Privacy policy

Last updated: September 2026

What we collect

We collect the details you enter into the contact form — your name, work email address, company name, website, the type of work you need covered, and whatever you write in the message field.

If you purchase a plan online, the checkout is operated by our payment provider acting as merchant of record (such as Paddle). The payment provider collects your billing name, email, address and payment card details under its own privacy policy — we receive confirmation of the order and your contact details, and we never see or store your full card number.

If you email us directly or book a call through our scheduling tool, we hold the information you provide there for the same purposes described below.

Spam protection

We use Vercel BotID to check browser and request signals when you submit the contact form, helping us distinguish automated spam from genuine enquiries. Vercel also limits repeated submissions from the same IP address. These checks protect the form and our inbox; a submission that cannot be verified is not emailed to us.

Usage analytics

We record fixed conversion events such as plan selections, booking-link clicks, brief starts, and whether a submission was accepted or failed. These events do not include names, email addresses, company details, or brief text. The brief form is explicitly masked in session recordings. We do not load Clarity when your browser sends the Do Not Track setting.

We use Microsoft Clarity to understand how visitors use this site — which pages are read, where people click and scroll, and anonymised replays of browsing sessions. Text you type into forms is masked in these recordings. We use this solely to improve the site; Microsoft processes the data under its own privacy statement. Clarity may set first-party cookies (_clck, _clsk) to distinguish pages of the same visit.

What we do not collect

We do not run advertising trackers or cross-site tracking pixels, we do not use analytics data for advertising or profiling beyond understanding this site’s own usage, and we do not sell or share personal data with third parties for their own marketing.

Why we hold it

• To reply to your enquiry and discuss whether we can help
• To prepare a team plan and a written cost, if you ask for one
• To keep a record of business correspondence
• To protect the website and contact form from spam and abuse

The lawful basis is legitimate interest — responding to a business enquiry you initiated. We do not add enquirers to a marketing list.

How long we keep it

Enquiries that do not lead to an engagement are deleted within 24 months. Records relating to an active or past client engagement are retained for as long as required for contractual and accounting purposes.

Where it is held, and who processes it

Ecommercia SMC (Private) Limited operates from Multan, Pakistan. Data submitted through this site may be processed there and by the service providers we use to run it: website hosting, form handling and spam protection (Vercel), transactional email delivery (Resend), business email (Google Workspace), call scheduling (Cal.com), and payment processing (our merchant of record, such as Paddle). Each processes data under its own terms; none of them receives your data for advertising purposes.

Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to hello@ecommercia.co and we will respond within 30 days.

If you are in the UK or EU and are not satisfied with our response, you have the right to complain to your local data protection authority.

Cookies and local storage

This site stores a single preference in your browser’s local storage to remember whether you have chosen the light or dark theme. It contains no personal data and is not transmitted to us. Microsoft Clarity sets the analytics cookies described above. Both can be cleared at any time through your browser settings.

Changes

If this policy changes materially we will update the date at the top of this page.