Privacy policy

Who we are

Axtra Studios is a design, development and AI agency in Lahore, Pakistan. This policy explains what we learn about you when you visit axtrastudios.com or get in touch with us, what we do with it and what you can ask of us. We are the controller of that information.

What you give us

The site has two forms: the short one at the foot of most pages and the project brief on /contact. When you send one we receive what you typed in: your name and email address and, depending on the form, your company, phone number, budget, timeline, the services you are interested in, how you heard about us, your message and any file you attach. We ask for nothing else, and you never need an account. When it arrives, we send one automatic email to the address you gave, to confirm it reached us.

With it, the form sends how you reached the site: the page you first landed on, the site that linked you to us, and any campaign tags in that link (from a LinkedIn post or an ad, for example). It tells us which channels bring enquiries. None of it is stored on your device; it travels with your message and nowhere else.

If we go on to work together, we will also hold what a project needs, such as contact details, contracts and invoices, and the material you share with us for the work.

If you apply for a job

When you apply through our careers pages we receive what you give us: your name, email address, phone number if you add it, where you are based, whether you can work from our studio, links to your work, your note and your CV. We use it only to consider your application and to talk to you about it. It is not added to our customer records and it is never used for marketing.

When it arrives we send one automatic email to confirm it reached us, and our team is told that a new application has come in, with the role and your first name only. If we invite you to the next steps, we will also hold our notes from your interviews and your practical task.

Sensitive information

We do not ask for sensitive information, such as health, financial account or government ID details. Please do not include it in a form or an attachment.

What is collected automatically

• Server logs. Our hosting provider records each request (IP address, browser, page and time) to run and protect the site. We do not use these logs to identify you.
• Analytics, only if you allow it. If you allow analytics in the cookie notice, our analytics tools record the pages you view, how you arrived, your device and browser, an approximate location, and how pages are used. The next section says which tools and what each records. If you choose Reject all, or do nothing, none of them loads.
• Advertising, only if you allow it. If you allow marketing cookies, advertising pixels record which pages you visit and whether you send an enquiry or book a call, as described under Advertising below.

Analytics

Google Analytics counts visits and pages and tells us how people find the site. It derives an approximate location from your IP address but does not store the address itself. To learn how Google uses this information, see how Google uses information from sites or apps that use its services. You can also block it on any site with Google’s Analytics opt-out add-on.

Microsoft Clarity shows us how pages are used, through session replays and heatmaps of clicks, scrolling and mouse movement, so we can see where the site is unclear. It never records what you type into a form: our forms are masked in full and their contents never leave your browser. We have told Clarity not to use your visit for advertising. Microsoft’s privacy statement explains how it handles data.

Both run only if you allow analytics, and stop when you change your mind.

Advertising

With your permission (the Marketing choice in the cookie notice), we use pixels and similar technologies from third parties, including Meta, to collect information about your visit: the pages you view and whether you send an enquiry or book a call. These advertising platforms use it to measure how our ads perform and to show our ads to people who have visited the site, on their own services and across the devices where you are signed in to them. They never receive what you type into our forms.

You can say no at any time: turn Marketing off in Cookie settings, or send the Global Privacy Control signal from your browser, which we treat as a refusal. You can also opt out of interest-based advertising more widely at Your Online Choices (Europe) and aboutads.info/choices (United States).

Cookies

We set one cookie of our own, to remember your cookie choices. Analytics and marketing cookies are set only if you allow them, each separately, and a Global Privacy Control signal from your browser counts as a refusal of marketing. We keep a record of each choice (a random consent ID, what you allowed and when, never your name or IP address) as proof of your consent. What each cookie does and how long it lasts is in our cookie policy. You can change your mind at any time: Cookie settings.

Why we use it, and on what basis

• To answer your enquiry and, if you want, to prepare a proposal: this is a step you asked us to take before a possible contract, and our legitimate interest in replying to people who write to us.
• To keep track of our conversations with people and companies who contact us, so whoever on our team picks up has the history: our legitimate interest in running the business.
• To deliver a project we agree on: performing our contract with you or your company.
• To consider your job application: steps you asked us to take before a possible employment contract, and our legitimate interest in hiring the right people. Keeping it on file for future roles is only with your consent, given in the form.
• To understand how the site is used and improve it: only with your consent, which you can withdraw whenever you like.
• To measure our advertising and show our ads to people who have visited: only with your consent to marketing cookies, which you can withdraw whenever you like.
• To keep the site secure and working, and to meet our legal obligations: our legitimate interest in running it safely, and the law.

We do not use your details for automated decisions, and we do not sell them.

Who helps us handle it

We share information only with service providers that work on our behalf, and only what each needs for its job. They include:

• Website hosting, which serves and protects the site.
• Email delivery, which brings your form or application to our inbox and sends you the confirmation.
• Customer relationship management, where we keep track of each enquiry and our conversation about it. Any file you attach stays in our inbox.
• Data storage, which keeps the record of your cookie choices.
• Team messaging, which alerts our team that a new enquiry or application has arrived, so we can reply quickly.
• Scheduling, if you choose to book a call. Straight after you send a form, the calendar opens on this page with your name and email already filled in, so you do not type them twice. Booking links elsewhere on the site carry campaign tags, never your name or email.
• Analytics, named above, and only with your consent.
• Advertising platforms, described above, and only with your consent to marketing cookies.
• Embedded video, only when you press play on a video review. Nothing is requested from the video provider before you do.

We would also disclose information where the law requires it, or to establish or defend a legal claim.

Where it is processed

We work from Pakistan, and our service providers process data in the United States, the European Union, the United Kingdom and elsewhere. Where the law requires it, these transfers are protected by safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

An enquiry stays with us while we talk and, if we work together, for as long as the project and our records require. An enquiry that does not lead to work is deleted within 24 months. A job application that does not lead to a role is deleted within 12 months, or within 24 months if you asked us to keep it on file for future roles; if you join us, it becomes part of your employment record. Google Analytics keeps its data for 14 months. Microsoft Clarity keeps recordings for 30 days (a small random sample, and any we mark, for up to 9 months) and heatmaps for up to 9 months. The record of your cookie choices is kept for two years. Server logs are kept for a short period set by our hosting provider.

Security

The site is served only over HTTPS, forms travel encrypted, and access to enquiries is limited to the people who answer them. No method is perfectly secure, but we take reasonable care, and if a breach ever put your information at risk we would tell you and the authorities as the law requires.

Children

The site is meant for businesses and is not directed at anyone under 16. If you believe a child has sent us their details, tell us and we will delete them.

Other websites

Case studies link to our clients’ live products, and the footer links to our social profiles. Those sites have their own policies, and this one stops at our door.

Business transfers

If Axtra Studios is ever merged, sold or reorganised, the information we hold could pass to the new owner, who would remain bound by this policy for it.

Your rights

Depending on where you live (for example under the GDPR or the UK GDPR), you can ask us to show you what we hold about you, correct it, delete it, limit or object to how we use it, or give it to you in a portable form. Where we rely on consent you can withdraw it at any time, which does not affect what happened before. Email info@axtrastudios.com and we will reply within one month. You can also complain to your local data protection authority.

For California residents

In the last twelve months we have collected the identifiers and enquiry details described above, and, with consent, analytics about site use. We do not sell personal information. If you allow marketing cookies, the advertising platforms described above receive information about your visit so they can show you our ads, which California law can treat as “sharing” for cross-context behavioural advertising. You can opt out of that at any time by turning Marketing off in Cookie settings or by sending the Global Privacy Control signal, which we honour. You may also ask to know, correct or delete what we hold, and we will not treat you differently for asking.

Changes

When what is true about the site changes (a new kind of tool, a new form), we update this page and the date at the top. If a change needs your consent, the cookie notice will ask again.