Privacy Policy

Who is responsible for your data

FluxMigrate is the controller of the personal data described here. You can reach us by email at the address below, by phone, or by post at the addresses on our Contact Us page.

What we collect

We collect personal data in three ways.

• Contact form. When you send an enquiry: your name, company, business email address, role, what you need, your technology environment, the number of engineers and the type of engagement you are considering, and anything you write in the message.
• Email subscription. When you subscribe: your email address, the wording you agreed to and the time you agreed, the page you subscribed from, whether you confirmed, and later whether you unsubscribed. We also keep a one-way coded form of your IP address (not the address itself) with the subscription record.
• Technical and security data. To stop spam and abuse of our forms, our server briefly counts requests per connection using your IP address, and records repeated suspicious attempts. These records are short-lived (see Retention). Our hosting provider's web server may also keep standard access logs (IP address, time, page requested, browser type).

If you call or email us directly, we receive and keep what you tell us in the call or message.

We do not collect payment details, and we do not knowingly collect data about children.

Cookies and browser storage

This site sets no cookies. It stores two small items in your browser's local storage: your consent choice and, if you allow it, a note that you subscribed to our emails. Details, and a way to change your choice, are in our Cookie Policy.

We load no third-party scripts, fonts, trackers, maps or embedded content.

Why we use your data and our legal basis

• To answer your enquiry and, if you ask, discuss a project or engagement. Basis: steps you ask us to take before a contract, and our legitimate interest in running our business.
• To send you blog posts, our newsletter and service updates. Basis: your consent, which you give by ticking the box and confirming by email. You can withdraw it at any time.
• To keep the website and forms secure and to prevent spam and abuse. Basis: our legitimate interest in protecting the service.
• To keep records and meet legal obligations. Basis: legal obligation and legitimate interest.

We do not use your data for automated decision-making or profiling.

Our email subscription

When you subscribe, we use double opt-in: we send one email asking you to confirm, and you are subscribed only after you open the link in it. If you do not confirm, we keep your address marked as unconfirmed, we do not send you newsletters, blog posts or service updates, and we delete it if you ask.

Subscribers receive blog posts, our newsletter and service updates. Every email carries an unsubscribe link, and you can also write to us to be removed. After you unsubscribe we keep your address on a suppression record, marked as unsubscribed, so that we do not email you again unless you choose to subscribe again. You can ask us to delete that record too (see Your rights).

Who we share data with

We do not sell personal data and we do not share it for advertising. We share it only with service providers who help us run the site and our email, under their own data-protection obligations:

• Our web hosting and email provider, Namecheap, Inc. (United States), which stores the website, the subscriber list and our mailbox.
• Our own team in the United States and Pakistan, who read enquiries and manage the subscriber list.

We may disclose data if the law requires it, to respond to valid legal requests, or to protect our rights and the safety of others. If we start using another provider that handles personal data (for example a service for sending newsletters), we will name it here before we do.

Where your data goes

We operate from Pakistan and the United States, and our hosting provider is in the United States, so your data is processed outside your own country and may be outside the European Economic Area or the United Kingdom. Where the law requires safeguards for such transfers, we rely on appropriate mechanisms such as standard contractual clauses.

How long we keep it

• Enquiries: for as long as needed to answer you and keep a business record of the relationship, then we delete them.
• Subscriptions: while you are subscribed. Addresses that were never confirmed stay marked as unconfirmed until you ask us to delete them. After you unsubscribe, the suppression record stays until you ask us to delete it.
• Spam-protection records (request counts, repeated-attempt records, short-term duplicate checks): from one hour up to two days.
• Browser storage: as stated in the Cookie Policy (12 months for the consent choice, 12 months for the note that you subscribed).

How we protect it

We use reasonable technical and organisational measures: encrypted connections to the site and to our mail server, access limited to people who need it, the subscriber list kept in a private folder that is not reachable from the web, and spam and abuse controls on our forms. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting what we did before you withdrew it;
• complain to your data-protection authority (in the UK, the Information Commissioner's Office; in the EU, your national authority).

Residents of California and other US states with privacy laws have similar rights to know, correct and delete their personal information. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for using your rights.

To use any of these rights, write to us at the email address below. We may ask you to confirm who you are, and we aim to answer within one month.

Children

This website is for businesses. It is not aimed at children, and we do not knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy as the site or the law changes. The date at the top shows the latest version. If a change is significant, we will say so on the site.

Contact us

Questions about this page, or a request about your data: write to info@fluxmigrate.com, call +1 (570) 609-2313, or see our Contact Us page for our postal addresses.

Related: Privacy Policy, Terms of Service, Cookie Policy.