Privacy Policy

This website is operated by UPX LAB (PRIVATE) LIMITED (“we”, “us”, “our”), a company registered in Pakistan.

Registered office: Office # 10, First Floor, Galaxy Centre, Ferozpur road, Lahore, Pakistan.

Contact: hello@upxlab.com · 0092 300 0231115.

This policy explains how we handle personal information when you visit upxlab.com, submit our contact form, or email us. It does not cover third-party websites we link to.

We collect information you choose to send us and limited technical data needed to run and secure the site.

• Contact form: name, email address, company (optional), project needs, description, budget range, timeline, and website/product URL (optional).
• Communications: the content of emails you send to our studio addresses.
• Security checks: Cloudflare Turnstile verification tokens (to reduce spam and abuse).
• Technical data: approximate IP address and related request metadata used for rate limiting, abuse prevention, and basic server logs.
• We do not intentionally collect special-category data through the contact form. Please do not submit sensitive personal information unless it is necessary for your inquiry.

We use personal information to:

• Respond to inquiries and discuss potential projects.
• Send a confirmation email after you submit the contact form.
• Operate, secure, and improve the website (including spam and abuse prevention).
• Meet legal, accounting, or contractual obligations when required.

Depending on your location, we process personal data based on: your request (pre-contractual steps when you inquire about services); our legitimate interests in running a secure website and responding to business inquiries; and legal obligations where they apply.

We use trusted processors to operate the site and email. They process data on our instructions and are not permitted to use it for their own marketing.

• Hosting and delivery: Vercel (website hosting).
• Email delivery: Resend (transactional email for contact form notifications and confirmations).
• Spam protection: Cloudflare Turnstile.
• Optional rate limiting: Upstash Redis (when configured), using hashed or limited request identifiers.
• We do not sell your personal information.

Inquiry and related emails are kept for as long as reasonably needed to manage the conversation, maintain business records, and meet legal requirements, then deleted or archived according to our internal practices.

Server and security logs are retained for a limited period for security and troubleshooting.

We use industry-standard measures appropriate to a small studio website (HTTPS, access controls on email and hosting accounts, spam and rate-limit protections). No method of transmission or storage is completely secure.

Our hosting and email providers may process data in countries outside Pakistan (including the United States and EU regions). Where required, we rely on appropriate contractual and provider safeguards.

The marketing site itself is primarily informational and does not use advertising cookies. Cloudflare Turnstile may set or read cookies or similar technologies strictly for bot protection when you use the contact form. Your browser may also store ordinary technical data required to load the site.

Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you, or ask us to restrict or object to certain processing. To exercise these rights, email hello@upxlab.com. We may need to verify your request.

Our services are directed to businesses and professionals. We do not knowingly collect personal information from children under 16. If you believe we have done so, contact us and we will delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page will change when we do. Continued use of the site after updates constitutes notice of the revised policy.

Questions about privacy: hello@upxlab.com

UPX LAB (PRIVATE) LIMITED, Office # 10, First Floor, Galaxy Centre, Ferozpur road, Lahore, Pakistan