Privacy policy

Last updated: 26 October 2026

Who we are

SMD Networks ("we", "us") provides back-office services to businesses. We are the controller of the personal data described in this policy.

Address: Jinnah Avenue, Islamabad 46000, Pakistan
Email: support@smdnetworks.com

What we collect

When you use our enquiry form, email us or message us on WhatsApp, we collect the details you give us: your name, business name, email, phone number and the information about your business you choose to share. If you tick the marketing box, we also record when you gave consent and the wording you agreed to.

For business development we may also collect business contact details (name, job title, work email or phone, company) from public sources such as company websites, LinkedIn and Companies House.

Why we use it

• To reply to your enquiry and arrange a call - legitimate interests in responding to business enquiries.
• To provide our services if you become a client - the contract with you.
• To tell businesses about relevant services - legitimate interests, or your consent where the law requires it.
• To keep our forms free of spam and our records accurate - legitimate interests.

Marketing emails

We only send marketing emails (practical insights and offers) if you tick the optional box on our form, or if you are a corporate business contact we may lawfully email about services relevant to your company. Every marketing email has an unsubscribe link, and you can also email us at any time to stop them. When you unsubscribe we keep your email on a suppression list so we never contact you again by mistake.

Who we share it with

We do not sell your data. We use service providers who process data on our behalf under contract:

• our website host (website and enquiry records);
• Brevo (Sendinblue SAS, France) for email and marketing preferences;
• Cloudflare, if our form's security check is switched on;
• Meta (WhatsApp), if you choose to message us there.

International transfers

Our team works from Pakistan and some of our providers store data outside the UK. Where personal data leaves the UK, we use safeguards recognised under UK law, such as the UK's adequacy regulations or the International Data Transfer Agreement / Addendum, and we limit access to the people who need it.

How long we keep it

Enquiries that do not lead to work are deleted within 24 months. Marketing consent records are kept for as long as you stay subscribed and for 2 years after. Suppression records are kept for as long as needed to respect your opt-out. Client records are kept for as long as the law requires.

Cookies

This website does not use advertising or tracking cookies, so we do not show a cookie banner. If you log in to the site's admin area, WordPress sets cookies that are strictly necessary for that. Photos on some pages are loaded from Pexels, which may see your IP address. If we add analytics in future we will update this page first.

Spam protection

To stop automated spam, our form runs simple checks when you send it, and may use Cloudflare Turnstile to confirm a real person is using it. We keep only a count of blocked submissions, not their details.

Your rights

Under UK GDPR you can ask to see, correct or delete your data, object to how we use it, or withdraw consent at any time. Email us and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.