Privacy Policy

Shahid Security (“we”, “us”, “our”) is a cybersecurity and secure software practice based in Pakistan, operated as a sole proprietorship by Muhammad Shahid Iqbal. This policy explains what personal information we collect through shahidiqbal.com (the “Site”), why we collect it, how we use and protect it, and the choices you have.

This is a first draft written for launch, not a substitute for legal advice. Have it reviewed by a lawyer familiar with Pakistani data protection law — and the law of any country your clients are based in — before treating it as final.

1. Who we are

• Business name: Shahid Security
• Legal entity: Shahid Security, sole proprietorship of Muhammad Shahid Iqbal
• Registered address: Chak 105/15-L, Vanjari, Tehsil Mian Channu, District Khanewal, Punjab, Pakistan
• Contact email: info@shahidiqbal.com
• Phone / WhatsApp: +92 311 6234126

We are the data controller for the personal information described in this policy.

2. What information we collect

We only collect information you actively choose to give us. We don’t use tracking cookies, analytics scripts or third-party advertising pixels on this Site, and we don’t require an account to browse it.

Contact form (/contact/): name, email address, company (optional), phone/WhatsApp number (optional), the service you’re interested in, your message, and whether you’ve requested an NDA.

Booking form (/book/): name, country, phone/WhatsApp number, and your preferred consultation date and time. We deliberately don’t collect an email address here — requests are confirmed by phone or WhatsApp.

If you become a client: additional information necessary to deliver the agreed work — for example, systems in scope for a penetration test, technical contacts, or credentials explicitly provided under a signed authorisation letter and NDA. This is governed by the specific engagement agreement, not just this policy.

Server logs: like virtually any web server, ours may record basic technical data (IP address, browser type, timestamp, requested page) for security and troubleshooting. We don’t cross-reference this with form submissions to build visitor profiles.

We do not knowingly collect information from children under 18, and this Site is not directed at children.

3. Why we collect it and our legal basis

We process the information above to:

• Respond to your enquiry or booking request
• Schedule and conduct a consultation
• Deliver agreed security or development work, if you engage us
• Meet legal or contractual obligations (for example, keeping records required for invoicing or an engagement’s audit trail)

Our legal basis is your consent (submitting the form), the steps necessary to enter into or perform a contract with you, or our legitimate interest in running and securing this Site — whichever applies to the specific processing activity.

4. How long we keep it

• Enquiries that don’t lead to work: kept only as long as needed to respond, then deleted within a reasonable period. [FILL IN: confirm your actual retention period — we suggest no more than 12 months.]
• Client engagements: kept for the duration of the engagement plus a reasonable period afterward for record-keeping (invoicing, warranty on fixes, potential legal requirements) — [FILL IN: confirm your standard retention period for client records].
• Server logs: rotated automatically by our hosting provider on a standard schedule; we don’t manually archive them long-term.

5. Who we share it with

We do not sell, rent or trade your personal information. We share limited data only with the service providers needed to operate this Site and respond to you:

• Hostinger — our web host, which also delivers contact and booking form emails via SMTP on our behalf.
• Cloudflare Turnstile — a bot-verification service that may process your IP address and browser signals when you submit a form, solely to distinguish humans from automated spam.

Each provider only receives the minimum data needed to perform its function for us, and is contractually or by nature of its service restricted from using that data for its own purposes.

We may also disclose information if required by law, to protect our legal rights, or to investigate fraud or a security incident.

6. International data transfers

Our hosting and email-delivery infrastructure may process data outside Pakistan depending on where our hosting provider’s servers are located. Where that happens, the provider is responsible for applying appropriate safeguards under its own terms of service.

7. Security

We take reasonable technical measures to protect the data you send us, including transport encryption (HTTPS), server-side input validation on both forms, spam/bot filtering, and rate-limiting. No online transmission or storage system is ever 100% secure — as a security company, we’re the first to say so — but we do not store form submissions in a database on this Site (there isn’t one); the only record is the email your submission generates and, if you become a client, records within our contract-management process.

If we ever become aware of a data breach affecting your personal information, we will notify you and any relevant authority as required by applicable law.

8. Your rights

Depending on where you’re based, you may have the right to:

• Ask what personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to any legal obligation to retain it)
• Object to or restrict certain processing
• Ask for a copy of your data in a portable format

To exercise any of these, email info@shahidiqbal.com. We’ll respond within a reasonable timeframe.

9. Cookies and tracking

This Site does not set tracking or advertising cookies. It may use strictly-necessary session mechanisms (for example, within the Cloudflare Turnstile widget) required for the contact and booking forms to function securely — these do not track you across other websites.

10. Changes to this policy

We may update this policy as the Site or our practices change. The “Last updated” date at the top reflects the most recent revision. Material changes will be reflected here; we encourage checking back periodically.

11. Contact

Questions about this policy, or to exercise your rights above: info@shahidiqbal.com.