quantivs ("we", "us") is a digital execution studio operating from Karachi, Pakistan. For questions about this policy or about data we hold on you, write to info@quantivs.com.

2. What we collect

Information you give us. When you submit the contact form we receive your name, email address, and — if you choose to fill them in — your company name, service interest, budget range and message. These are the fields on the form; there are no hidden ones.

Information collected automatically. Alongside a form submission we record your IP address and browser user-agent string. These are used solely for rate limiting and spam prevention. Our web host also keeps standard server access logs, as effectively every web host does.

What we do not collect. This site sets no advertising or analytics cookies. Fonts are served from our own domain rather than a third party, so no font provider sees your visit. We do not fingerprint browsers, run session recording, or build behavioural profiles.

3. Why we process it

Contact form data is processed to reply to your enquiry and, if we end up working together, to deliver the work. The lawful basis under GDPR Article 6(1)(b) is steps taken at your request prior to entering a contract. IP addresses and user-agent strings are processed under Article 6(1)(f), legitimate interest — specifically, keeping the form usable rather than drowned in automated spam.

4. How long we keep it

Enquiries that don't become projects are deleted within 24 months. Project correspondence is kept for the duration of the engagement plus seven years, which is what tax and accounting obligations require. Spam-prevention records are purged after 30 days.

5. Who else sees it

We do not sell, rent, or trade personal data. It is shared only with:

• Our hosting provider, which necessarily processes traffic to this site
• Our email provider, which delivers form submissions to our inbox
• Authorities, where a valid legal obligation requires it

Both providers act as processors under written terms and cannot use your data for their own purposes.

6. International transfers

We operate from Pakistan, and our hosting and email providers may process data in the EU or the United States. Where data moves out of the UK or EEA, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

7. Your rights

Depending on where you live, you may have the right to access the data we hold on you, correct it, delete it, restrict or object to how we process it, receive it in a portable format, or complain to your data protection authority. Email info@quantivs.com and we'll respond within 30 days. There's no charge and we won't make you justify the request.

8. Cookies

This site sets one cookie, and only on the contact page: a PHP session cookie used to issue the anti-forgery token that protects the form. It is strictly necessary, contains no personal data, and expires when you close your browser. That's why you aren't being shown a cookie banner — there is nothing here that requires consent.

9. Security

The site is served over HTTPS with HSTS. The contact form is protected by origin checking, rate limiting and anti-forgery tokens. Submissions are stored with restricted filesystem permissions. No system is perfectly secure, but we don't collect data we don't need, which is the most effective protection available.

10. Children

This site is aimed at businesses and is not directed at anyone under 16. We do not knowingly collect data from children. If you believe a child has submitted information, tell us and we'll delete it.

11. Changes

If we change this policy we'll update the date at the top. Material changes will be noted on the homepage for at least 30 days.