Who is responsible for your data
Shahid Bahader IT Services, a sole proprietorship owned by Shahid Bahader and trading as SB IT Services, is the controller of the personal data described here. Our address is Flat No. A-79/3 Shaheen Camp, 25000, Peshawar. For any privacy question or request, email info@shahidbahader.dev.
What we collect and why
When you contact us or ask for a quote
We collect your name, email address, company (if you give it), the service and budget you choose, and your message. We also record your IP address and browser type to block spam. We use this to answer you and prepare a proposal. Legal basis: taking steps at your request before a contract, and our legitimate interest in replying to enquiries and keeping spam out.
When you leave a review
We collect your name, email address, the rating and text of your review, and optionally your role, company and country, plus your IP address to block spam. Your email address is never shown. Reviews are published only after we approve them and with your consent, which you can withdraw at any time. Legal basis: your consent.
When you are a client
We keep your contact details, project details, proposals, invoices, payments and our emails with you, and give you access to a client portal. Legal basis: performing our contract with you, and our legal obligation to keep business and tax records.
When you buy Bahader Loyalty Pro
Paddle.com processes your order and payment as Merchant of Record. Paddle shares with us your name, email address, country, what you bought and the order status. We never see your full card details. To manage your licence, we store your licence key and the website addresses where it is activated. When Bahader Loyalty Pro checks your licence or looks for updates, it sends us your website address, the plugin version and the licence key. Legal basis: performing our contract with you.
The free Bahader Loyalty plugin does not send any data to us.
When you visit this website
We count page views without cookies. For each view we store the page, the website you came from, your device type (mobile, tablet or desktop) and, when available, your country. To count unique visitors we use a code that changes every day and cannot be turned back into your IP address; we do not store the IP address itself. Legal basis: our legitimate interest in understanding how the website is used.
This website loads its fonts from Google Fonts, so your browser sends your IP address to Google when a page loads.
Cookies
We only use cookies that the website needs to work: a session cookie and a security token that protect its forms. We do not use advertising or tracking cookies, so there is no cookie banner.
Who we share data with
- Paddle.com, our reseller and Merchant of Record, for orders, payments, invoices, tax and refunds. See Paddle's privacy notice.
- Our hosting and email providers, who store this website, our database and our email.
- AI writing tools (such as Anthropic or OpenAI), when we use them to help draft a proposal from the project details you sent us.
- Professional advisers, such as accountants, where needed for our business.
- Authorities, such as tax authorities, where the law requires it.
We do not sell your personal data.
International transfers
We are based in Pakistan, and our service providers may store data in other countries. If you are in the UK or the European Economic Area, your data is transferred to Pakistan, which does not have an adequacy decision. We make that transfer because it is necessary to answer your request or carry out our contract with you, and we protect your data as described in this policy.
How long we keep data
- Enquiries that do not lead to a project: up to 2 years after our last contact.
- Client and order records, including invoices: 6 years after the end of the project or licence, as tax law requires.
- Licence records: while the licence is active, then 6 years.
- Reviews: until you ask us to remove them.
- Page view statistics: 13 months, then deleted automatically.
Your rights
Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, limit how we use it, object to our use of it, or receive a copy to give to someone else. Where we rely on your consent, you can withdraw it at any time. We reply within one month. If you are not happy with our answer, you can complain to the data protection authority where you live, such as the ICO in the UK.
Security
The website uses HTTPS. Account passwords are stored hashed and other access keys encrypted, access to our systems is protected, and we only collect what we need.
Children
Our website and products are for businesses and adults. We do not knowingly collect data from children under 16.
Changes
We may update this policy. The date at the top shows when it last changed.