Privacy Policy — SQ Interactive
Effective date: 5 November 2026
1. Who we are
SQ Interactive ("SQ", "we", "us") is a digital and immersive studio based in Lahore, Pakistan, founded by Shazaib Qaiser, offering web development, 360° virtual tours, VR/AR, Shopify, and AI automation services. We are the controller of personal data collected through https://sqinteractive.com (the "Site"). Based in Lahore, Pakistan. Contact: admin@sqinteractive.com
2. Data we collect
- Contact form: name, email, phone number, project type, and your message.
- WhatsApp / email / social messages: whatever you choose to send us when you contact us via WhatsApp (wa.me link), email, Facebook, Instagram, LinkedIn or YouTube.
- Analytics and usage data (only with your consent where required): pages viewed, clicks, scrolls and mouse movement, device/browser type, approximate location derived from IP address, referring site, and session timing — collected via Google Analytics 4 and Hotjar/Contentsquare.
- Preferences stored on your device: your language choice (English/Urdu) and the state of our on-site chat assistant. These stay in your browser and are not sent to us.
- Client project data: if you become a client, files, content, credentials and data you share for the project (see section 7).
We do not knowingly collect special-category data or data from children under 16.
3. How and why we use it (legal bases)
| Purpose | Data | Legal basis (GDPR/UK GDPR where applicable) |
|---|---|---|
| Replying to enquiries, sending quotes | Contact data, message | Steps prior to a contract / legitimate interest |
| Delivering client projects, invoicing | Project & contact data | Contract; legal obligation (tax/records) |
| Site analytics and improvement | Analytics data | Consent |
| Security, abuse/spam prevention | Technical data | Legitimate interest |
| Legal claims and compliance | As needed | Legal obligation / legitimate interest |
We do not sell personal data and do not use it for automated decisions with legal effects. We will only send marketing emails if you have asked us to or as permitted by law, and you can opt out anytime.
4. Who we share it with (processors)
- Form handling service — FormSubmit (formsubmit.co) — receives contact-form submissions and forwards them to our email.
- Email provider — hosts our business mailbox.
- GitHub Pages (GitHub, Inc.) — hosts the Site and may log IP addresses for security/operations.
- Google (Google Analytics 4, Google Fonts) — analytics; font delivery (your IP is sent to Google when fonts load).
- Hotjar / Contentsquare — behaviour analytics (heatmaps, session insights).
- Meta (WhatsApp) — if you contact us via WhatsApp.
- Contractors and tools engaged on client projects, under confidentiality obligations, only as needed.
- Authorities where required by law.
5. International transfers
We are based in Pakistan and our providers are mainly in the United States and elsewhere. If you are in the EU/EEA, UK or another country with transfer rules, your data will be transferred outside your country. Where required, we rely on the safeguards our providers offer (e.g. Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider is certified).
6. Retention
- Enquiries that do not become projects: up to [24] months, then deleted.
- Client and invoicing records: for the duration of the engagement plus [6] years or as required by Pakistani tax law.
- Analytics: per tool settings (Google Analytics retention set to 14 months; Hotjar per its default retention).
7. Client project data
When we work on your project we process data on your instructions. We use it only to deliver the services, keep it confidential, limit access to those working on the project, and return or delete it at the end of the engagement on request (subject to legal retention). Where you are subject to GDPR and we process personal data of your customers, we will sign a data processing agreement on request.
8. Security
We use reasonable technical and organisational measures (e.g. HTTPS, access control, strong passwords). No internet transmission is completely secure, and we cannot guarantee absolute security.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent at any time (without affecting prior processing). EU/UK residents may complain to their local supervisory authority (e.g. Datatilsynet in Norway). Australian residents may contact the OAIC. To exercise any right, email admin@sqinteractive.com; we will respond within one month.
10. Pakistan
We process data in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act 2016. We will update this policy if Pakistan's proposed Personal Data Protection law is enacted.
11. Changes
We may update this policy and will change the effective date above. Material changes will be highlighted on the Site.
12. Contact
admin@sqinteractive.com · Lahore, Pakistan