This policy explains what personal data NovuLabs Technology Pvt Ltd collects through novulabs.net, why we collect it, how long we keep it, and what you can ask us to do with it. It covers the website. Data we process on behalf of clients under a services agreement is governed by that agreement and by the data processing terms within it, not by this policy.
Who we are
NovuLabs Technology Pvt Ltd is a software engineering company headquartered in Islamabad, Pakistan. For the purposes of this policy we are the data controller for personal data collected through this website.
For personal data we process while delivering services to a client, the client is the controller and we act as a processor under the terms of the relevant services agreement.
What we collect, and why
Information you give us. When you submit the contact or consultation form we collect your name, work email address, the service area you selected and the content of your message. We use it solely to respond to your enquiry and to conduct any resulting engagement. If you subscribe to updates we collect your email address for that purpose only.
Information collected automatically. Our hosting infrastructure records standard server logs — IP address, user agent, requested URL, timestamp and referring page — which are used to operate the site securely and to diagnose faults.
What we do not collect. We do not ask for, and you should not send us, sensitive personal data, financial account details, health information or credentials through this website's forms.
Legal basis for processing
Where the General Data Protection Regulation applies to a visitor, we rely on legitimate interests for responding to business enquiries and for the security logging described above, and on consent for marketing emails. Consent can be withdrawn at any time using the unsubscribe link in any such email or by writing to us.
Who we share it with
We do not sell personal data and we do not share it for advertising purposes.
We share data with service providers who help us operate: our hosting provider, and the transactional email provider used to deliver form submissions. These providers act on our instructions and are bound by contract.
We will disclose data where we are legally required to do so by a competent authority.
International transfers
Our infrastructure providers may process data outside Pakistan. Where we transfer personal data internationally we do so under the relevant provider's contractual data protection terms. [Client to confirm hosting regions and list them here.]
How long we keep it
Enquiry correspondence is retained for 24 months from the last contact, unless it becomes part of a client engagement record, in which case it is retained for the period set out in the services agreement. Subscription email addresses are retained until you unsubscribe. Server logs are retained for 90 days.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, or object to our processing it. Write to info@novulabs.net and we will respond within 30 days.
If you are in the EU or UK and are not satisfied with our response, you may complain to your national supervisory authority.
Security
This site is served exclusively over HTTPS. Access to enquiry data is limited to staff who need it to respond. We would rather describe our controls accurately than make broad assurances: if you are evaluating us as a vendor and need detail on our security posture, ask and we will provide it under NDA.
Changes and contact
We will update this page if our practices change, and the date at the top will reflect the most recent revision.
Questions about this policy can be sent to info@novulabs.net, or by post to NovuLabs Technology Pvt Ltd, Islamabad, Pakistan.