Privacy Policy

Effective date: 22 October 2026

This Privacy Policy explains how CapsLock collects, uses, shares and protects personal information when you visit capslock.pk, contact us, receive an email from us, or work with us as a client. We have written it in plain English so it is easy to follow. If anything is unclear, email us at info@capslock.pk.

1. Who we are

CapsLock is a software house and digital marketing agency based in Lahore, Pakistan. We have been working since 2016 and operate as a fully remote team. In this policy, “CapsLock”, “we”, “us” and “our” mean CapsLock, and “you” means anyone who uses our website or contacts us.

CapsLock is responsible for the personal information described in this policy (in some countries this role is called the “data controller”). You can reach us at:

• Email: info@capslock.pk
• Phone / WhatsApp: +92 312 7032292
• Location: Lahore, Pakistan

2. Information we collect

Information you give us

• Project enquiry form: first name, last name, email address, phone or WhatsApp number, company name, budget range, the service you need and the details you write about your project.
• Email, phone and WhatsApp: your name, contact details and anything you choose to share when you contact us directly, including messages, files and voice notes.
• Clients: contact and billing details, project requirements, approvals, feedback and the content, files and account access you provide so we can deliver the work.
• Social media: your profile name and messages if you contact us or interact with us on platforms such as Facebook, Instagram, TikTok or LinkedIn.

Information collected automatically

• Technical data: IP address, browser type, device type, operating system, referring page, pages visited and the date and time of your visit. Our hosting and caching services record this in standard server logs for security and performance.
• Analytics data: information about how visitors use the site, collected through Google Analytics 4 and Google Tag Manager using cookies or similar technologies. See section 4.

Information from other sources

For business development we may collect business contact details, such as a company name, a work email address and a person’s name and role, from public sources like company websites and business directories. We only use publicly available business contact information for this purpose and do not buy contact lists.

We do not ask for sensitive information such as health data, religious beliefs or financial account passwords through this website. Please do not send it to us.

3. How we use your information

• To reply to your enquiry and give you a quote, proposal or advice.
• To plan, deliver, support and invoice the work you ask us to do.
• To communicate with you by email, phone or WhatsApp about your project or enquiry.
• To send occasional business emails introducing our services to companies that may be interested, with a simple way to opt out every time.
• To understand how the website is used so we can improve its content, speed and design.
• To keep the website, our systems and our clients secure and to prevent spam, fraud and misuse.
• To meet our legal, tax and accounting obligations and to protect our legal rights.

We use your information only when we have a valid reason. This is usually because you asked us to (for example, by sending an enquiry), because we need it to perform a contract with you, because we have a legitimate business interest that does not override your rights (for example, improving our website or contacting businesses about relevant services), because the law requires it, or because you have given your consent. We do not sell your personal information, and we do not make decisions about you based solely on automated processing.

4. Cookies and analytics

Cookies are small text files stored on your device by your browser. Our website uses a small number of them.

• Essential cookies and storage: needed for the website, security features, caching and the contact form to work properly. Our chat widget may also store your widget preferences (for example, whether you closed it) in your browser.
• Analytics cookies: Google Analytics 4, loaded through Google Tag Manager, uses cookies such as _ga and _ga_* to count visits and show us which pages are popular, how visitors arrive and how long they stay. This information is aggregated and helps us improve the site. Google processes this data as described in its own privacy policy.

You can block or delete cookies in your browser settings at any time, and you can opt out of Google Analytics across websites by installing the Google Analytics Opt-out Browser Add-on. Blocking essential cookies may stop parts of the website from working properly. If we introduce marketing or advertising cookies in future, we will update this policy and, where required, ask for your consent first.

5. WhatsApp and other third-party services

Our website shows a chat button that lets you contact us by WhatsApp, phone or email. The button simply opens WhatsApp, your phone dialler or your email app. If you message us on WhatsApp, your message is handled by WhatsApp (owned by Meta) under its own terms and privacy policy, as well as by us. The same applies when you contact us through Facebook, Instagram, TikTok, LinkedIn or other platforms.

We rely on trusted service providers to run our business. Depending on the service, they may process personal information on our behalf:

• Website hosting, caching and content delivery (Hostinger and LiteSpeed caching).
• Our website platform and plugins, including WordPress and Fluent Forms for the enquiry form.
• Google services, including Google Analytics, Google Tag Manager and Google Workspace or Gmail for email and documents.
• Communication tools such as WhatsApp and video-call software.
• Project management, file-sharing, accounting and payment tools used to deliver and invoice client work.

We choose providers that take security seriously and only share what they need to provide their service. Links on our website to other websites are provided for convenience. We are not responsible for the privacy practices of those websites, so please read their policies.

6. When we share information

We do not sell or rent personal information. We only share it:

• with the service providers listed above, so they can provide their services to us;
• with team members and trusted freelancers working on your project, who must keep it confidential;
• with professional advisers such as accountants and lawyers, where needed;
• with authorities, courts or law enforcement where the law requires it, including under Pakistan’s Prevention of Electronic Crimes Act 2016 and other applicable laws, or to protect our rights, our clients or the public; and
• with another organisation if CapsLock is ever reorganised, merged or sold, in which case this policy will continue to protect your information.

7. International transfers

We are based in Pakistan and work with clients and service providers in other countries. Your information may therefore be stored or processed in Pakistan and in other countries, including where our service providers operate servers. These countries may have different data protection laws from yours. Where we transfer information, we take reasonable steps to make sure it stays protected, for example by using reputable providers with recognised security and data protection commitments.

8. How we protect your information

We use reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access. These include encrypted connections (HTTPS) on our website, access controls and strong passwords, limiting access to the people who need it, and keeping software up to date. No website or internet transmission is completely secure, so we cannot guarantee absolute security. If you share passwords or system access with us for a project, please use a secure method and change them when the work is complete.

9. How long we keep information

• Enquiries that do not become projects: up to 24 months after our last contact, then deleted.
• Client and project records: for the length of our working relationship and afterwards for as long as needed for support, warranties, legal claims, and tax and accounting requirements.
• Business development contacts: until the information is no longer relevant or you ask us to stop. If you opt out, we keep a minimal record of your email address so that we do not contact you again.
• Analytics data: kept in Google Analytics for up to 14 months.
• Server logs: kept for a short period by our hosting provider for security and troubleshooting.

When information is no longer needed, we delete it or make it anonymous.

10. Your rights and choices

You can contact us at any time to:

• ask what personal information we hold about you and receive a copy;
• correct information that is wrong or incomplete;
• ask us to delete your information;
• object to or ask us to limit how we use your information;
• stop receiving business or marketing emails (you can also reply “unsubscribe” or use the opt-out wording in any email we send); and
• withdraw any consent you have given.

To make a request, email info@capslock.pk. We may need to confirm your identity before acting on it. We aim to respond within 30 days and do not charge a fee for reasonable requests. Some information may need to be kept for legal or contractual reasons, and we will explain if that applies.

Visitors from the UK, EU and other countries

If you are in the United Kingdom, the European Union or another country with data protection laws, you may have additional rights under those laws, such as the right to data portability and the right to complain to your local data protection authority (for example, the Information Commissioner’s Office in the UK). We will honour these rights on request. We would appreciate the chance to resolve any concern first, so please contact us before you complain.

11. Client data we handle for you

When we build or manage websites, apps, software, automations or marketing accounts for a client, we may handle personal information belonging to that client’s own customers or users. In that case we act on the client’s instructions, the client remains responsible for that information, and our project agreement sets out how it is handled. Questions about that information should go to the relevant client first.

12. Our software products

Our software products, such as FrontDesk and CapsLock Campus, may have their own privacy notices and terms that explain how data inside each product is handled. Where a product-specific notice exists, it applies to that product together with this policy.

13. Children

Our website and services are intended for businesses and adults. They are not aimed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our services, the tools we use or the law. The latest version will always be on this page, with the effective date at the top. If we make significant changes, we may also tell you by email or with a notice on our website.

15. Contact us

If you have any questions about this policy or how we handle your information, please contact us:

• Email: info@capslock.pk
• Phone / WhatsApp: +92 312 7032292
• CapsLock, Lahore, Pakistan