Last updated: 24 September 2026
This policy explains what OctivLab collects when you use octivlab.com, why, and what you can ask us to do about it. It covers this website. It does not cover work we do inside a client’s own systems, which is governed by the contract for that work.
Who we are
OctivLab
Bungalow # 638-L, Sector 5-D, North Karachi
Karachi, Sindh 75850, Pakistan
Email: info@octivlab.com
Phone: +92 323 829 1247
We are the controller of the personal data described below. If you want to reach us about anything on this page, email is the fastest route.
What we collect
When you contact us
Our contact forms ask for your name, email address, phone number, a subject and your message. All five are required, because without them we cannot answer you. The form sends this to our own inbox. It is not posted publicly and it does not create an account.
When you comment
Comments are open on our blog posts. When you leave one, WordPress stores the name and email address you type, your website if you give one, the comment itself, and — as WordPress does by default — your IP address and browser identification string. Your name, your comment and your website link are shown publicly. Your email address and IP are not.
When you simply visit
Our hosting provider keeps standard server logs — IP address, the page requested, the time, and your browser identification string. These exist so the site can be kept running and secure. We do not use them to build a profile of you.
Cookies
This site sets no advertising or analytics cookies.
What it does set is functional. If you leave a comment, WordPress may save your name, email and website in a cookie so you do not have to retype them next time; these last about a year and you can refuse them by blocking cookies in your browser. If you log in to the site — which only our own staff do — WordPress sets session cookies. Our caching layer may also set a short-lived cookie to serve you the right version of a page.
Other companies your browser talks to
Some parts of this site are loaded from other companies’ servers. When that happens your browser contacts them directly, and your IP address and browser identification string reach them as a normal part of that request. We want to be specific about which:
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) — the typeface this site is set in. Google receives your IP address. See Google’s privacy policy for what they do with it. - Gravatar (
secure.gravatar.com, operated by Automattic) — the avatar images next to blog posts and comments. Gravatar works by sending a scrambled (hashed) version of an email address, along with your IP address. See Automattic’s privacy policy. - Our hosting provider — stores the site and its database, and therefore holds everything above on our behalf.
We do not run Google Analytics, Google Tag Manager, the Meta pixel, or any other analytics or advertising tracker on this site.
What we do with it
We use what you send us to reply to you, to quote for and carry out work you ask about, and to keep the site running and secure. That is the whole of it.
We do not sell your personal data, rent it, or trade it. We do not add you to a marketing list because you filled in a contact form — if we ever want to send you something you did not ask for, we will ask first. We share data only with the service providers named above, who hold it on our behalf, and where the law requires us to.
How long we keep it
Contact form enquiries stay in our inbox while the conversation is live and for a reasonable period afterwards, so we have a record of what was agreed. Where an enquiry turns into paid work, we keep what we need for as long as our tax and accounting obligations require.
Comments and their metadata are kept indefinitely so that follow-up replies can be recognised and threaded, rather than held for moderation each time. Server logs are kept for a short period by our host and then rotated away.
If you want something removed sooner, ask — see below.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, or ask us to delete it. You can ask us to stop using it for a particular purpose. If you are in the UK, the European Economic Area, or another region with comparable data protection law, you may have further rights under it, including the right to complain to your local supervisory authority.
Email info@octivlab.com and tell us what you want done. We will need enough information to be sure it is really you before we act, and we will not charge you for a reasonable request.
Note that we are based in Pakistan, and that our service providers are outside it. Using this site means your data may be processed in other countries, which may have different data protection rules from your own.
Security
The site is served over HTTPS, access to its administration is restricted to our own staff, and we keep WordPress and its components updated. No website can promise perfect security, and we will not pretend otherwise — but if we ever become aware of a breach affecting your data, we will tell you and the relevant authority as the law requires.
Children
This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us their details, email us and we will delete them.
Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the date at the top. Material changes will be described here rather than made quietly.
Contact
Questions about this policy, or about anything we hold on you, go to info@octivlab.com, or by post to OctivLab, Bungalow # 638-L, Sector 5-D, North Karachi, Karachi, Sindh 75850, Pakistan.
