Privacy & Data Protection Policy
Effective Date: September 2026. Instant Growth (SMC-Private) Limited is committed to uncompromised confidentiality, data integrity, and international privacy compliance across all digital engineering and marketing engagements.
01. Scope & Legal Entity
This Privacy Policy applies to all services, web platforms, mobile applications, software ecosystems, and growth consultations provided by Instant Growth (SMC-Private) Limited ("Instant Growth", "we", "our", or "us"). As a legally registered corporate entity in Pakistan operating globally across North America, the UK, Europe, the Middle East, and Asia, we adhere strictly to international data governance frameworks including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Prevention of Electronic Crimes Act (PECA).
02. Information We Collect
We collect information strictly necessary to provide elite digital agency services and execute development roadmaps:
- Direct Inquiry Information: Full name, corporate email address, WhatsApp/mobile telephone number, business name, project scope, budget range, and timeline details provided through our website contact forms or WhatsApp hotlines.
- Client Technical Assets & Credentials: Git repository links, API keys, database credentials, server environments, and staging assets provided by clients under mutual Non-Disclosure Agreements (NDAs).
- Automated Device & Telemetry Data: IP address, device type, browser specifications, operating system details, referring URLs, and engagement timestamps collected anonymously via performance optimization cookies to ensure fast 60fps rendering across devices.
03. Purpose of Data Processing
Your data is utilized exclusively for genuine commercial and operational purposes:
- To engineer, develop, test, and deploy custom web platforms, e-commerce systems, mobile apps, and SaaS architectures.
- To execute data-driven digital marketing campaigns, technical SEO audits, 4K video production, and social automation protocols.
- To provide transparent milestone updates, sprint reports, invoices, and SLA warranty support.
- To maintain compliance with corporate accounting and taxation obligations under the Federal Board of Revenue (FBR) and SECP.
04. Uncompromised Confidentiality & IP Protection
At Instant Growth, client confidentiality is a foundational principle:
- 100% Code & Asset Ownership: All bespoke source code, proprietary algorithms, visual designs, and database architectures created for your project belong entirely to you upon milestone settlement.
- Zero Data Monetization: We never sell, rent, license, or trade client contact details or proprietary business metrics to advertising brokers or data aggregators.
- Non-Disclosure Standard: Every project inquiry and ongoing contract is automatically shielded by our binding non-disclosure protocol.
05. Enterprise Security & Encryption Architecture
We deploy robust enterprise security safeguards to prevent unauthorized access, data alteration, or disclosure. All web traffic is routed via modern TLS 1.3 encryption with strict HTTPS headers. Client credentials, API tokens, and production secrets are managed in encrypted vaults (AES-256) with strict role-based access control (RBAC). Our production infrastructure utilizes SOC-2 and ISO/IEC 27001 certified global cloud hosts (Vercel, AWS, Supabase).
06. Third-Party Sub-Processors
We partner exclusively with verified, industry-standard third-party sub-processors to power our client delivery stack:
- Hosting & Edge Infrastructure: Vercel Inc. and Amazon Web Services (AWS).
- Inquiry & Form Routing: Formspree Inc. (encrypted SSL form relay with zero persistent ad tracking).
- Direct Client Communication: Meta Platforms Inc. (WhatsApp Business API endpoints).
- Financial Gateways: Commercial Banking Channels, Payoneer, and Stripe (PCI-DSS Level 1 compliant).
07. Your Legal Rights & Data Control
Regardless of your geographic location, you retain full rights over your data:
- Right of Access & Portability: Request a complete copy of all data and project records associated with your account.
- Right to Rectification: Update or correct any inaccurate personal or business information.
- Right to Erasure ("Right to Be Forgotten"): Request the complete and permanent deletion of your inquiry data and temporary staging archives.
- Right to Restrict Processing: Object to specific automated marketing or diagnostic workflows.
08. Data Protection Officer (DPO) & Contact Information
For any privacy inquiries, GDPR/CCPA data requests, or formal legal notices, please reach out directly to our designated compliance officer: