Privacy Policy

Last updated: 5 October 2026

This policy explains how Sepivex handles personal information collected through sepivex.com and through email sent to hello@sepivex.com.

1. Who we are

Sepivex is a software quality engineering and test automation business. It is operated from Pakistan by its founder, Huzaifa Khalid, as an individual business trading under the name Sepivex ("Sepivex," "we," "us").

For the personal information described in this policy, we decide how and why it is used. Where UK or EU data protection law applies, that makes us the controller of that information.

You can contact us about this policy or your personal information at hello@sepivex.com.

2. Scope

This policy covers:

• visits to sepivex.com;
• requests made through our proposal and Free Automation Audit request form; and
• email you send us.

It does not cover information we handle while delivering client work, such as access to a client's repositories, test results or systems. That information is governed by the written agreement for the engagement.

3. Information we collect

When you submit our request form, we receive:

• your name;
• your work email address;
• what you need help with (the option you select);
• your description of your biggest testing or release problem; and
• your application or product type, if you choose to provide it.

The form also sends a small amount of technical information that is not entered by you. This includes labels that tell us which form the request came from, and whether you arrived from our Free Automation Audit page.

When you email us, we receive your email address, the content of your message, any attachments, and standard email details such as the date and sender.

When you visit the website, the company that hosts it automatically processes technical information needed to deliver the pages. This includes your IP address, browser and device type, the pages requested, and the time of each request.

The service that receives our form also processes your IP address when you submit the form, to help prevent spam and abuse.

We do not collect payment information through the website, and we do not use analytics, advertising or tracking technologies on it.

4. Information you should not send us

Please do not include any of the following in the form or in a first email:

• passwords, access tokens, API keys or other credentials;
• confidential source code or other confidential business information; or
• sensitive personal information, such as information about health, ethnicity, religion or beliefs.

We do not need any of this to respond to an enquiry. If an engagement later requires access to systems or confidential material, we will arrange that separately, under appropriate written terms.

5. How we use your information

We use the information described above to:

• respond to your enquiry or request;
• understand your testing or release situation and assess whether and how we can help;
• prepare a proposal or carry out a Free Automation Audit you have requested;
• communicate with you about the services you asked about;
• keep our website, form and inbox secure, and filter spam and abuse; and
• keep records where needed to meet legal obligations or to establish or defend legal claims.

We do not add people who contact us to a marketing list, and we do not send them marketing emails. We do not sell personal information or use it for targeted advertising.

We do not make decisions about you based solely on automated processing.

6. Our lawful bases (where UK or EU data protection law applies)

Where UK or EU data protection law applies, we rely on the following lawful bases.

• Legitimate interests. We use this basis to respond to people who contact us about our services, assess and prepare proposals, communicate about requested services, and keep our website and inbox secure. We consider these uses to be expected and proportionate for a business enquiry.
• Steps before entering into a contract. Where you contact us on your own behalf about a possible engagement, we also rely on taking steps at your request before entering into a contract.
• Legal obligation. We rely on this where a law requires us to keep or disclose certain information.

Where we rely on legitimate interests, you have the right to object (see section 12).

7. Who we share information with

We share personal information only with the service providers that help us run the website and handle enquiries, and only for those purposes.

Our website does not store form submissions itself. They go to Web3Forms, which forwards them to our Hostinger mailbox.

We may also disclose information:

• where the law requires it;
• where it is needed to protect our rights or the safety of others; or
• to a successor if the Sepivex business is reorganised or transferred. In that case the information would remain subject to protections at least equivalent to those in this policy.

8. International processing

Sepivex is operated from Pakistan. Our service providers and their sub-processors may process personal information in other countries, including India, the United States, the European Union and the United Kingdom, and elsewhere they operate. These countries may not have data protection laws equivalent to those where you live.

Where required, our providers use recognised contractual or other safeguards for international transfers, as described in their applicable data-processing terms.

You can ask us for more information about how your information is transferred and protected (see section 17).

9. How long we keep information

Our own records

• Enquiries that do not become an engagement are kept for up to 24 months after the last meaningful contact. After that we delete them, unless we need to keep them longer to meet a legal obligation, deal with a dispute, investigate fraud or a security issue, or for another legitimate reason.
• Enquiries that become an engagement become part of our client records. They are kept for the period set out in the agreement for that engagement and as required by law.

Our form provider's records

Web3Forms keeps its own copy of form submissions under its own policies. Its current terms state that submissions may be kept for up to three years and are then deleted automatically. This retention is controlled by Web3Forms and is separate from our own retention period.

Website request logs

Our hosting provider keeps technical request logs for a limited period under its own policies.

10. Security

We take reasonable steps to protect the information we hold. These include:

• using service providers that encrypt information in transit;
• limiting access to our email account; and
• collecting only the information we need.

No website, email system or online service is completely secure. If you believe information you sent us has been compromised, please contact us at hello@sepivex.com.

11. Cookies and similar technologies

Our website does not set cookies. It does not use local storage, session storage or similar technologies to store information on your device. It does not use analytics or advertising tools, so it has no cookie banner.

If we introduce any of these in future, we will update this policy first. Where the law requires it, we will ask for your consent before using non-essential cookies or similar technologies.

Some browsers send a "Do Not Track" signal. Because we do not track visitors across websites, there is nothing for that signal to switch off.

12. Your rights

Depending on where you are and which law applies, you may have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information deleted;
• restrict how we use your information;
• receive information you provided to us in a portable format, where applicable; and
• object to how we use your information.

Your right to object. Where we rely on legitimate interests, you can object at any time. We will stop using your information for that purpose unless we have compelling legitimate grounds to continue, or we need it to establish, exercise or defend legal claims.

To make a request, email hello@sepivex.com. We may need to confirm your identity before acting on it. We will respond within the time required by the law that applies to you. Where UK or EU data protection law applies, that is normally within one month.

These rights are not absolute, and some apply only in certain locations or circumstances. Where a law does not give you a particular right, you are still welcome to ask us to access, correct or delete your information, and we will consider the request in good faith.

When we delete an enquiry from our own records, the copy held by Web3Forms is governed by its own retention policy (see section 9).

13. Complaints

If you have a concern about how we handle your personal information, please email hello@sepivex.com with "Privacy complaint" in the subject line. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome.

You also have the right to complain to a data protection regulator:

• in the United Kingdom, the Information Commissioner's Office (ICO);
• in the European Economic Area, the data protection supervisory authority in the country where you live, work, or where you believe the issue occurred; or
• elsewhere, your local privacy regulator, where one exists.

We would appreciate the chance to address your concern first.

14. Children

Our website and services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.

15. Automated decision-making

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects for you.

16. Changes to this policy

We may update this policy when our website, service providers or legal obligations change. The "Last updated" date at the top shows when it last changed. If we make a significant change, we will note it on this page.

17. Contact

Sepivex
Email: hello@sepivex.com
Website: sepivex.com