How Flexnovate collects, uses, shares and protects your personal data.
Last updated October 2026.
In this policy, "Personal Data" means any information relating to an identified or identifiable person, such as name, email, phone, address, IP address, browser data and behavioural data. "You" means any visitor, lead or client. "We" means Flexnovate.
Flexnovate is a digital agency founded in 2022, with a base in Karachi, Pakistan and operations in Toronto, Canada, offering web, design, marketing, automation, BPO and software services. For any privacy request, email info@flexnovate.com. We respond to privacy requests within 30 days.
We collect Identity data, Contact data, Technical data, Behavioural data, Project data, Financial and payment metadata, Marketing preferences and Support data. We do not collect government IDs, biometric, health or political data.
We use your data to deliver our services, handle billing and tax, communicate with you, improve our services, keep our systems secure, send marketing only where you have consented, and comply with the law. We never sell your personal data.
We use Essential, Functional, Analytics and Marketing cookies. Essential cookies are always on; the rest run only with your consent, which you can manage in your browser or our cookie controls.
We share data only with trusted providers we use to run our business, such as payment processors, hosting, marketing platforms, analytics and CRM tools. We never sell personal data.
Your data may be processed in Pakistan, Canada, the US and the EU. Where data crosses borders, we rely on appropriate safeguards such as Standard Contractual Clauses.
We keep data only as long as needed. Retention ranges from around 90 days for logs to up to 6 years after an engagement for client account and financial records.
You have the right to access, correct, erase, restrict or object to processing, request portability, ask about automated decisions, and lodge a complaint. To exercise any right, contact info@flexnovate.com.
We protect your data with measures such as encryption in transit and at rest, multi-factor access controls, and regular testing. In the event of a data breach, we aim to notify affected users promptly.
Some services involve extra handling: BPO and live chat may record interactions, email marketing follows opt-in rules, hosting stores your site data, and staff augmentation and eCommerce work involves the data you share for that project.
We send marketing only with your consent, and every marketing message includes an unsubscribe option. Essential transactional messages about your project are not marketing.
Our services are intended for people aged 18 and over. We do not knowingly collect data from children.
We may update this policy from time to time. For material changes we aim to give notice before they take effect. Please review this page periodically for the latest version.
CA · CAD ▾
