01Who we are
Manwaj Solutions is a technology company based in Karachi, Pakistan. We design, build and operate digital products — mobile and web applications, cloud backends, APIs and business automation — for other organisations, and we build products of our own, Drivio among them.
In this policy “we” and “Manwaj” mean Manwaj Solutions, and “you” means anyone visiting this website or getting in touch with us. We are the data controller for the information described below, and you can reach us any time at contact@manwajsolutions.com.
02What this policy covers
This policy covers this website and the correspondence that follows from it — the contact form, and the emails and messages you send us about a project.
It does not cover the products we build. Drivio, and any other app we ship, handles rider, driver and trip data under its own privacy policy, published inside that app. If you are a Drivio user asking about your ride history, wallet or location data, that policy is the one that applies to you.
It also does not cover data we process on behalf of a client while building or running their system. There we act as a processor, not a controller: the client's own privacy policy governs that data and we handle it only under our written agreement with them. See Working on client systems below.
03What we collect
Deliberately small. There are three kinds of information, and nothing else:
Your name, the email address or WhatsApp number you give us, the kind of work you tick on the form, and whatever you write in the message. You choose to send all of it — we do not obtain any of it from anywhere else.
Like any website, ours is served by a hosting provider that writes standard access logs: IP address, timestamp, the page requested, the referring page, and browser and device type. These are security and reliability records, not a profile of you.
No advertising trackers, no third-party analytics, no behavioural profiling, and no selling or sharing of your details with anyone marketing to you. This site sets no cookies of its own.
04How the contact form works
Worth being precise about, because it is unusual: the form does not post to a server of ours. When you press send, your browser opens your own email application with the message already written and addressed to us. Nothing leaves your device until you send that email yourself — close it instead and we never see a thing.
Once you do send it, the message lands in our inbox and is handled like any other email: read by the people who need to answer it, and kept for as long as described under How long we keep it. If we ever replace this with a hosted form that submits directly to us, we will update this section before switching it on.
05Why we use it
Each piece of information has one job, and we do not quietly repurpose it for another:
Replying to your enquiry, scoping the work, and sending a proposal or a quote.
Contracts, invoices, and the ordinary back-and-forth of a project once it starts.
Server logs let us spot abuse, debug faults and understand load.
Tax, accounting and other records we are legally required to retain.
06Our lawful basis
Where the law of your country requires one — the GDPR for visitors in the UK and EU, and comparable rules elsewhere — we rely on:
- Your consent, when you choose to write to us. You can withdraw it by asking us to delete the correspondence.
- Steps towards a contract, when we are quoting for or delivering work you asked for.
- Our legitimate interests, in keeping the site secure and our records straight — balanced against your privacy, which is why the logs stay short-lived.
- Legal obligation, for the financial records we are required to keep.
07Cookies and fonts
This site sets no cookies and runs no analytics script. There is no consent banner because there is nothing to consent to.
One thing to flag honestly: our typefaces are served by Google Fonts. Loading them means your browser requests fonts.googleapis.com and fonts.gstatic.com, and Google sees your IP address and browser in that request. Google states it does not use those requests to profile you. If you would rather it did not happen at all, a content blocker will stop it and the site stays fully readable in a fallback typeface.
08Who else touches it
The list is as short as we can make it — only the infrastructure we need to exist:
- Our hosting provider, which serves this site and writes the access logs.
- Our email provider, which carries and stores the messages you send us.
- Google Fonts, as described above.
- Our accountants and legal advisers, where a record has to be shown to them, and a lawful authority, where we are compelled by law to disclose something.
We do not sell your information, we do not rent it, and we do not hand it to advertisers. No one pays us for it, and there is no arrangement under which they could.
09Working on client systems
Building and running software means our engineers sometimes have access to a client's live system, and therefore to the personal data of that client's users. We treat that as the client's data throughout — it never becomes ours to use.
- Access is granted per person, per project, and revoked when the project ends.
- We work in a client's environment only for the purpose they instructed.
- Production data is not copied to personal machines or used to seed test systems.
- We sign a data-processing agreement wherever one is required.
If you are the end user of something we built for someone else, ask that company about your data — they hold it and they decide what happens to it. We will help them answer you.
10How long we keep it
Deleted within 24 months of the last message, or sooner if you ask.
Kept for the life of the engagement and a reasonable period after, so we can support what we built.
Kept for as long as Pakistani tax and company law requires.
Rotated on our host's normal schedule — a matter of weeks, not years.
11How we protect it
The site is served over HTTPS. Our accounts carry two-factor authentication, access to systems is limited to the people who need it, and credentials are never committed to a repository.
No system is perfectly secure and we will not pretend otherwise. If a breach ever affects your information and puts you at risk, we will tell you and the relevant authority without undue delay — and we will tell you what actually happened.
12Your rights
We honour these for anyone who asks, whatever their jurisdiction — rights over your own data should not depend on where you live:
- Access — ask what we hold about you, and get a copy.
- Correction — have anything wrong put right.
- Deletion — have it erased, unless the law requires us to keep it.
- Objection and restriction — tell us to stop using it, or to only store it.
- Portability — receive it in a machine-readable form.
- Withdrawing consent — at any time, without giving a reason.
Write to contact@manwajsolutions.com and we will respond within 30 days. We will not charge you and we will not make it difficult. If you are in the UK or EU and are unhappy with our answer, you may complain to your national data protection authority.
13Where your data goes
We are in Pakistan, and our hosting and email providers run data centres in several countries, so your information may be stored or processed outside your own. Where a transfer out of the UK or EU is involved we rely on the standard contractual clauses those providers publish, and we choose providers that publish them.
14Children
This is a business-to-business studio site. It is not directed at children and we do not knowingly collect information from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.
15Changes to this policy
We will update this page when what we do changes — the effective date at the top is how you tell. If a change materially affects how we handle information you have already given us, we will say so here rather than quietly editing the text.
A question about your data goes straight to a person.
No ticket queue, no form to fill. Write to us and someone on the team answers — within 30 days by policy, usually within one.