Privacy Policy

Last updated: 19 August 2026  ·  Effective: 19 August 2026

1. Who we are

This website is operated by One Shine Consultants (Private) Limited ("One Shine Consultants", "we", "us", "our"), a private limited company incorporated in the Islamic Republic of Pakistan. We are a web development company providing website development, web application development, design, SEO and related technical services.

We are the data controller in respect of personal information collected through this website. Where we process personal information on behalf of a client as part of a development engagement, we act as a data processor — see section 12.

2. Scope of this policy

This policy applies to this website and to personal information we collect in the course of enquiries, proposals and client engagements.

It does not apply to:

• Websites, applications or systems we build for clients. Those are operated by the client and governed by the client's own privacy policy.
• Mobile applications published under a separate developer account. Any such application has its own privacy policy specific to the data that application collects.
• Third-party websites we link to.

3. Information we collect

3.1 Information you give us

When you submit our contact form, or contact us by email, we collect:

• Your full name
• Your email address
• Your company name, where you provide it
• The service category and approximate budget range you select
• The content of your message and any subsequent correspondence

All of these fields are provided voluntarily by you. Name, email address, service category and message are required in order for us to respond; the remaining fields are optional.

3.2 Information collected automatically

Our hosting provider records standard server logs when a page is requested. These typically include the IP address of the requesting device, the date and time of the request, the page or file requested, the HTTP status code, the referring page and the browser user-agent string. These logs are generated by the hosting infrastructure for security, abuse prevention and diagnostic purposes.

3.3 Information we do not collect

This website does not ask for and does not process payment card details, national identity numbers, passwords, precise location data, or any special category data such as health, religious or biometric information. Please do not send such information to us through the contact form.

4. How we use information

We do not use your information for automated decision-making or profiling. We do not sell, rent or trade personal information to anyone, and we do not use enquiry data to send marketing messages unless you have separately asked us to.

5. Legal bases

Where the EU or UK General Data Protection Regulation applies to you as a visitor, we rely on the following legal bases:

• Steps prior to entering a contract — to respond to your enquiry and prepare a quotation at your request.
• Performance of a contract — to deliver services you have engaged us for.
• Legal obligation — to retain invoicing and tax records as required by Pakistani law.
• Legitimate interests — to keep our website secure and operational, and to maintain records of business correspondence. We have assessed that these interests are not overridden by your rights.

6. Cookies and tracking

This website does not set cookies. We do not use analytics platforms, advertising pixels, social media trackers, session recording tools or fingerprinting techniques. No consent banner is presented because there is nothing to consent to.

The only third-party request made by this website is to Google Fonts, which serves the typefaces used in our design. Your browser's IP address is necessarily visible to Google when that request is made. If we introduce analytics or any other cookie-setting technology in the future, we will update this policy and, where required, request your consent beforehand.

7. Sharing and disclosure

We share personal information only in the following circumstances:

• Service providers. Our website hosting provider and our email provider process data on our behalf, under contract, and only on our instructions.
• Professional advisers. Our accountants and, where necessary, legal advisers, bound by professional confidentiality obligations.
• Legal requirement. Where we are required to disclose information by Pakistani law, by a court of competent jurisdiction, or by a regulatory or tax authority acting within its powers.
• Business transfer. If our business or its assets are transferred, information may transfer as part of that transaction, subject to this policy continuing to apply.

8. International transfers

We are based in Pakistan. Our website hosting and email services may store or process data on servers located outside Pakistan, including in the European Union and the United States. Where personal information originating in the EU or UK is transferred, we rely on the standard contractual clauses or equivalent safeguards offered by the relevant provider.

9. Data retention

10. Security

This website is served exclusively over HTTPS with a valid TLS certificate. We apply access controls and multi-factor authentication to the accounts used to administer the site and our email. Access to enquiry data is limited to personnel who need it in order to respond.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify affected individuals and any applicable regulator without undue delay.

11. Your rights

Subject to applicable law, you may ask us to:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Delete information we no longer have a lawful reason to keep
• Restrict or object to processing based on legitimate interests
• Receive a copy of information you gave us, in a portable format
• Withdraw consent, where processing is based on consent

To exercise any of these rights, email us using the address in section 16. We will respond within 30 days. We may need to verify your identity before acting on a request. There is no charge for a reasonable request. If you are in the EU or UK and believe we have not handled your information properly, you have the right to complain to your local supervisory authority.

12. Client project data

When we build or maintain a website or application for a client, we may be given access to systems that contain personal information belonging to that client's users. In that situation:

• The client is the data controller and we act solely as a data processor.
• We process such data only on the client's documented instructions.
• We do not use client end-user data for our own purposes, and we do not retain copies beyond what is necessary to perform the work.
• Access is limited to the specific personnel assigned to that engagement, under confidentiality obligations.
• On completion or termination, we return or securely delete access credentials and any working copies of client data.

Where required, we will enter into a separate data processing agreement with the client setting out these obligations in binding terms.

13. Children

Our services are directed at businesses and organisations, not at children. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Third-party links

This website may link to third-party sites, including our social media profiles. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies before providing them with information.

15. Changes to this policy

We may update this policy to reflect changes to our services, our providers, or applicable law. The "last updated" date at the top of this page shows when the current version took effect. Material changes will be highlighted on this page. Continued use of the website after a change takes effect constitutes acceptance of the revised policy.

16. Contact us

For any question, request or complaint about this policy or about how we handle personal information, contact us in writing: