1. Who we are
VENDDOCK Digital Engineering, Inc. (“VENDDOCK”, “we”, “us” or “our”) decides how and why the personal information described in this policy is used, which makes us its “controller” under data protection law.
For any question about this policy or your information, or to use your rights, email venddock@gmail.com or call +92 316 4694405.
2. What this policy covers
It covers personal information about people who visit this website, contact us, apply to work with us, or are our contact at a client, prospective client or supplier.
It does not cover personal information that we handle for our clients while building or running their websites, apps and campaigns. There we act as a “processor” on the client’s instructions under a written agreement, and the client’s own privacy policy applies. It also does not cover other websites that ours links to.
3. Information we collect
When you use our contact form: your name, work email address, company, company size, the services you are interested in, your budget range and anything you write in the project brief. Your name and email address are required so that we can reply. The other fields are optional.
When you email, call or message us: your contact details and what you tell us, and a record of the conversation.
When you apply for a job: your name, contact details, CV, work history, qualifications, portfolio and anything else you send us, our notes from interviews and assessments, and references from referees you name.
When you are a client or supplier contact: your name, job title, business contact details, and the contract, project, billing and payment records connected to your organisation.
Collected automatically: when you visit the website, the company that hosts it records technical details of each request: your IP address, browser and device type, the pages requested, the referring page and the date and time. We do not use analytics, advertising or social media cookies, and we do not track you across other websites.
From other sources: business contact details from public sources such as company websites and professional networks, and information from referees and recruitment platforms you have used to apply.
We do not ask for sensitive information, such as health, religion, ethnic origin or political opinions. Please do not include it in a CV or message. If you do, we use it only where the law allows, for example to make adjustments you ask for during an interview.
4. How we use it and our legal basis
We use personal information only for the purposes below. Data protection law in the UK and the European Economic Area requires a legal basis for each purpose, shown in brackets.
- To reply to your enquiry, discuss your project and prepare a proposal (steps you ask for before entering a contract, and our legitimate interest in responding to business enquiries).
- To deliver our services, manage projects and invoices, and look after our relationship with clients and suppliers (performance of a contract, and our legitimate interest in running our business).
- To assess job applications and hire (steps before a contract, and our legitimate interest in recruiting).
- To keep the website, our systems and your information secure, and to prevent spam, fraud and abuse (legitimate interest).
- To send business contacts occasional news about our services (legitimate interest, or your consent where the law requires it). Every message lets you opt out, and you can also email us to stop.
- To meet our legal, tax, accounting and regulatory obligations, and to establish, exercise or defend legal claims (legal obligation and legitimate interest).
Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can ask us for details of that assessment.
We do not make decisions that have legal or similarly significant effects on you by automated means alone, and we do not build profiles of you.
6. International transfers
We work from offices in the United States (Cupertino, California) and Pakistan (Lahore, Karachi and Islamabad), and some of our service providers are based in, or store data in, other countries. Your information may therefore be handled in a country other than the one you live in, where data protection law may differ.
When we transfer personal information out of the UK or the European Economic Area to a country without an adequacy decision, we use the standard contractual clauses approved for that purpose, or another safeguard the law allows. You can ask us for a copy.
7. How long we keep it
We keep personal information only for as long as we need it for the purpose we collected it for, or as the law requires:
- Enquiries and contact-form messages: while we are in contact, and for up to 24 months after our last contact.
- Job applications: for up to 12 months after the hiring decision, unless you ask us to keep your details for future roles. If you join us, your application becomes part of your employee record.
- Client and supplier records: for the length of the contract and up to 7 years afterwards, to meet legal, tax and accounting requirements.
- Website logs: for the short period set by our hosting provider, usually no more than a few months.
When the period ends, we delete the information or make it anonymous so that it can no longer identify you.
8. How we protect it
We protect personal information with technical and organisational measures that include encryption in transit, access limited to the people who need it, multi-factor authentication on our accounts, and staff confidentiality obligations.
No method of sending or storing information is completely secure, so we cannot guarantee it. If you think your information has been exposed, tell us at venddock@gmail.com. If a breach is likely to put you at risk, we will tell you and the relevant authorities as the law requires.
9. Your rights
Depending on where you live, you have some or all of these rights over your personal information:
- Access: to know whether we hold information about you and to get a copy of it.
- Correction: to have inaccurate or incomplete information corrected.
- Deletion: to have your information deleted.
- Restriction and objection: to restrict how we use it, or to object to uses based on our legitimate interests, and to object at any time to direct marketing.
- Portability: to receive information you gave us in a structured, machine-readable format, or have it sent to someone else.
- Withdrawing consent: where we rely on your consent, to withdraw it at any time. This does not affect what we did before.
To use any of these rights, email venddock@gmail.com. Using them is free. We may ask you to confirm your identity first, and someone you authorise can make a request for you if we can verify their authority. We reply within one month, or 45 days for requests under California law, and tell you if we need longer. We will not treat you differently for using your rights.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the European Economic Area, the authority in your country. Wherever you are, we follow the data protection laws that apply to us, including those of Pakistan and the United States.
10. Notice for California residents
This section adds to the rest of the policy for residents of California, as the California Consumer Privacy Act requires. In the last 12 months we have collected the following categories of personal information, from the sources and for the purposes described above:
- Identifiers, such as your name, email address, phone number and IP address.
- Professional or employment information, such as your company, job title and company size, and for applicants, your CV, work history and qualifications.
- Commercial information, such as the services you are interested in, your budget range, and for clients, contract and billing records.
- Internet activity, limited to the website logs described above.
We disclose these categories only to the service providers and other recipients listed in “Who we share it with”, for business purposes. We keep each category for the periods set out in “How long we keep it”.
We do not sell personal information and do not share it for cross-context behavioural advertising, and we have not done so in the last 12 months. We have no actual knowledge of selling or sharing the information of anyone under 16. We do not use or disclose sensitive personal information for any purpose that would give you the right to limit it. We do not disclose personal information to third parties for their own direct marketing.
You have the right to know what personal information we collect, use and disclose; to have it deleted or corrected; to opt out of its sale or sharing (although we do neither); and not to be discriminated against for using these rights. See “Your rights” for how to make a request.
11. Do Not Track and Global Privacy Control
Because this website does not track visitors across other websites or over time, and does not sell or share personal information, it works the same way whether or not your browser sends a Do Not Track or Global Privacy Control signal. Where the law treats such a signal as an opt-out request, we honour it.
13. Children
Our website and services are for businesses and adults. They are not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.
14. Changes to this policy
We update this policy when the way we handle personal information changes or the law requires it. The date at the top shows when it last changed. If a change significantly affects how we use your information, we will tell you directly where we can before it takes effect.
15. Contact us
Email venddock@gmail.com or call +92 316 4694405. Letters can be addressed to VENDDOCK Digital Engineering, Inc. at any of our offices.