Privacy policy

This privacy policy explains how StackMIME (“we”, “us”) collects and uses personal information when you visit stackmime.com, send us an enquiry or work with us. StackMIME is a website design and development business based in Pakistan.

We work with businesses in several countries, so this policy is written with the UK and EU General Data Protection Regulation (GDPR), Australia’s Privacy Act 1988 and Saudi Arabia’s Personal Data Protection Law (PDPL) in mind.

We are responsible for the personal information described here. You can contact us about it at any time at info@stackmime.com.

Information you give us

• Enquiry and project forms: your name, company or business name, email, phone or WhatsApp number (optional), your current website, what you need, a budget range, your timeline, project details and how you heard about us.
• Free website check: your website address and the contact details you enter.
• Emails, WhatsApp messages and calls: whatever you choose to tell us.
• If you become a client: the content you send for your website (text, images and logos) and the details we need for quotes, invoices and payment.

Information collected automatically

• Analytics, only if you accept: the pages you visit, how you found us, your approximate location (country and city), your device and browser, and clicks on our phone and email links, collected by Google Analytics.
• Security logs: our hosting provider records IP addresses and requests to keep the website secure and working.
• Preferences in your browser: your cookie choice, the colour theme and whether you have seen the intro screen. These stay on your device and are not sent to us.

We don’t take card payments on this website, and we don’t ask for sensitive information such as health, religion or financial account details.

• To reply to your enquiry and prepare a quote, because you asked us to. Under the GDPR this is a step taken at your request before a contract.
• To deliver your project, support and any care plan, to perform our contract with you.
• To send invoices and keep accounts, because the law requires us to.
• To understand how the website is used, only with your consent, given in the cookie banner.
• To keep the website secure and stop spam, in our legitimate interest in protecting the site and the people who use it.

We don’t use your information for advertising, we don’t sell or rent it to anyone, and we don’t make automated decisions about you. We only email you about your enquiry or your project, and we never add you to a mailing list without asking.

We use Google Analytics 4 to count visits and to see which pages help people. Google Analytics only loads after you choose Accept analytics in the cookie banner. If you choose No thanks, Google Analytics doesn’t load and no analytics cookies are set.

Cookies set only after you accept

• _ga: tells visits apart. Kept for up to 2 years.
• _ga_ followed by our measurement ID: keeps track of the current visit. Kept for up to 2 years.

Stored in your browser, not cookies

• sm-consent: remembers your cookie choice for 12 months.
• sm-pl and sm-theme: remember that you have seen the intro screen and which colour theme you saw, until you close the tab.

You can change your choice at any time with Cookie settings at the bottom of every page, or by clearing cookies in your browser. Google explains how it uses data in its privacy policy.

• Our web hosting provider, which stores the website, form entries and email.
• Our email system, which sends replies and form notifications from info@stackmime.com.
• Google, for Google Analytics, only if you accept analytics cookies.
• WhatsApp (Meta), when you choose to message or call us on WhatsApp.
• Payment services and banks, such as Payoneer, local bank transfer or our representative in Saudi Arabia, when you pay an invoice.
• Professional advisers and authorities, such as our accountant, or a public authority when the law requires it.

Each service receives only what it needs to do its job. We don’t allow any of them to use your information for their own marketing.

We are based in Pakistan, and some of the services above store data in other countries, including the United States and the European Union. When personal information leaves the country you are in, we rely on the safeguards our providers offer, such as standard contractual clauses, and we choose providers with strong security.

• Enquiries that don’t become a project: 2 years from your last message, then deleted.
• Client projects and invoices: for as long as we need them for the project, its support and the accounting and tax rules that apply to us.
• Analytics data: kept in Google Analytics for the retention period set in our account, then deleted automatically.
• Security logs: kept by our hosting provider for a short period.

Depending on where you live, you can ask us to:

• show you the personal information we hold about you and give you a copy;
• correct anything that is wrong or out of date;
• delete it;
• restrict or stop how we use it;
• send it to you, or to someone else, in a common format;
• withdraw your consent. For analytics, use Cookie settings in the footer.

Email info@stackmime.com. We reply within 30 days and may ask you to confirm who you are first. There is no charge.

If you are not happy with our answer, you can complain to the data protection authority where you live, for example the Information Commissioner’s Office (ICO) in the UK, your national authority in the EU, the Office of the Australian Information Commissioner (OAIC) or the Saudi Data and AI Authority (SDAIA).

The website runs over HTTPS. Admin accounts are protected, form entries are stored in WordPress with access limited to our team, and we keep WordPress, our theme and our own plugins up to date. Our forms block spam without tracking you.

No system is perfectly secure. If a security incident ever affects your personal information, we will tell you, and the relevant authority, as the law requires.

Our services are for businesses and adults. We don’t knowingly collect personal information from anyone under 18. If you think a child has sent us information, email us and we will delete it.

We may update this policy when our services or the law change. The date at the top of this page shows the current version. If a change is significant, we will say so clearly on this page.