Wix Engine ("Wix Engine", "we", "us") is a web design and development agency with its main office in Texas, USA and a second office in Lahore, Pakistan. This policy explains what personal data we collect through wixengine.com (the "Site") and in the course of working with clients, why we collect it, who we share it with, and the rights you have over it.

If you have any questions, email sohaib@wixengine.com or call +1 (970) 687-5940.

1. Who is responsible for your data

The data controller is Wix Engine, with its head office in Texas, USA and its development office at C7CH+M3R, Block E, PGECHS Phase 2, Lahore, Pakistan. Privacy requests are handled by Sohaib Mehmood, Owner & CEO, at sohaib@wixengine.com. We have not appointed a Data Protection Officer or an EU/UK representative.

2. What we collect and why

Contact form. When you submit the form on our contact page we collect your name, email address, company, phone number, project details, approximate budget, and how you heard about us. We use this to reply, prepare a proposal, and keep a record of our conversation. Legal basis: taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries.

Call booking. Our booking tool is an embedded third-party scheduler (Wix Meetings (provided by Wix.com)). When you book a call, that provider collects your name, email, chosen time, time zone and any notes, and shares them with us so we can hold the meeting. The provider's own privacy policy also applies.

WhatsApp, email and phone. If you message us on WhatsApp, email sohaib@wixengine.com or call us, we keep the messages and contact details you share so we can follow up. WhatsApp is operated by Meta under Meta's privacy terms.

Client work. If you become a client, we hold the information needed to deliver the project: contact details, billing details, website logins or API keys you give us, content, and project communications. Legal basis: performance of our contract with you.

Analytics. We use Google Analytics 4 to understand how the Site is used (pages visited, approximate location, device and browser type, referring site). For visitors in the EU, UK and other regions where consent is required, analytics only runs after you accept it in our cookie banner. We use Google Consent Mode, so until you consent, Google receives only cookieless, aggregated signals. See our Cookie Policy.

Technical and security data. Our hosting providers (Vercel and Cloudflare) automatically log IP addresses, request headers and timestamps to serve the Site and keep it secure. Legal basis: legitimate interest in running a secure website.

We do not sell personal data or use it for automated decision-making with legal or similarly significant effects on you.

3. Who we share data with

We share personal data only with providers who help us run the Site and our business, and only to the extent needed:

• Hosting and delivery: Vercel (application hosting) and Cloudflare (DNS, CDN and security). Images and video are served from Wix's content delivery network.
• Email delivery: Resend, which sends form confirmations and notifications on our behalf.
• Scheduling: Wix Meetings (provided by Wix.com) for call bookings.
• Analytics: Google (Google Analytics 4).
• Internal tools: form submissions may be forwarded by webhook to our CRM or project-management system (Wix CRM and our project-management tools) so our team can track and reply.
• Advisers and authorities where we are legally required to disclose data or to protect our rights.

Each provider is bound by its own privacy terms and, where required, a data processing agreement with us.

4. International transfers

Our team works from the United States and Pakistan, and our providers store data mainly in the United States. If you are in the EU, UK or another region with data transfer rules, your data will be transferred outside that region. Where required we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider's participation in the EU-US Data Privacy Framework. Transfers between our US and Pakistan teams are covered by Standard Contractual Clauses. You can ask us for a copy of the relevant safeguard.

5. How long we keep data

• Enquiries that do not become projects: up to 24 months from last contact, then deleted.
• Client records and contracts: for the length of the engagement plus 7 years for tax, accounting and legal purposes.
• Analytics data: retained by Google Analytics for 14 months, as set in our account.
• Server and security logs: typically retained by our hosting providers for a short rolling period.

We delete or anonymise data when it is no longer needed for the purpose it was collected.

6. Your rights

If you are in the EU, EEA or UK (GDPR / UK GDPR), you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased; restrict or object to how we process it; receive a copy of data you gave us in a portable format; and withdraw consent at any time (for example, analytics consent via the cookie banner). You also have the right to complain to your local supervisory authority, such as the UK Information Commissioner's Office.

If you are a US resident, depending on your state you may have the right to know what personal data we collect, to access, correct or delete it, and to opt out of its sale, sharing or use for targeted advertising. We do not sell personal data or share it for cross-context behavioural advertising. Residents of Texas, California and other states with consumer privacy laws may exercise these rights by contacting us below; we will not discriminate against you for doing so. We honor these requests from every US resident, whether or not a particular state law applies to us.

To make a request, email sohaib@wixengine.com with the subject "Privacy request". We may ask you to verify your identity. We aim to respond within 30 days (45 days for certain US requests).

7. Security

We protect personal data with HTTPS across the Site, access controls and two-factor authentication on our business tools, and by limiting access to people who need it. Client credentials are kept in a password manager, not in email or chat. No system is perfectly secure; if you believe your data has been compromised, contact us immediately.

8. Children

The Site and our services are aimed at businesses and are not directed at anyone under 16. We do not knowingly collect personal data from children; if you believe a child has given us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the Site, our tools or the law change. The "Last updated" date shows the current version; significant changes will be flagged on the Site. Third-party sites and embeds we link to have their own privacy policies.

10. Contact

Wix Engine Head office: Texas, USA Development office: C7CH+M3R, Block E, PGECHS Phase 2, Lahore, Pakistan Email: sohaib@wixengine.com Phone: +1 (970) 687-5940