Privacy Policy

1 Who We Are

SpiderHunts Technologies (PVT) Limited ("SpiderHunts", "we", "us", "our") is a custom software development company providing AI integration, machine learning, business automation, web and mobile application development, UI/UX design, API development, web scraping, and related digital services.

We operate globally and are registered in Pakistan with offices in Lahore, Pakistan and London, United Kingdom. For the purposes of data protection law applicable to UK/EU individuals, SpiderHunts Technologies acts as the Data Controller.

Our website is available at spiderhunts.com.

2 Data We Collect

We may collect the following categories of personal data:

• Identity Data: Full name, company name, job title
• Contact Data: Email address, phone number, WhatsApp number, mailing address
• Project Data: Project briefs, requirements, documents, assets, and any other information you share with us during the course of a project
• Financial Data: Billing name, address, and payment reference details (we do not store full card numbers — payments are processed via third-party gateways)
• Technical Data: IP address, browser type and version, time zone, operating system, device type, pages visited, and referral source
• Usage Data: Information about how you interact with our website, including pages viewed, time on site, and clicks
• Communications Data: Records of correspondence, enquiries, and support requests sent to us via email, WhatsApp, or our contact form

3 How We Collect Data

We collect personal data through the following means:

• Direct interactions: When you complete our contact form, send us an email, message us on WhatsApp, or request a quote
• Project engagement: When you provide documents, specifications, or other materials as part of a service agreement
• Automated technologies: Through cookies, analytics scripts (Google Analytics), and server logs when you browse our website
• Third parties: From referral partners, social media platforms, or publicly available sources where relevant to a business enquiry

4 How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide quotes or proposals
• To deliver, manage, and invoice for the services you have engaged us for
• To communicate project updates, progress reports, and relevant notifications
• To process payments and maintain financial records
• To improve our website, services, and user experience
• To comply with legal obligations and resolve disputes
• To send occasional service-related communications (not marketing unless you have consented)
• To analyse website traffic and measure the effectiveness of our content via Google Analytics

We will never sell your personal data to third parties for marketing purposes.

5 Legal Basis for Processing

Under the UK GDPR and applicable data protection law, we process your personal data on the following legal bases:

• Contract: Processing is necessary to perform a contract with you (e.g., delivering the services you have commissioned)
• Legitimate interests: To improve our services, analyse website usage, and respond to business enquiries — where such interests are not overridden by your rights
• Legal obligation: To comply with legal, regulatory, or tax obligations
• Consent: Where you have given explicit consent, such as for marketing communications or the use of non-essential cookies. You may withdraw consent at any time

6 Data Sharing & Third Parties

We do not sell or rent your personal data. We may share data with the following categories of trusted third parties, strictly on a need-to-know basis:

• Cloud service providers: For hosting, storage, and project management (e.g., Google Workspace, Dropbox)
• Payment processors: To securely process invoices and transactions (e.g., Stripe, PayPal, Wise)
• Analytics providers: Google Analytics (anonymised usage data) to understand website performance
• Communication tools: Email, WhatsApp, Tawk.to live chat — used solely for client communication
• Sub-contractors: Vetted team members or freelancers who assist in delivering your project, bound by confidentiality obligations
• Legal / regulatory authorities: Where required by law, court order, or to protect the rights of SpiderHunts Technologies

All third parties we engage are required to handle your data securely and in accordance with applicable data protection law.

7 Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and collect usage data. The types of cookies we use include:

• Essential cookies: Necessary for the website to function correctly. These cannot be disabled.
• Analytics cookies: Placed by Google Analytics (GA4) to collect anonymised data about how visitors use our site (pages visited, session duration, referral source). This data helps us improve our content and user experience.
• Live chat cookies: Placed by Tawk.to to enable our live chat functionality and remember your chat session.

By continuing to use our website, you consent to the use of cookies as described above. You can manage or disable cookies through your browser settings at any time; however, disabling certain cookies may affect site functionality.

For more information about Google Analytics and how to opt out, visit: tools.google.com/dlpage/gaoptout

8 Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law:

• Client project data: Retained for the duration of the project and for up to 3 years thereafter, in accordance with our confidentiality obligations and for dispute resolution purposes
• Financial records: Retained for 7 years to comply with HMRC and tax regulations
• Enquiry / contact form data: Retained for up to 12 months if no project engagement follows
• Website analytics data: Retained in anonymised form per Google Analytics' default retention settings (up to 14 months)

When data is no longer required, it is securely deleted or anonymised.

9 Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data where there is no lawful reason for us to continue processing it
• Right to restrict processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Request a machine-readable copy of data you have provided to us
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at the details in Section 15. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10 Children's Privacy

Our website and services are directed exclusively at businesses and adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe that a child has provided us with personal data without appropriate consent, please contact us immediately and we will take prompt steps to delete that information.

11 International Data Transfers

SpiderHunts Technologies operates from both Pakistan and the United Kingdom. Your data may be processed or stored in either location. Where data is transferred outside the UK or European Economic Area (EEA), we take appropriate safeguards to ensure your data is protected to the same standard, including:

• Using Standard Contractual Clauses (SCCs) approved by the UK ICO or European Commission
• Engaging third-party processors that are certified under recognised data protection frameworks
• Implementing internal data access controls and encryption

By providing your data, you acknowledge that it may be transferred to and processed in countries outside your own.

12 Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (HTTPS/TLS) across our website and communications
• Access controls limiting who within our team can view project data
• Secure, password-protected cloud storage and project management tools
• Regular review of our data handling practices

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by law.

13 Third-Party Links

Our website may contain links to third-party websites, tools, or social media platforms (including Facebook, Instagram, LinkedIn, and X/Twitter). These sites have their own privacy policies, and we are not responsible for their content or data practices. We encourage you to review the privacy policy of any third-party site you visit.

14 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. The "Last Updated" date at the top of this page will always reflect the most recent revision.

For significant changes, we will make reasonable efforts to notify active clients by email. Continued use of our website or services following any update constitutes your acceptance of the revised policy.

15 Contact & Data Controller

If you have any questions, requests, or concerns regarding this Privacy Policy or how we handle your personal data, please contact our Data Controller: