IT Cybx Logo
Legal · Privacy Policy

Your privacy, clearly explained.

How IT Cybx collects, uses, and protects personal data.

Effective date: 01/06/2026
On this page
  1. •Introduction
  2. •Who we are (data controller)
  3. 1Information we collect
  4. 2How we use your information
  5. 3Legal bases (UK GDPR / PDPL)
  6. 4Sharing your information
  7. 5International transfers
  8. 6Client account access & confidentiality
  9. 7Data retention
  10. 8Data security
  11. 9Your rights
  12. 10Children
  13. 11Cookies
  14. 12Changes
  15. 13Contact

Introduction

IT Cybx (“IT Cybx,” “we,” “us,” “our”) operates itcybx.co.uk (the “Site”) and provides e-commerce growth services. This policy explains how we collect, use, and protect personal data. We are committed to handling your data lawfully and transparently, in line with the UK General Data Protection Regulation (UK GDPR), the Saudi Personal Data Protection Law (PDPL), and applicable Pakistani law.

Who we are (data controller)

IT Cybx, Office #2, Friend Arcade, Street #87, 1st Floor, G-13/1 Islamabad. Contact: info@itcybx.co.uk

1

Information we collect

  • Information you give us: when you submit a form, book an audit, or contact us: your name, email address, phone/WhatsApp number, store URL, company name, and any message content.
  • Payment information: we accept payment by bank transfer to our business bank account. We do not collect, process, or store card details.
  • Information collected automatically: IP address, browser and device type, pages visited, and usage data, collected via cookies and analytics (see our Cookie Policy).
  • Client engagement data: when you engage our services, you may grant us access to your store platform (e.g. Shopify, Salla, Zid), advertising accounts (e.g. Meta, Google), and analytics. See section 6.
2

How we use your information

  • To respond to enquiries and provide quotes.
  • To deliver, manage, and improve our services.
  • To process payments and send invoices/receipts.
  • To send service-related communications.
  • To send marketing communications where you have consented (you can opt out anytime).
  • To comply with legal obligations and protect our rights.
3

Legal bases (UK GDPR / PDPL)

We rely on:

performance of a contract (to deliver services you request); consent (marketing, non-essential cookies); legitimate interests (to run and improve our business, where not overridden by your rights); and legal obligation (tax, accounting).

4

Sharing your information

We do not sell your personal data. We share it only with: service providers who help us operate (hosting Hostinger, analytics Google Analytics, advertising/measurement Meta Pixel, communication tools); professional advisers; our bank; and authorities where legally required. These parties are bound to protect your data.

5

International transfers

We are based in Pakistan and serve clients in the UK and GCC, so your data may be processed outside your country. Where required, we put appropriate safeguards in place for such transfers.

6

Client account access & confidentiality

When you engage us, you may grant access to your store, advertising, and analytics accounts solely so we can deliver the agreed services. We commit to: accessing only what is needed for the work; never selling, sharing, or misusing your account data; keeping your business data confidential; and relinquishing access on request or at the end of the engagement. You may revoke our access at any time.

7

Data retention

We keep personal data only as long as necessary for the purposes above, or as required by law (e.g. tax records). We delete or anonymize it when no longer needed.

8

Data security

We use reasonable technical and organizational measures to protect your data. No method of transmission over the internet is fully secure, so we cannot guarantee absolute security.

9

Your rights

Subject to applicable law, you may have the right to: access your data; correct it; request deletion; restrict or object to processing; data portability; and withdraw consent. To exercise these, contact info@itcybx.co.uk. You may also lodge a complaint with your local data protection authority (e.g. the UK ICO, or the Saudi competent authority).

10

Children

Our Site and services are not directed at anyone under 18, and we do not knowingly collect their data.

12

Changes

We may update this policy; the “Effective date” shows the latest version. Material changes will be posted on this page.

Questions?

Have a question about this policy?

Get in touch and we'll be happy to help. We reply to every serious enquiry within one business day.

Contact Us