Privacy Policy

Last Updated: August 25, 2026 - Version 2.0

1. Introduction

This Privacy Policy explains how Vebrixa ("Vebrixa", "we", "us" or "our") collects, uses, stores and protects your personal information when you visit our website, contact us, or engage our web design, development, SEO or website maintenance services.

Vebrixa is a remote-first web design studio operated by Vebrixa, based in Faisalabad, Pakistan, serving clients across Australia and internationally. Because we work with clients in multiple countries, this policy sets out our global practices first, followed by specific rights that apply depending on where you live.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

2. Information We Collect

We collect only the information we need to deliver our services:

Information you give us directly:

Name, email address and phone number (when you submit an enquiry form or contact us)
Business details relevant to your project (company name, industry, existing website)
Project materials you choose to share (text, images, logos, brand assets, login credentials for your own hosting/accounts)
Communication records (emails, WhatsApp messages, video call notes)

Information collected automatically:

Payment information:

We never see or store your full card details. Payments are processed by third-party payment providers, who handle your financial data under their own security standards.

3. How We Use Your Information

We use your personal information to:

Respond to enquiries and provide quotes
Deliver, manage and support your web design or maintenance project
Send project updates, invoices and service-related communications
Improve our website, services and customer experience
Meet legal, accounting and tax obligations

We do not sell your personal information, rent it, or share it with third parties for their marketing. We do not add you to mailing lists without your consent.

4. Cookies & Analytics

Our website uses essential cookies (needed for the site to function) and analytics cookies (to understand how visitors use the site, so we can improve it). You can disable cookies in your browser settings at any time; parts of the site may then function differently.

5. Third-Party Services

To run our business, we rely on trusted third-party providers. These may include website hosting services, email and communication tools (such as Google Workspace and WhatsApp Business), analytics providers (such as Google Analytics) and payment processors. Each provider processes data under its own privacy and security standards. We only share the minimum information required for them to perform their function.

6. Data Storage & Security

Your information is stored using reputable cloud service providers with industry-standard security measures, including encryption in transit, access controls and regular backups. Access to your personal information is limited to Vebrixa personnel who need it to deliver your service.

7. International Data Transfers

Because Vebrixa operates remotely from Pakistan and uses international cloud infrastructure, your personal information may be transferred to, and processed in, countries other than your own — including Pakistan and the locations of our cloud providers' servers. Wherever your data is processed, we apply the protections described in this policy.

8. Data Retention

We keep enquiry records for up to 24 months. Project files, communications and invoices are retained for up to 7 years where required for tax and legal purposes. You may request earlier deletion of information we hold about you (see Your Rights below), subject to legal retention requirements.

9. Your Rights (Global)

Wherever you live, you may contact us at any time to:

We respond to every request within 30 days.

10. Additional Rights for Australian Users

If you are located in Australia, we handle your personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). In addition to the rights above, you may:

To make a request or complaint, contact us at the email below. We take complaints seriously and will respond promptly and honestly. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

11. Additional Rights for EEA/UK Users (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict or port your personal data, and to object to certain processing. Our lawful basis for processing is typically performance of a contract (delivering your project) or legitimate interests (responding to enquiries, improving our services). You also have the right to lodge a complaint with your local supervisory authority.

12. Additional Rights for California Residents

If you are a California resident, you have the right to know what personal information we collect and how it is used, and to request deletion of your personal information, subject to permitted exceptions. We do not sell personal information as defined by the CCPA.

13. Children's Privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page shows the current version. Material changes will be highlighted on this page, and where appropriate, communicated directly to existing clients.

Contact Us

Have questions about your privacy or how we handle your information?

We reply within 4 hours during AEST business hours (Mon–Fri, 9am–7pm).