Privacy Policy
This policy explains what personal data Brillnex Systems collects through this website and our client work, why we collect it, who we share it with, and the rights you have over it.
Last updated: 14 September 2026
1. Who we are
Brillnex Systems is an AI integration and custom software development company based in Karachi, Pakistan, serving clients worldwide. In this policy, "we", "us" and "our" mean Brillnex Systems. We are the data controller for the personal data described here.
For any question about this policy or about how we handle your data, contact us at brillnexsystems@gmail.com or +1 (650) 519-1134.
2. What data we collect
We collect only what we need to answer enquiries, deliver projects, and understand how the site is used.
| Category | What it includes | Why we collect it |
|---|---|---|
| Enquiry data | Name, email address, phone number, company name, and anything you write in the message field of our contact form. | To respond to your enquiry, scope work, and send you a proposal. |
| Client and project data | Business contact details, project requirements, and any material you share with us during an engagement. | To perform the contract and deliver the work you have commissioned. |
| Usage and analytics data | Pages viewed, time on page, referring site, approximate location from IP, browser and device type. | To understand which pages are useful and improve the site. |
| Business identification data | The organisation associated with your IP address, and — for visitors in the United States — professional contact details matched by our visitor identification provider. | To understand which companies are interested in our services. |
| Chat data | Messages you send through the chat widget, and any contact details you give it. | To answer questions in real time and follow up. |
We do not knowingly collect data from anyone under 16, and we do not collect special category data (such as health, biometric, or political data) through this website.
3. Legal bases for processing
Where GDPR or UK GDPR applies, we rely on the following legal bases:
- Consent — for non-essential analytics and marketing cookies, and for any marketing email you opt into. You can withdraw consent at any time.
- Contract — to deliver a project you have engaged us for, and to carry out pre-contract steps such as scoping and quoting.
- Legitimate interests — to understand site usage, identify prospective business clients, secure our systems, and prevent fraud. We balance these against your rights and stop where your interests override ours.
- Legal obligation — to keep accounting records and meet tax and regulatory requirements.
4. Third parties who process data for us
We use a small number of established providers. Each is bound by its own contractual and legal obligations.
| Provider | Purpose | Data involved |
|---|---|---|
| Google Analytics | Site usage measurement | Pageviews, device, approximate location, anonymised identifiers |
| Vercel (hosting and analytics) | Hosting, delivery, and privacy-focused traffic measurement | IP address in server logs, aggregated page metrics |
| Apollo.io | Business visitor identification | IP address, matched company data; person-level matching in the United States only |
| Congreeto | Website chat widget | Messages and any contact details you provide in chat |
| Sanity | Content management for our blog | No visitor personal data |
| Email and calendar providers | Responding to enquiries and scheduling calls | Your contact details and correspondence |
We do not sell personal data, and we do not share it with third parties for their own marketing purposes.
5. International transfers
We are based in Pakistan and our providers operate globally, so your data may be processed outside your home country — including in the United States and the European Union. Where data originates in the UK, EEA, or a Gulf jurisdiction with transfer restrictions, we rely on Standard Contractual Clauses or an equivalent safeguard offered by the provider, together with appropriate technical and organisational measures.
6. How long we keep it
- Enquiries that do not become projects: up to 24 months from last contact, then deleted.
- Client and project records: for the duration of the engagement and up to 7 years afterwards, to meet contractual, tax, and accounting requirements.
- Analytics data: retained according to the provider’s standard retention window, typically 14 months.
- Chat transcripts: up to 12 months.
We delete or anonymise data once it is no longer needed for the purpose it was collected for.
7. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you, and receive a copy of it.
- Correct data that is inaccurate or incomplete.
- Request deletion of your data where we have no overriding reason to keep it.
- Object to, or request restriction of, processing based on legitimate interests.
- Receive your data in a portable, machine-readable format.
- Withdraw consent at any time, without affecting processing already carried out.
- Complain to your data protection authority — in the UK, the Information Commissioner’s Office; in the EEA, your national supervisory authority.
To exercise any of these, email brillnexsystems@gmail.com. We will respond within 30 days. We may ask you to confirm your identity before we act on a request.
8. Security
We protect data with encryption in transit (HTTPS across the whole site), access controls limited to staff who need the data to do their job, and reputable infrastructure providers. Client project data is handled under the confidentiality terms of the relevant engagement agreement. No system is perfectly secure, but we take these obligations seriously and will notify you and the relevant authority without undue delay if a breach affects your rights.
9. Cookies
This site uses cookies and similar technologies. Our Cookie Policy explains exactly which ones, what each does, and how to control them.
10. Changes to this policy
We may update this policy as our services or the law change. The "last updated" date above always reflects the current version. Material changes affecting how we use your data will be communicated to active clients directly.
11. Contact
Questions, requests, or complaints about privacy: brillnexsystems@gmail.com · +1 (650) 519-1134 · Karachi, Pakistan — serving clients globally.