Privacy Policy

Overview & Scope

Hamrix ("Hamrix", "we", "our", or "us") is a complete digital solutions provider. We deliver end-to-end custom software engineering, data & analytics engineering, digital performance marketing, cloud infrastructure, and strategic technology consulting. We recognize the paramount importance of data privacy and are committed to handling your personal and commercial data with strict confidentiality, transparency, and integrity.

Headquartered in Pakistan and operating globally across international markets, this Privacy Policy explains our practices regarding the collection, processing, storage, and protection of information obtained through our website (hamrix.com), customer communication channels, project discovery engagements, and associated digital services.

Information We Collect

We only collect personal and business information that is necessary to evaluate project inquiries, deliver contractual software, data, and marketing services, maintain secure infrastructure, and communicate with partners.

Legal Basis for Processing

We process your personal data under the following recognized legal grounds:

• Contractual Performance: Processing required to initiate, execute, or deliver services under a commercial proposal, Statement of Work (SOW), or service agreement.
• Legitimate Business Interests: Processing necessary to maintain website security, prevent fraud, optimize platform performance, and respond to commercial inquiries.
• Consent: Where you have explicitly opted in to receive technical communications, case study updates, or newsletter briefings.
• Legal Compliance: Processing required to fulfill statutory tax, financial, auditing, and corporate regulatory requirements.

How We Use Your Information

We utilize the collected information strictly for legitimate commercial and technical operations, including:

• Evaluating your digital solution specifications and delivering tailored technical and marketing proposals.
• Designing, building, testing, and managing custom digital products and growth campaigns for active clients.
• Communicating project updates, milestone deliveries, technical documentation, and administrative invoices.
• Ensuring the technical uptime, responsiveness, and cyber defense of our web applications.
• Conducting aggregated internal research to enhance our engineering workflows, data visualization pipelines, and UI/UX design patterns.

• We never sell, rent, lease, or monetize your personal or commercial data to third-party data brokers or marketing networks.

Data Security & Retention

We implement robust technical and organizational security controls designed to prevent unauthorized access, accidental loss, data alteration, or unlawful disclosure. These measures include end-to-end transport layer security (HTTPS/TLS), encrypted database storage, role-based access controls, multi-factor authentication for team infrastructure, and regular code security audits.

We retain personal information only for the duration necessary to fulfill the business purposes outlined in this policy, execute ongoing client engagements, or comply with statutory retention mandates. When data is no longer required, it is securely destroyed or permanently anonymized.

Service Providers & Disclosures

We may share data with vetted third-party service providers who assist us in operating our digital infrastructure, subject to stringent data processing agreements and confidentiality obligations. These partners include:

• Cloud hosting and server infrastructure providers (e.g., enterprise cloud platforms and content delivery networks).
• Performance analytics platforms (e.g., Google Analytics) operating in an aggregated, privacy-compliant manner.
• Transactional email and customer support systems used to facilitate direct client communications.

We will only disclose your information to law enforcement or regulatory authorities if legally compelled by valid court orders or applicable statutory law.

International Data Transfers

As an international technology solutions provider serving clients across Pakistan, the United States, the United Kingdom, Saudi Arabia, and the United Arab Emirates, your information may be processed in secure data centers located outside your home jurisdiction. Where international transfers occur, we implement recognized transfer mechanisms, including Standard Contractual Clauses (SCCs) and robust data encryption, to ensure your data maintains equivalent protection.

Your Data Protection Rights

Depending on your country or state of residence (such as the GDPR in the UK/EEA, the CCPA in California, or the Personal Data Protection Laws in KSA and the UAE), you have specific statutory rights concerning your personal data:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You may ask us to correct inaccurate or incomplete personal records.
• Right to Erasure: You can request the deletion of your personal data when it is no longer required for our business relationship.
• Right to Restrict or Object: You may object to or restrict certain processing activities under specific legal circumstances.
• Right to Data Portability: You may request the transfer of your provided data in a structured, machine-readable format.

Cookies & Tracking Technologies

Our website uses cookies and similar telemetry technologies to maintain secure navigation, remember your preferences, and analyze website traffic. For detailed information on the specific categories of cookies we use and instructions on managing your browser preferences, please review our Cookie Policy.