What we collect, and what we do not.

In plain English, because a privacy policy nobody can read is not consent, it is paperwork. If anything here is unclear, ask and we will explain it.

Last updated 19 October 2026 · Yume Systems, Islamabad, Pakistan

On this page

The short version
What we collect from this site
What we collect as your supplier
Why we hold it
Who else sees it
Where it is stored
How long we keep it
Your rights
Security
Children
Changes
Contact

1. The short version

We collect what you send us in the contact form, and nothing else from you personally. This site has no advertising trackers, no third-party analytics profiling you across the web, and no cookies that follow you off it. We do not sell, rent or share your information with anyone for marketing, ever.

If you are our client, we also hold whatever your project requires — and that data is yours, not ours.

2. What we collect from this website

When you use the contact form

You choose what to give us. The form asks for:

Your name — the only required field
Company name, if you give one
A phone or WhatsApp number, if you give one
An email address, if you give one
Your current website, if you have one
What kind of work you are asking about
Whatever you write in the message

That is sent to our own inbox so we can reply to you. It is not added to a mailing list and you will not receive marketing from us because you used it.

Technical information

This site is served through Cloudflare, which records standard request information such as IP address, approximate location, browser and the page requested. That is used for delivery and for blocking abuse, and we do not use it to build a profile of you.

Cookies and storage

We set no tracking cookies. The site stores two small preferences in your own browser, which never reach us and never leave your device:

Whether you chose the light or dark theme
Whether you chose PKR or USD on the pricing page

You can clear them at any time through your browser and the site will work exactly as before.

3. What we collect as your supplier

If you engage us, the work itself usually involves information beyond an enquiry: contact details for the people we deal with, business records needed to build and test the system, and in migration projects, your existing data.

We treat all of that as yours. We hold it only to do the work you asked for, we do not use it for anything else, and we return or delete it when you ask. Where a project needs it, we sign a non-disclosure agreement before you send us anything — and we would rather do that first than afterwards.

4. Why we hold it

To reply to you. An enquiry we cannot answer is no use to either of us.
To do the work. Building, testing, migrating and supporting a system needs access to the things that system handles.
To meet our obligations. Invoices and contracts have to be kept for tax and accounting purposes.
To keep the service running. Server and error logs tell us when something has broken, often before you notice.

5. Who else sees it

Only the people who need to, and only the services that make this work:

Our own team members working on your project
Cloudflare, which serves this website
Our email provider, which delivers the enquiry to our inbox
Hosting providers, where your project is hosted with them rather than with you

We do not sell your information, rent it, trade it, or hand it to advertisers or data brokers. If we were ever legally compelled to disclose something, we would tell you unless we were prohibited from doing so.

6. Where it is stored

We are in Pakistan, and our clients are in Pakistan, the Gulf, Europe and the United States, so information may be processed outside your own country.

For project data, you choose the location and we tell you exactly where it will be before work starts — your own hosting, your own cloud account, or ours. If your business has a requirement that data must remain in a particular jurisdiction, tell us at the start and we will build to it or decline the project.

7. How long we keep it

Enquiries that go nowhere: deleted within 12 months.
Client correspondence and project records: for the life of the relationship and a reasonable period after, so we can help if you come back.
Invoices and contracts: as long as tax and accounting rules require.
Your project data: returned or deleted on request, and not retained once a project ends unless you ask us to keep it for support.

8. Your rights

Whatever jurisdiction you are in, you can ask us to:

Tell you what we hold about you
Correct anything that is wrong
Delete it, where we are not required to keep it
Send you a copy in a portable format
Stop using it for a particular purpose

Write to us and we will do it. We will not ask you to justify the request, and we will not make it difficult.

9. Security

Access is limited to the people working on your project. Credentials are not shared in plain text, connections are encrypted, and backups are encrypted and tested rather than assumed to work.

We will not pretend that any system is unbreakable. What we will commit to is telling you promptly and honestly if something affecting your data goes wrong, rather than hoping you do not notice.

10. Children

This is a business-to-business service. It is not directed at children and we do not knowingly collect information from them. If you believe a child has sent us information, tell us and we will delete it.

11. Changes to this policy

If we change it we will update the date at the top of this page. If a change materially affects clients, we will tell them directly rather than relying on them re-reading a web page.

12. Contact

Questions about any of this, or a request about your own information:

A note on what this document is. It is a plain, honest description of how we actually handle information, written so you can read it. It is not legal advice, and it has not been drafted by a lawyer. If your organisation needs a policy reviewed against a specific regime such as the GDPR, tell us and we will work with your counsel.