About this policy
This policy explains what personal information EINSLAB collects through lab.eins.com.pk, why we collect it, who we share it with, and the choices you have.
Eins Lab is a digital agency offering website design and development, mobile app development, custom software, digital marketing, social media management and SEO. EINS LAB is operated by EINS Consultants (SMC-Private) Limited, a company registered with the Securities and Exchange Commission of Pakistan (“Eins Lab”, “we”, “us”, “our”).
This policy applies to visitors of lab.eins.com.pk, people who contact us or request a quote, and clients we work with. It does not cover websites or apps we build for clients; each client publishes its own privacy policy for its own users.
By using our website or sending us your details, you acknowledge this policy. If you do not agree with it, please do not use the website or share your information with us.
Information we collect
We collect only what we need to answer you, quote for your project and deliver our services.
Information you give us
- Project brief and contact forms: your name, email address, phone or WhatsApp number, company name, the service you need, your budget range and the message you write.
- Direct contact: anything you share when you email, call, or message us on WhatsApp or social media.
- Client information: billing name and address, payment details needed to issue invoices, and the project materials you send us (text, images, logos, product data, login access).
Information collected automatically
- Form details: when you submit a form, we record the page you sent it from and whether you were viewing Pakistan (PKR) or International (USD) prices. Your IP address is held for up to 10 minutes to block spam and repeated submissions.
- Device and usage data: like most websites, our server and analytics tools record your IP address, browser type, device, pages viewed, time spent and the website that referred you.
- Preferences: your choice of Pakistan or International pricing is saved in your own browser so the site remembers it on your next visit.
How we use your information
We use your information to:
- reply to your enquiry and prepare proposals and quotations in the right currency for your region;
- plan, deliver and support the services you buy from us;
- send invoices, collect payments and keep accounting and tax records;
- send project updates and, if you agree, occasional news about our services (you can opt out at any time);
- understand how visitors use our website so we can improve it;
- measure and improve our own advertising, for example on Google and Meta;
- keep the website and our systems secure and prevent spam or misuse;
- comply with the law and respond to lawful requests from authorities.
We do not sell your personal information, and we do not use it to make decisions about you that are fully automated.
Legal bases for using your information
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and preparing quotes | Steps taken at your request before a contract |
| Delivering services and invoicing | Performance of a contract |
| Accounting, tax and legal records | Legal obligation |
| Website security, spam prevention, improving our services | Our legitimate interests |
| Analytics and advertising cookies, marketing emails | Your consent, which you can withdraw at any time |
For visitors in Pakistan, we handle personal information in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act 2016.
Cookies and similar technologies
Our website uses a small number of cookies and browser storage items. You can block or delete them in your browser settings; some parts of the site may then work less smoothly.
| Type | What it does | Examples |
|---|---|---|
| Essential | Keeps the site secure and working, including logged-in sessions for our team | WordPress session cookies |
| Preferences | Remembers whether you chose Pakistan or International pricing | nx_region (stored in your browser only, never sent to us) |
| Analytics | Shows which pages are visited and how the site is used | Google Analytics |
| Advertising | Measures our ads and shows our ads to past visitors | Meta Pixel, Google Ads tags |
We only use analytics and advertising cookies where they are enabled on the site and, where the law requires, after you give consent.
Our fonts are loaded from Google Fonts. When a page loads, your browser connects to Google’s servers, which receive your IP address.
Who we share your information with
We share personal information only with service providers who help us run our business, and only what they need to do their job:
- Website hosting and email providers, which store our website, form submissions and emails;
- Google (Analytics, Ads, Fonts, Workspace) and Meta (Facebook, Instagram, WhatsApp), for analytics, advertising and communication;
- Payment providers and banks, to process payments and transfers;
- Freelancers or partner specialists who work on your project under confidentiality obligations;
- Professional advisers, such as accountants and lawyers;
- Government authorities, including tax authorities, when the law requires it.
If our business is restructured, merged or sold, your information may transfer to the new owner under the same protections described here.
We never sell or rent your personal information to anyone.
International transfers
We are based in Pakistan and work with clients worldwide. Your information may be stored or processed in Pakistan and in other countries where our providers operate, such as the United States and the European Union.
When we transfer information from the EEA or UK to countries without an adequacy decision, we rely on safeguards such as the European Commission’s Standard Contractual Clauses offered by our providers.
How long we keep your information
We keep information only as long as we need it:
| Information | How long |
|---|---|
| Enquiries that do not become projects | Up to 24 months after our last contact |
| Client and project records | For the project and up to 6 years after it ends, for tax and legal purposes |
| Invoices and payment records | As long as tax law requires |
| IP address used for spam protection | Up to 10 minutes |
| Analytics data | Up to 14 months, or the retention set in Google Analytics |
After these periods, we delete or anonymise the information.
How we protect your information
We use reasonable technical and organisational measures to protect your information. These include encrypted connections (HTTPS), access limited to team members who need it, strong passwords with two-factor authentication on key accounts, regular backups and software updates.
No method of transmission or storage is completely secure. If a data breach affects your information, we will notify you and the relevant authorities where the law requires.
Your rights
You can ask us to:
- give you a copy of the personal information we hold about you;
- correct information that is wrong or incomplete;
- delete your information, unless we must keep it by law or for an active contract;
- stop sending you marketing messages;
- withdraw consent you gave, for example for cookies or newsletters.
If you are in the EEA or UK, you also have the right to restrict or object to certain processing, to receive your data in a portable format, and to complain to your local data protection authority.
To use any of these rights, contact us using the details at the end of this policy. We reply within 30 days and may ask you to confirm your identity first.
Client project data and account access
To deliver our services, clients often give us access to their website, hosting, domain, Google, Meta Business, analytics or app store accounts, and to their customer data.
We use this access only to do the work agreed with the client and keep login details confidential. We remove our access when the client asks or the engagement ends. For this data, the client decides how it is used and we act on their instructions. Each client remains responsible for its own privacy policy and for having a lawful basis to share data with us.
Where a client needs a separate data processing agreement, we are happy to sign one.
Children, other websites and changes
Children. Our website and services are meant for businesses and adults. We do not knowingly collect personal information from children under 18. If you believe a child has sent us information, contact us and we will delete it.
Other websites. Our site links to other websites, such as client projects, social media and app stores. Their own privacy policies apply, and we are not responsible for how they handle your information.
Changes to this policy. We may update this policy when our services, tools or the law change. The latest version is always on this page with its effective date. If we make important changes, we will make them clear on our website.
Contact us
For questions about this policy or your personal information, contact:
EINS LAB (operated by Eins Consultants (SMC-Private) Limited)
Email: info@lab.eins.com.pk
WhatsApp: +92 371 031 4250
Address: Karachi, Sindh, Pakistan
Website: lab.eins.com.pk
Effective date: 05.Oct.2026