Legal

Privacy Policy

Plain version: we collect what you type into the contact form, plus basic analytics about how the site is used. We do not sell any of it, ever.

Last updated: 1 September 2026 · Applies to nexlyr.solutions

1. Who we are

Nexlyr Solutions is a web development and digital marketing studio based in Karachi, Sindh, Pakistan. We operate the website nexlyr.solutions. Throughout this policy, "we", "us" and "our" mean Nexlyr Solutions.

For anything relating to your data, the person responsible is M. Hashir, reachable at nexlyr.solutions@gmail.com.

2. What we collect

Information you give us

When you submit the contact form or the project brief wizard, we receive:

  • Your name
  • Your business name, if you enter one
  • Your phone number and email address
  • The service you selected
  • Any notes you type into the message field

If you contact us on WhatsApp, by email, or through Instagram or LinkedIn instead, we hold whatever you send us on those platforms under their own terms.

Information collected automatically

When you submit the form we also record technical context so we know which of our own marketing efforts actually worked:

  • The page you submitted from and the page you first landed on
  • The website that referred you, if any
  • Campaign tags in the URL (utm_source, utm_medium, utm_campaign, utm_content)
  • Advertising click identifiers if you arrived from an ad (fbclid from Meta, gclid from Google)
  • Your browser's user-agent string
  • The date and time of submission

Separately, our analytics tools record general usage — pages viewed, approximate location at city level, device type, how far you scrolled, and which buttons were clicked. This is covered in section 4.

What we deliberately do not collect

  • No payment or card details are ever entered on this website
  • No accounts, no passwords, no logins for visitors
  • The assistant chat widget on the site runs entirely inside your own browser against a fixed set of answers. What you type into it is not transmitted to us or to anyone else.

3. Why we collect it

  • To reply to you. The form details exist so we can answer your enquiry and quote the work.
  • To keep a record of enquiries. So a lead is not lost if WhatsApp fails to open or a message goes missing.
  • To understand what works. Campaign tags and click IDs tell us whether our ads and posts bring real enquiries or just traffic.
  • To improve the site. Analytics show us which pages get read and which get abandoned.
  • To meet our obligations. Keeping reasonable business records of who we quoted and what we agreed.

Where a legal basis is required, ours is your consent (for analytics and advertising cookies), the steps taken at your request before entering a contract (for handling your enquiry), and our legitimate interest in running and improving a small business.

We do not use your details for automated decision-making, and we do not build advertising profiles about you beyond what the tools in section 4 do by default.

4. Cookies and tracking

We use a small number of cookies. Analytics and advertising cookies only load after you allow them where consent is required; visitors from regions without a consent requirement are counted by default and can opt out at any time using the control at the bottom of this section.

CookieSet byPurposeLifetime
_ga, _ga_* Google Analytics 4 Tells returning visits apart from new ones and counts page views Up to 2 years
_fbp, _fbc Meta Pixel Measures whether our Facebook and Instagram ads produce enquiries Up to 3 months
nx_consent_v1 Nexlyr Remembers your cookie choice so we stop asking. Stored locally, not sent anywhere Until you clear your browser
nx_attr Nexlyr Holds campaign tags for the length of your visit so we can attribute an enquiry correctly Until you close the tab

You can refuse or withdraw consent at any time, and blocking cookies in your browser works too — the site functions normally without them.

Change my cookie preferences

5. Who else sees your information

We do not sell, rent or trade personal information. We do rely on a handful of service providers to run the site, and your data passes through them:

ProviderWhat it handlesWhere
Supabase Stores submitted enquiries in our database Cloud infrastructure, region selected by us
Resend Delivers the notification email when an enquiry arrives United States / EU
Google Analytics, Search Console, web fonts Global
Meta Pixel measurement, and WhatsApp if you choose to message us there Global
Hosting & CDN Serves the site files and a small scroll library Global

Because several of these operate outside Pakistan, submitting the form means your information may be transferred abroad. We only work with established providers that publish their own security and privacy commitments.

We would also disclose information if a Pakistani court or regulator lawfully required it, or if it were necessary to defend a legal claim.

6. How long we keep it

  • Enquiries that became clients: kept for the duration of the project and up to five years afterwards, as ordinary business records.
  • Enquiries that went nowhere: kept for up to twenty-four months, in case you come back to the conversation.
  • Marked as spam: removed on our next cleanup.
  • Analytics data: retained on Google's default schedule, currently fourteen months.

Ask us to delete your enquiry earlier and we will, as described below.

7. Your rights

Whatever jurisdiction you are in, we will honour the following on request:

  • Access — a copy of what we hold about you
  • Correction — fix anything wrong or out of date
  • Deletion — remove your enquiry from our database
  • Objection — tell us to stop processing your details for marketing
  • Portability — receive your data in a readable file
  • Withdraw consent — for cookies, at any time, without affecting anything done beforehand

Email nexlyr.solutions@gmail.com with the subject line "Data request". We respond within thirty days and will not charge you for it. We may ask a question or two to confirm the request genuinely comes from you.

8. How we protect it

  • The site is served entirely over HTTPS
  • Enquiries are stored behind row-level security: the public website can add a record but cannot read, edit or delete a single one
  • Only authenticated administrators can view stored enquiries
  • The contact form carries spam protection so bots do not fill the database
  • Access is limited to the people at Nexlyr who need it to reply to you

No system is perfect, and we will not pretend otherwise. If a breach ever affected your information, we would tell you and the relevant authority without undue delay.

9. Data belonging to our clients

When we build a website, admin panel or business system for a client, we sometimes handle data belonging to their customers. In that situation the client is the data controller and we act on their instructions only.

We do not reuse client data for our own purposes, we do not copy it between projects, and clients own their data and their code — as stated throughout this site. If you are a customer of one of our clients, please contact that business directly.

10. Children

This site is aimed at businesses and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has sent us their details, email us and we will delete it.

11. Changes to this policy

When we change the tools we use or the way we handle information, we update this page and change the date at the top. Material changes will be flagged on the site itself. This policy is governed by the laws of Pakistan.

12. Contact us

Nexlyr Solutions
Karachi, Sindh, Pakistan

Email: nexlyr.solutions@gmail.com
WhatsApp: 0305 3687680

If you are not satisfied with how we handled your request, you are entitled to complain to the relevant data protection authority in your country.