← Back home

Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains how TechPhase collects, uses, shares and protects personal data when you visit techphase.net, contact us, use our chat assistant, work with us as a client, or work with us as a creator or supplier. We have written it in plain English. If anything is unclear, email info@techphase.net.

1. Who we are

TechPhase (“we”, “us”, “our”) is the operator of techphase.net and the services described in this policy.

For most of the personal data described here we are the controller: we decide why and how it is used. When we handle personal data on behalf of a client (for example, the customer data in an online store or app we build, or the data flowing through an AI automation we set up), we act as that client’s processor. Section 9 explains that.

2. The personal data we collect

a) When you contact us (contact form, “Start a project” form, email, phone or WhatsApp)

• Full name, email address, phone number and country code
• The service you are interested in and the project details you write to us
• Anything else you choose to include in messages, calls or attachments

b) When you use the chat assistant on our website

• The messages you type and the assistant’s replies (the most recent messages in your session are sent with each request so the assistant can follow the conversation)
• Technical data needed to deliver the request, such as your IP address and browser type

The chat assistant is an automated AI tool, not a person. Please do not share passwords, payment details, health information or other sensitive data in the chat.

c) When you become a client

• Contact and billing details for you and your team (name, job title, company, address, email, phone)
• Contract, invoice and payment records (we do not see or store full card numbers; payments are handled by the payment provider)
• Project materials you give us: content, images, brand assets, logins and access credentials, feedback and approvals
• Call notes, meeting recordings (only if we tell you in advance) and project messages

d) When you work with us as a UGC creator, actor, voice artist or freelancer

• Name, contact details, portfolio and social media handles
• Your image, likeness, voice and performance in recorded content
• Signed release or agreement, usage rights granted, and payment details

e) When you simply browse techphase.net

• Your IP address, browser, device and the page requested are processed by our website host and font provider to deliver the page (see Section 5). See our Cookie Notice and Google's privacy policy.

Analytics. We use Google Analytics to understand how visitors use our site, such as which pages are viewed and roughly where visits come from. For visitors in the EU/EEA, UK and Switzerland, analytics stays off unless you click Accept. For visitors elsewhere, including the US, analytics is on by default, and you can turn it off at any time under 'Your privacy choices' in the footer. We honour Global Privacy Control signals as an opt-out. We do not sell or share personal information for targeted advertising, and we do not use advertising cookies. Analytics data is kept for 14 months after your last visit.

We do not knowingly collect special category data (such as health, religion or ethnicity) and ask you not to send it to us unless a project genuinely requires it and we have agreed how it will be handled.

3. How we use your data and our lawful bases

Data protection laws such as the EU GDPR and UK GDPR require a “lawful basis” for each use. Here is ours:

Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that assessment. Where we rely on consent, you can withdraw it at any time by emailing us or, for analytics cookies, from Your privacy choices in the footer. Withdrawing consent does not affect anything done before you withdrew.

We do not sell your personal data, and we do not use it to make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who we share it with

We share personal data only with people and providers who need it to help us run TechPhase, and only as much as they need:

• Our team. TechPhase works with a small remote team of freelance designers, developers, editors and marketers, mainly based in Pakistan. They may access project data only for your project, under written confidentiality obligations.
• Service providers (processors) acting on our instructions; see Section 5.
• Professional advisers such as accountants and lawyers, under a duty of confidentiality.
• Platforms you ask us to use for your project (for example Shopify, WordPress hosts, Apple App Store, Google Play, Meta, TikTok or Google Ads). These platforms have their own privacy policies.
• Authorities where the law requires it, such as tax authorities, courts or law enforcement.
• A buyer or successor if the TechPhase business is transferred or incorporated into a company, on the condition that they respect this policy.

5. Our service providers

We will update this list when our providers change.

6. International transfers

TechPhase is based in Pakistan, and our team works mainly from Pakistan. If you are in the UK, the European Economic Area (EEA) or elsewhere, the personal data you send us goes to us in Pakistan, and some of our providers process it in the United States and other countries. These countries may not have data protection laws equivalent to yours.

Where UK or EU law applies to a transfer, we protect your data by:

• using providers covered by an adequacy decision where available (for example, US providers certified under the EU-US Data Privacy Framework and the UK Extension);
• otherwise relying on the European Commission’s Standard Contractual Clauses (SCCs) and, for UK data, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the SCCs, together with additional safeguards where needed;
• binding our team members to confidentiality and data protection obligations in writing.

You can request a copy of the relevant safeguards by emailing info@techphase.net.

7. How long we keep your data

When data is no longer needed, we delete it or anonymise it securely.

8. How we protect your data

We use encrypted connections (HTTPS/TLS), two-factor authentication on key accounts, access limited to people who need it, confidentiality agreements with our team, and secure handling and deletion of client credentials. No system is completely secure. If a personal data breach is likely to put your rights at risk, we will tell you and the relevant authorities where the law requires it.

9. When we process data for our clients

When we build or run a website, online store, app, chatbot, automation or marketing campaign for you, we may handle personal data that belongs to your customers or users. In that case:

• you are the controller and are responsible for having a lawful basis, privacy notice and any required consents;
• we act as your processor and use the data only to provide the agreed services, on your documented instructions;
• we will sign a Data Processing Agreement (DPA) that meets Article 28 GDPR / UK GDPR requirements (including SCCs or the IDTA where needed) on request. Clients with UK or EU end users should ask for one before launch.

If you are an end user of one of our clients’ products, please contact that client directly about your data.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate or incomplete data;
• delete your data (“right to be forgotten”);
• restrict how we use your data;
• object to our use of your data based on legitimate interests, and to direct marketing at any time;
• data portability, i.e. receive the data you gave us in a common machine-readable format;
• withdraw consent where we rely on it;
• not be subject to solely automated decisions with legal or similarly significant effects.

To use any of these rights, email info@techphase.net with the subject “Privacy request”. We will reply within one month (extendable by two months for complex requests, in which case we will tell you why). We may need to verify your identity. Using your rights is normally free.

11. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to a data protection authority:

• United Kingdom: Information Commissioner’s Office (ICO), ico.org.uk, helpline 0303 123 1113.
• European Union / EEA: the data protection authority in the country where you live or work, or where the issue occurred. A list is at edpb.europa.eu.
• Pakistan: offences under the Prevention of Electronic Crimes Act 2016 (PECA) can be reported to the National Cyber Crime Investigation Agency (NCCIA).
• Elsewhere: your local data protection or consumer authority.

12. Pakistan

We handle personal data in line with Pakistani law, including the Prevention of Electronic Crimes Act 2016 (PECA), which prohibits unauthorised access to, and misuse of, information systems, data and identity information. We will update this policy to reflect any Pakistani data protection legislation that comes into force.

13. Notice for US residents

We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act (CCPA/CPRA) and similar US state laws. The categories of personal information we collect, their sources, purposes and recipients are described in Sections 2 to 5. We do not use sensitive personal information to infer characteristics about you. Wherever these laws apply to us, you may request to know, correct or delete your personal information as described in Section 10, and we will not discriminate against you for doing so.

You can turn analytics off at any time under Your privacy choices in the footer. Visitors in the EU/EEA, UK and Switzerland can also choose Reject on the banner; visitors elsewhere can choose Turn off analytics. We honour Global Privacy Control signals as an opt-out. You can also install the Google Analytics opt-out browser add-on, or block and delete cookies in your browser settings. Google describes how it handles this data in Google's privacy policy.

14. Children

Our services are for businesses and adults. Our website is not aimed at children, and we do not knowingly collect personal data from anyone under 16 (or the minimum age in your country). If we produce content featuring a minor, we will only do so with the written consent of their parent or legal guardian. If you believe a child has sent us personal data, contact us and we will delete it.

15. Links to other websites

Our website links to our Instagram, Facebook, LinkedIn and X pages and may link to client websites. Those sites have their own privacy policies, and we are not responsible for them.

16. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we make significant changes, we will tell active clients by email.

17. Contact us