Privacy Policy

Introduction

This Privacy Policy explains how Veloce Digital ("Veloce Digital", "we", "us", or "our") collects, uses, stores, shares, and protects information when you interact with our websites, services, communications, applications, digital projects, hosting services, security services, and related offerings.

We aim to collect only information reasonably necessary for legitimate business, contractual, technical, security, and service-delivery purposes. By using our services, you acknowledge the practices described in this Privacy Policy.

Who We Are

Veloce Digital is a digital services business providing website development, e-commerce development, UI/UX design, branding, SEO, security audits, AI automation, hosting and deployment, digital consulting, and related digital solutions.

Information We Collect

Depending on how you interact with us, we may collect:

Identity information — name, business name, job title, profile information, account identifiers.

Contact information — phone number, WhatsApp number, email address, business address, social-media contact information.

Project information — website requirements, branding materials, product information, business information, design preferences, technical requirements, project communications.

Account and technical information — where required for service delivery: usernames, account identifiers, API credentials, hosting information, domain information, server information, configuration information. We ask clients to provide only the credentials necessary for the relevant service.

Payment Information

Payments may be processed by third-party payment providers, banks, financial institutions, or other payment services. Veloce Digital generally does not need to store complete payment-card information. Payment providers may independently process payment information according to their own privacy policies.

Website & Technical Information

When you visit our website, we may automatically receive technical information such as IP address, browser type, device type, operating system, pages visited, referring pages, approximate location derived from technical information, timestamps, website interaction information, and error logs. This information may be used for security, analytics, performance, troubleshooting, and website improvement.

How We Use Information

We may use information to: provide requested services; communicate with clients; prepare quotations; manage projects; process payments; provide technical support; maintain websites; deploy software; perform security assessments; provide SEO services; communicate about project changes; prevent fraud and abuse; protect systems; troubleshoot technical problems; improve our services; maintain business records; comply with applicable law; and enforce contractual rights.

Security Audits & Technical Access

For authorized security audits, clients may provide Veloce Digital with access to systems, applications, infrastructure, or other technical information. Such access will be used only for the agreed security assessment. Clients should provide temporary or least-privilege credentials where practical, and should revoke unnecessary credentials after the engagement ends. Veloce Digital will not intentionally access systems outside the authorized scope of an engagement.

AI & Automated Processing

Some Veloce Digital services may use artificial intelligence or automated processing. Depending on the service, information may be processed by AI platforms, automation platforms, API providers, cloud infrastructure, software services, or other authorized technology providers, according to the relevant service configuration and applicable provider terms. Clients should not provide highly sensitive information to an AI system unless the processing has been specifically agreed and appropriately configured.

Third-Party Service Providers

We may use third-party providers to operate our business and deliver services, including hosting providers, cloud infrastructure providers, domain providers, CDN providers, analytics services, payment processors, email providers, AI providers, security providers, software providers, and development platforms. These providers may process information on our behalf or independently depending on the service. We seek to use reputable providers and limit information access according to the requirements of the service.

Legal & Security Disclosures

We may disclose information when reasonably necessary to comply with applicable law, respond to lawful requests, protect our rights, prevent fraud, investigate abuse, protect users, protect infrastructure, investigate security incidents, enforce agreements, or respond to emergencies. Where legally permitted and reasonably appropriate, we may notify affected parties of significant disclosures or security incidents.

Business Transfers

If Veloce Digital undergoes a merger, acquisition, restructuring, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable law and reasonable privacy protections.

Cookies & Similar Technologies

Our website may use cookies or similar technologies for essential functionality, security, preferences, analytics, performance, and improving user experience. You may be able to control cookies through your browser settings; disabling certain cookies may affect website functionality.

Marketing Communications

We may use your contact information to send service-related communications, project updates, important account information, and — where you've become a client or otherwise opted in — promotional messages or offers. You may request that we stop sending non-essential marketing communications at any time; service and security communications may continue where necessary.

Data Retention

We retain information only for as long as reasonably necessary for the purpose it was collected for, including providing services, maintaining business records, resolving disputes, enforcing agreements, meeting legal obligations, maintaining security, and preventing fraud. Retention periods may differ depending on the type of information and service. When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable legal or contractual obligations.

Data Security

We use reasonable technical and organizational measures to protect information, which may include access controls, authentication, least-privilege access, encryption where appropriate, secure credential handling, logging, monitoring, backups, security updates, and restricted administrative access. However, no internet-connected system can be guaranteed to be completely secure.

Client Responsibilities

Clients are responsible for protecting their own passwords, using strong authentication, controlling employee access, revoking former employee access, keeping credentials confidential, providing lawful data, obtaining necessary permissions from their own users/customers, and informing Veloce Digital of relevant privacy requirements. Clients should never send passwords through insecure channels when a secure credential-sharing method is available.

Children's Information

Our services are generally intended for businesses and adults. We do not knowingly seek to collect personal information from children for independent marketing purposes. If you believe a child has provided personal information to us inappropriately, please contact us so we can investigate and take appropriate action.

International Processing

Some technology providers we use may operate infrastructure outside Pakistan. As a result, information may be processed or stored in another country depending on the technology used for a particular service. Where applicable, we seek to use reasonable contractual, technical, and organizational safeguards for such processing.

Regional Data Protection Notices

We serve clients in both Pakistan and India, and the legal frameworks governing personal data differ between the two. This section summarizes the current landscape as of this policy's last-updated date; it is not legal advice, and you should not rely on it as a complete statement of your rights.

India. If you are located in India, or if we process personal data connected to offering goods or services to individuals in India, the Digital Personal Data Protection Act, 2023 ("DPDP Act") applies. Under the DPDP Act, you (as a "Data Principal") have the right to be informed about how your data is collected and used, to access and correct your data, to request erasure, to withdraw consent previously given, and to nominate a representative to exercise these rights on your behalf in certain circumstances. To exercise any of these rights, contact us using the details in the Contact section below — we aim to acknowledge requests within a reasonable time and respond within 30 days. The DPDP Act's substantive obligations are being phased in by the Indian government through 2026 and 2027; we intend to align our practices with the Act's requirements as they take effect.

Pakistan. As of this policy's last-updated date, Pakistan has not enacted a comprehensive, standalone data protection law. The Prevention of Electronic Crimes Act, 2016, as amended by the Prevention of Electronic Crimes (Amendment) Act, 2025 ("PECA"), is the primary statute addressing unauthorized access to and misuse of electronic data, and is enforced by the National Cyber Crime Investigation Agency (NCCIA). A Personal Data Protection Bill has been drafted and cabinet-approved but has not yet been passed into law. We will update this policy if and when that legislation, or equivalent legislation, comes into force.

If you have questions about which regional protections apply to you, or believe local law grants you rights beyond what is described here, please contact us and we will do our best to assist within the limits described above.

Data Ownership

Unless otherwise agreed: client-provided business data remains the client's data; Veloce Digital does not claim ownership of client customer data merely because we process it; Veloce Digital retains ownership of its own software, systems, tools, templates, frameworks, and proprietary technology; and third-party providers retain their respective rights under their applicable terms.

Your Privacy Requests

Depending on applicable law, you may request information concerning what personal information we hold, how it's being used, correction of inaccurate information, deletion where appropriate, withdrawal of certain permissions, restriction of certain processing, or cessation of marketing communications. Some requests may be limited by legal, security, contractual, or operational requirements, and we may need to verify your identity before completing a request.

To make a request, email [email protected] with the subject line "Privacy Request," describing what you're asking for and the email or account associated with your data. We aim to acknowledge requests within 5 business days and resolve them within 30 days, or explain why more time or a partial response is needed.

Security Incident Requests

If you believe your information or account has been compromised, contact us immediately with your name, the affected service, the relevant account/project, a description of the suspected incident, the approximate date/time, and any relevant technical information. Do not include unnecessary passwords or sensitive credentials in your message.

Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, security, or content of websites we do not operate, and you should review the privacy policy of any third-party website before providing information.

Changes to This Policy

We may update this Privacy Policy periodically. Changes will be published with an updated "Last Updated" date, and material changes may be communicated through appropriate channels where reasonably necessary.

Contact

For privacy questions, requests, or concerns, email [email protected] or message us on WhatsApp. By using Veloce Digital services, you acknowledge that you have reviewed this Privacy Policy.