Privacy Policy
Who We Are
This Privacy Policy is issued by Omax Tech, registered with the Pakistan Software Export Board (PSEB) under registration number Z-25-19741/26, with registered address at B-41, Block 2, Gulistan-e-Johar, Karachi, Sindh 75290, Pakistan ("Omax Tech," "we," "us," or "our"). Omax Tech is a subsidiary of QAVI, its parent company, and also operates from offices in the USA (1047 Keswick Drive, Allen, Texas 75002) and UAE (IFZA Dubai Digital Park, Silicon Oasis).
This Policy explains how we collect, use, disclose, and protect personal information when you visit our website (https://omax.tech), submit a form, book a call, or engage us for services (collectively, the "Services"). It should be read together with our Term of Service.
This Policy governs website and lead-generation data. It does not govern data or materials you share with us as part of an active client engagement (e.g., source code, business data, discovery documents) - that data is governed by the confidentiality and data-handling terms of your signed Service Agreement / MSA / NDA, not this website Policy. See Section 10.
Information We Collect
Information You Provide Directly
Contact information — name, email address, phone number, company/organization name (collected via contact forms, the "Start My Project" form, and Calendly bookings).
Communication data — messages sent through contact forms, emails to sales/support, and call/meeting notes from consultations.
Project information — service inquiries, project requirements, and preferences you share when requesting a proposal. See Section 10 on how we treat this.
Information Collected Automatically
Technical information — IP address (and IP-derived approximate location), browser type/version, device type, operating system.
Usage data — pages visited, time and duration of visits, referring URLs, links clicked, and general interaction with the site.
Cookies and similar technologies — see Section 6 for the specific tools involved.
Information From Third Parties
Analytics providers (see Section 6.1).
Scheduling tools (Calendly) when you book a consultation.
Form/CRM tools (HubSpot) when you submit an inquiry.
LinkedIn, if you arrive via or interact with our LinkedIn advertising/content.
Hosting and infrastructure providers, as part of normal website operation.
How We Use Your Information, and Our Lawful Basis
| Purpose | What we use | Lawful basis (where GDPR/UK GDPR applies) |
|---|---|---|
| Responding to inquiries, scheduling calls, preparing proposals | Contact info, project info | Contract (steps to enter a contract at your request) / Legitimate interest |
| Client relationship management and service delivery | Contact info, communication data | Contract |
| Sending updates, marketing, or newsletters | Contact info | Consent (you can withdraw at any time — see Section 7) |
| Website analytics and performance improvement | Technical/usage data, cookies | Legitimate interest, or Consent where required by your cookie preferences (see Section 6) |
| Advertising and retargeting (e.g., LinkedIn) | Technical/usage data, advertising identifiers | Consent, obtained via the cookie banner |
| Fraud prevention, legal compliance, enforcing our Terms | Any of the above as needed | Legal obligation / Legitimate interest |
If you are located somewhere GDPR/UK GDPR does not directly apply, we still apply the equivalent standard as a matter of policy.
How We Share Your Information
| Category | Purpose | Provider(s) |
|---|---|---|
| Analytics | Understand site traffic and usage | Google Analytics (GA4) |
| CRM / lead management | Manage inquiries and client relationships | HubSpot (US data hosting) |
| Form handling | Process 'Start My Project' and contact submissions | HubSpot forms (US data hosting) |
| Scheduling | Book consultation calls | Calendly |
| Email delivery | Send transactional/marketing email | HubSpot (US data hosting) |
| Hosting & CDN | Host and serve the website | Vercel |
| Advertising | Retargeting and ad measurement | None currently in use |
| Error monitoring | Detect and fix website bugs | None currently in use |
| Legal | Comply with law, court orders, or protect our legal rights | Relevant authorities as required |
| Business transfers | In the event of a merger, acquisition, or asset sale | Successor entity |
A current list of our subprocessors is available on request by emailing contact@omaxtechnologies.com
International Data Transfers
Because Omax Tech operates across Pakistan, the USA, and the UAE, and uses third-party providers (including HubSpot and Vercel, which process data in the United States) to run our website and business operations, your personal information may be transferred to and processed in countries other than the one in which you reside, including Pakistan and the United States.
We take reasonable steps to ensure that any such transfer is conducted in accordance with applicable data protection law, and we work with reputable providers who maintain their own data protection commitments. If you have questions about a specific transfer, contact us at contact@omaxtechnologies.com
Cookies and Tracking Technologies
| Category | Purpose | Example tools |
|---|---|---|
| Strictly necessary | Core site functionality and security | Session and security cookies |
| Analytics | Understand how visitors use the site | Google Analytics (GA4) — e.g., _ga, ga*, _gid |
| Advertising | Measure and retarget ads | None currently in use |
| Functional | Remember preferences, support scheduling/forms | Calendly, HubSpot — e.g., __hstc, __hssc, hubspotutk |
A current list of our subprocessors is available on request by emailing contact@omaxtechnologies.com
Managing Cookies
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect core site functionality but may limit analytics and personalized advertising.
Your Privacy Rights
Depending on your location, you may have the right to:
Access — request a copy of the personal data we hold about you.
Correction — request correction of inaccurate or incomplete data.
Deletion — request erasure of your personal data, subject to legal retention requirements.
Restriction / Objection — object to or request restriction of certain processing, including profiling for advertising.
Portability — request your data in a portable format, where applicable.
Withdraw consent — for marketing communications and non-essential cookies, at any time.
To exercise these rights: email contact@omaxtechnologies.com with your request. We aim to acknowledge requests within 5 business days and respond substantively within 30 days, in line with GDPR requirements, or sooner where required by applicable local law.
Opt-out of marketing: every marketing email includes an unsubscribe link. You can also email us directly to opt out.
Opt-out of advertising cookies use the cookie banner (see Section 6.2) or your browser/device ad-settings to limit LinkedIn and other advertising tracking.
If you are in the EEA/UK and believe we have not addressed your concern, you also have the right to lodge a complaint with your local data protection authority.
Data Retention
We retain personal data only as long as necessary for the purposes it was collected, specifically:
| Data type | Retention period |
|---|---|
| Website inquiry / lead data (contact form, 'Start My Project') | 12 months from last contact, unless you become a client (in which case Section 8's client-data retention applies) or request earlier deletion |
| Calendly booking data | 12 months from the scheduled call date |
| Marketing/newsletter contacts | Until you unsubscribe, plus 1 business day to process the request |
| Analytics data | 2 months (GA4 configured retention setting) |
| Client engagement data (contracts, invoices) | Per statutory and tax retention requirements in the relevant jurisdiction |
A current list of our subprocessors is available on request by emailing contact@omaxtechnologies.com
Data Security
We apply technical and organizational measures appropriate to the sensitivity of the data we hold, including encryption in transit via HTTPS/TLS, access controls limiting data to authorized personnel, and due diligence on any third-party processor handling personal data on our behalf.
No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Website Leads vs. Client Project Data - and Confidentiality of Submitted Ideas
Website/lead data (contact form submissions, Calendly bookings, newsletter signups) is governed entirely by this Privacy Policy.
Client project data — anything shared with us after you engage Omax Tech for a project (source code, business documents, credentials, discovery-phase materials, data provided for AI/data engineering work, etc.) — is governed by the confidentiality and IP terms in your signed Service Agreement or NDA, not this Policy. Those documents typically impose stricter confidentiality obligations than this website Policy and address IP ownership separately (see our Terms of Service, Section 5).
Project ideas submitted through the website (e.g., via the "Start My Project" form, before any contract is signed) are treated as confidential business information, used solely to evaluate and respond to your inquiry. We will not use unsolicited project ideas for our own purposes without your consent.
Third-Party Links
Our website may contain links to external sites we do not operate (e.g., LinkedIn, Calendly's own site). We are not responsible for the content or privacy practices of any third-party site. We encourage you to review their privacy policies separately.
Children's Privacy
Our Services are not directed to individuals under 18, and we do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by a revised "Last Updated" date at the top of this page. Continued use of the Services after changes constitutes acceptance of the updated Policy.
Contact Us
For privacy questions, complaints, or to exercise your data rights:
Email: contact@omaxtechnologies.com
Website: https://omax.tech
Address: Omax Tech, B-41, Block 2, Gulistan-e-Johar, Karachi, Sindh 75290, Pakistan
Secure Your Data with Omax Tech
Omax Tech respects your privacy. We collect minimal personal and technical data solely to deliver our services, communicate effectively, and enhance security all without selling your personal information.