Legal
Privacy policy
Last reviewed
In short
Who is responsible for your data
VenSoc Technologies is the data controller for personal data collected through this website. The company is established at Plot #31, Block D, Faisal Town, Lahore 54770, Pakistan.
Questions about this notice, or any request to exercise your rights, should go to info@vensoc.com. A named person reads that address; it is not a ticketing queue.
What this website collects, and what it does not
This website runs no tracking of any kind. It sets no cookies, loads no external scripts, loads no external fonts and embeds no third-party media. That is a design decision rather than an oversight, and it is verifiable from the page source of any page on this site.
The only personal data collected here is what you type into the contact form and choose to send.
- Contact form submissions
- Your name, work email address, company name, company size, country and the message you write. Provided by you, and used solely to respond to your enquiry.
- Server logs
- Standard web server request logs, which include IP address, timestamp, requested URL and user agent. These are generated by the hosting infrastructure, retained briefly for security and abuse prevention, and not used to build any profile of you.
- Anti-abuse signals
- The contact form records the time the page was rendered, to detect automated submissions, and counts submissions per IP address in memory to enforce a rate limit. Neither is stored beyond its immediate purpose.
- Cookies
- None. This site sets no cookies of any kind. Your light or dark theme preference is stored in your own browser using localStorage, never transmitted to the server, and removable by clearing your browser data.
- Analytics and advertising
- None. There is no Google Analytics, no advertising pixel, no session recording, no heatmap tool, and no third-party tag manager.
Why VenSoc is allowed to process it
Under the UK GDPR and the EU GDPR, processing needs a lawful basis. For contact form submissions the basis is legitimate interests — specifically, responding to a business enquiry that you initiated. You would reasonably expect a reply, and no reply is possible without processing what you sent.
For server logs and anti-abuse measures the basis is also legitimate interests: keeping the service available and preventing automated abuse. The processing is minimal and no profiling is carried out.
Where an enquiry becomes an engagement, the basis for continued processing of contact details becomes performance of a contract.
Who else sees it
Enquiry contents are read by VenSoc personnel involved in responding. They are not sold, rented, or shared for anyone else’s marketing, and no third party is given access for its own purposes.
Technical service providers necessarily process data on VenSoc’s behalf as part of hosting and delivering email — a hosting provider and an email provider. They act on instruction only, under contract. Because these depend on deployment, the specific providers for a given client engagement are named in that engagement’s data processing agreement rather than asserted generically here.
Where your data goes
VenSoc is established in Pakistan, which has no adequacy decision from the European Commission or the UK government. Personal data you send through this site is therefore accessed from outside the EEA and the UK.
For website enquiries this is disclosed here so that you can make an informed choice before sending anything. For client engagements involving personal data, transfers are covered by standard contractual clauses in a signed data processing agreement, described on the data processing page.
How long it is kept
Enquiries that do not lead to an engagement are kept for up to twenty-four months, so that a follow-up conversation has context, and then deleted. Enquiries that become engagements are retained for the life of the relationship and for the period afterwards required to meet contractual and tax obligations.
Server logs are retained for a short operational period for security and abuse investigation, and are not archived for analysis.
Your rights
If you are in the UK or the EEA you have the right to access the personal data VenSoc holds about you, to have it corrected, to have it erased, to restrict or object to its processing, and to receive it in a portable format. Where processing rests on legitimate interests, you may object at any time, and VenSoc will stop unless there is an overriding legitimate ground.
To exercise any of these, email info@vensoc.com. VenSoc will respond within one month. No fee is charged, and no account is required — a request from the address you originally wrote from is enough.
If you are unhappy with the response, you have the right to complain to your national supervisory authority. In the UK this is the Information Commissioner’s Office.
Children
This is a business-to-business website and is not directed at children. VenSoc does not knowingly collect personal data from anyone under 16 through this site.
Changes to this notice
Material changes to this notice will be reflected in the review date at the top of this page. This site keeps no mailing list to notify, which is itself a consequence of collecting as little as it does.
Other legal documents
