Your information
Privacy policy.
This notice explains how Zovrak handles information about website visitors, people making business enquiries and people booking an ad audit.
1. Who is responsible
Zovrak is the trading name used by Muhammad Salman, based in Peshawar, Pakistan. In this notice, “Zovrak”, “we” and “us” mean Muhammad Salman operating Zovrak.
For our own enquiries, audit bookings and business records, we decide why and how personal information is used. Where applicable law uses the term, we act as the controller for that information.
Privacy contact: Muhammad SalmanEmail: hello@zovrak.com
Location: Peshawar, Pakistan
This notice concerns information about people, including identifiable business contacts. It does not treat a company's name alone as personal information.
2. Information we receive and its sources
- Enquiries: your name, email address, business or role, website, message and any other information you choose to send by email or social message.
- Audit bookings: the details you provide through Calendly, such as your name, contact email, appointment time and answers to the questions shown on the booking page. We receive the information needed to arrange and respond to that booking.
- Audit discussions: information you share about your store, offer and marketing, together with relevant notes and correspondence.
- Website delivery: when you request a page, the hosting service receives technical connection information, including your IP address and the requested resource. Security or access logs may also contain request time, browser details and error information.
The information needed for a booking is identified on Calendly's booking page. You can choose what to include in an email, but without a way to contact you we cannot respond.
Please do not send passwords, payment card details, customer lists or personal health information with an initial enquiry. The website has no upload or payment form.
If someone refers you to us, or we use a public professional source to contact you, we will identify the source and explain the relevant use when required. Public availability does not remove applicable privacy or marketing rules.
3. How information is used
We use relevant information to answer enquiries, schedule and provide requested audits, discuss a possible engagement, maintain related business records, address complaints and keep the website and communications secure.
Where UK or EU data protection law applies, the basis depends on the purpose and your relationship with us:
| Purpose | Basis where applicable |
|---|---|
| Responding to a request from an individual considering a service | Steps requested before entering a contract, where the individual would be the contracting party. |
| Corresponding with a company's representative and organising an audit | Legitimate interests in responding to business requests and managing those discussions, subject to the person's rights and reasonable expectations. |
| Maintaining necessary records and handling a legal obligation | Compliance with a specific applicable obligation; legitimate interests where needed to establish or defend a claim. |
| Website delivery and security | Legitimate interests in operating the website and preventing abuse. |
| Any optional promotional subscription introduced in future | Separate consent where required. There is no promotional subscription form on this website. |
We do not treat visiting the website or accepting this notice as consent to marketing. If we rely on consent for a particular use, you can withdraw it without affecting earlier lawful processing.
The website does not make automated decisions about you that produce legal or similarly significant effects.
4. Providers and other disclosures
Service providers may process information needed to host the website, deliver email, manage calendar invitations and arrange bookings. These functions involve only the information relevant to their purpose.
Calendly: we use Calendly to arrange audit appointments. It processes meeting information on our behalf under its customer terms and data processing arrangements. It also handles some information for its own purposes when you use its service. See Calendly's privacy notice (opens in a new tab) and data processing addendum (opens in a new tab).
Information may also be disclosed where necessary to meet an applicable legal duty, respond to a lawful request, resolve a dispute or protect against fraud or misuse. We do not publish your enquiry or audit details as a testimonial or case study without your permission.
Our website code does not send visitor information to advertising networks. Booking an audit does not authorise us to upload your contact information into an advertising audience.
5. Cookies, tracking and external links
The Zovrak pages contain no advertising pixels, analytics tags, embedded social feeds or embedded scheduling tools. Their code does not set cookies or save information in your browser's local or session storage. Images and styles are served with the website, and fonts use your device's installed fonts.
Technical processing needed to deliver or secure a website is different from advertising tracking. Hosting and security services can process connection information as described above.
Calendly, Instagram, Facebook and LinkedIn are reached through ordinary links. Their own services may use cookies and collect technical information when you visit them. Read their notices and use their privacy controls. Our responsibility for information we receive from your booking or message continues as described here.
There is no Zovrak behavioural advertising activity in these pages for a Do Not Track or Global Privacy Control signal to disable. This does not describe the practices of external websites.
6. International processing
Zovrak operates from Pakistan, so information sent to us can be accessed and handled there. Calendly states that it processes information in the United States and other countries where it or its providers operate. Other provider locations depend on the service and its arrangements.
Privacy rules and government access powers can differ between countries. Where a transfer is regulated, an appropriate permitted transfer basis and any required protections must be in place. Your use of this website is not treated as permission to waive those protections.
You can contact us for information about the providers, processing locations and transfer arrangements relevant to your enquiry. Client data transferred for advertising work is assessed separately before access is agreed.
7. Retention and security
How long information is needed depends on what it is used for:
- Enquiries and audit notes: while responding, completing the requested review and dealing with a related follow-up or a continuing discussion.
- Client and financial records: while providing an agreed service and for any relevant contractual, tax, accounting or legal period afterwards.
- Privacy requests and complaints: long enough to resolve the request and retain the record needed to explain the response.
- Technical logs and provider backups: according to the hosting or other provider's applicable retention settings and operational needs.
Information should be deleted or anonymised when it is no longer needed for its purpose, unless there is a lawful reason to retain it. You can ask about the retention of your particular information or request deletion.
We limit the information requested through this website. For campaign access, use the platform's access permissions rather than sharing a password. No website, device or email service can guarantee absolute security.
8. Your choices, requests and complaints
Contact hello@zovrak.com with a description of your request and the email address or booking it concerns. You can ask what information we hold, request a correction, ask for deletion or object to a particular use. The legal rights and exceptions available depend on the law that applies.
We may need proportionate information to confirm your identity or your authority to act for someone else. Please do not send identity documents unless they are specifically needed and a suitable method has been agreed.
We will respond within the period required by applicable law and explain a refusal or any permitted extension. If you are unhappy with our response, reply to ask Muhammad Salman to review it. This does not prevent you from contacting a regulator.
You can stop a marketing conversation by asking us not to contact you for that purpose. A limited record of an objection may need to be retained so it is respected.
9. Information for your country
These sections explain relevant rights where the law applies to Zovrak's handling of your information. They do not promise that every privacy law applies to every visitor or business relationship.
United Kingdom and Ireland
Where UK GDPR or EU GDPR applies, rights can include access, correction, erasure, restriction, portability and objection. You can object to direct marketing at any time. You can withdraw consent where that is the basis for processing. Conditions and lawful exceptions apply to some rights.
You can complain to the UK Information Commissioner's Office (opens in a new tab), the Irish Data Protection Commission (opens in a new tab) or another competent supervisory authority. Our purposes and legal bases and international processing sections provide further information.
Australia
Where the Australian Privacy Act and Australian Privacy Principles apply, you may request access to and correction of your personal information and complain about its handling. Please raise your concern with us so we can investigate and explain the outcome. You may also contact the Office of the Australian Information Commissioner (opens in a new tab).
Our location and the providers we use can involve overseas handling, including in Pakistan and the United States. Ask us about the arrangements relevant to your information.
New Zealand
Where the New Zealand Privacy Act applies, you may request access to your personal information and ask for a correction. If a requested correction is not made, you can ask for a statement of the correction sought to be attached to the information. Overseas disclosures and information obtained indirectly are subject to the relevant privacy principles.
You can raise a concern with us and, if needed, contact the Office of the Privacy Commissioner (opens in a new tab).
Canada
Where applicable Canadian law requires it, we seek meaningful consent for collecting, using or disclosing personal information, subject to lawful exceptions. You may ask to access or correct your information, question how it is handled or withdraw consent, subject to legal and contractual limits.
Information processed outside Canada may be accessible to authorities under the laws of those countries. You can contact the Office of the Privacy Commissioner of Canada (opens in a new tab) or the relevant provincial privacy authority about a concern.
United States
State privacy rights depend on where you live and whether a law covers the business and the information involved. Where applicable, rights may include access, correction, deletion, a copy of information and opting out of specified sales, sharing or targeted advertising. Some laws also provide an appeal process or permit authorised representatives to make requests.
To exercise a right or appeal our response, contact hello@zovrak.com. We will assess the request under the applicable law. We will not penalise you for exercising a protected privacy right.
Serving a California business alone does not establish coverage under the California Consumer Privacy Act. The California Privacy Protection Agency's guidance (opens in a new tab) explains its scope and rights.
10. Client campaign data
This notice describes our own website and business communications. If a brand engages Zovrak to work with its advertising accounts or customer information, the roles, permissions, instructions, security requirements and deletion arrangements must be set out in the relevant service and data processing agreements.
A brand remains responsible for its own lawful collection and use of customer information. Zovrak's role depends on the actual work. Listing Meta, Google or TikTok as a service does not mean those advertising tools are running on this website.
If you are a customer of a brand and your request concerns its store or advertising, contact that brand first. Where we are processing information on its instructions, we will direct the request appropriately and assist as required.
11. Changes and contact
We will update this notice when relevant practices change and show the revised date at the top. Where required, we will provide a more direct notice of a material change or request consent before a new use begins.
The website is intended for business enquiries. We do not ask visitors to provide information about children. If such information has been sent in error, contact us so we can address it.
For questions, requests or complaints, email hello@zovrak.com and address your message to Muhammad Salman.
