Privacy Policy

Effective date: 22 July 2025

This Privacy Policy explains how Clivo Labs, trading as Clivo Labs (“Clivo Labs,” “we,” “us,” or “our”), collects, uses, discloses, and safeguards your personal information when you visit our website, contact us, or use our services and SaaS products. Please read it carefully to understand our practices regarding your data and how we treat it.

1. Introduction

Clivo Labs is a technology company offering web development, AI solutions, data analytics, social media marketing, search engine optimisation, and custom SaaS development services. We also operate three software products: Zeptal, WaveX, and TripStack. The data controller responsible for your personal information is Clivo Labs, registered in Islamic Republic of Pakistan, with its registered office at Near Taj Masjid, Street # 3 Mubarak, Mohallah Akbar Shaheed Colony, Kot Lakhpat, Lahore, Lahore, Punjab 54000, Pakistan.

This policy covers the https://www.clivolabs.com website and all associated services and products, except where a product presents its own supplementary privacy notice. By using our website or services, you acknowledge that you have read and understood this policy.

2. Information We Collect

Information you provide to us

When you complete our contact form we collect your name, work email address, company name, the service you are interested in, and the free-text project details you choose to share. When you interact with our chat widget we collect the messages you send and any contact details you provide within them. If you register for one of our SaaS products, we collect the account information required to create and operate your account, including your name, email address, organisation details, and product configuration data.

Information collected automatically

When you visit our website we automatically collect certain technical information, including your IP address, device and browser type, operating system, the pages you view, the date and time of your visit, and the referring website or source. This information is collected through cookies and similar technologies, as described in our Cookie Policy.

Information from third parties

We may receive information about you from third parties, such as our hosting and infrastructure providers, analytics providers, and, where you engage with our WaveX messaging services, the Meta WhatsApp Cloud API. We may also receive information from business partners and referral sources where you have consented to that sharing.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your enquiries and communicate with you about your requests;
• To deliver, maintain, and support the services and products you have engaged;
• To operate, secure, and improve our website, services, and SaaS products;
• To process billing, invoicing, and payments;
• To monitor for, prevent, and investigate security incidents and fraud;
• To comply with our legal and regulatory obligations; and
• To send you marketing communications where you have consented to receive them.

4. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or equivalent law applies, we rely on the following legal bases under Article 6 for processing your personal information:

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interests as described in the Your Rights section.

5. Cookies and Tracking

We use cookies and similar technologies to operate our website, remember your preferences, and — with your consent — measure performance and support marketing. Strictly necessary cookies are always active; all other categories require your consent. For full details and to manage your choices, see our Cookie Policy.

6. How We Share Your Information

We do not sell your personal data. We share personal information only with the following categories of recipients, and only as necessary:

• Hosting and infrastructure providers that host our website, applications, and databases;
• Analytics providers that help us understand how our website and products are used;
• Email and communications providers that deliver our transactional and marketing messages;
• Payment processors that handle billing and subscription payments;
• The Meta WhatsApp Cloud API, used to deliver messaging on your behalf through our WaveX product;
• Professional advisers such as accountants, auditors, and legal counsel; and
• Lawful authorities where we are required to disclose information by law or to protect our rights.

Clivo Labs does not sell personal data and does not share it with third parties for their own independent marketing.

7. International Data Transfers

Clivo Labs serves clients across multiple countries, including visitors in the European Union and the United Kingdom. Your personal information may therefore be processed in, or transferred to, countries outside your own, including Pakistan, whose data protection laws may differ from those in your jurisdiction. Where we transfer personal data internationally, we implement appropriate safeguards, such as standard contractual clauses and contractual confidentiality and security commitments with our providers.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Indicative retention periods are:

• Enquiry and contact data: up to 24 months from your last contact, unless an engagement begins;
• Client and project records: for the duration of the engagement and up to 7 years thereafter;
• Billing and financial records: for the period required by applicable tax and accounting law, typically up to 7 years;
• Product account data: for the life of the account and a limited period after closure to meet legal and operational needs.

When personal data is no longer needed, we securely delete or anonymise it.

9. Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption of data in transit, access controls, and restricted internal access on a need-to-know basis. However, no method of transmission over the internet or method of electronic storage is perfectly secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the following rights over your personal information:

• The right to access the personal data we hold about you;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure of your data in certain circumstances;
• The right to restrict processing of your data;
• The right to data portability;
• The right to object to processing based on legitimate interests;
• The right to withdraw consent at any time, where processing is based on consent; and
• The right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at privacy@clivolabs.com. We will respond within one business day of receiving your request and, in any event, within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

11. Children's Privacy

Our website, services, and products are not directed at anyone under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. Third-Party Links

Our website and products may contain links to third-party websites and services that we do not operate. We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, provide additional notice through our website or by email. Your continued use of our website and services after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please contact us: