PrivacyPOLICY

GullG Technologies ("GullG", "we", "our", or "us") is a global creative technology and digital engineering studio headquartered in Islamabad, Pakistan. We specialize in bespoke digital experiences, high-performance web and mobile architectures, AI agent engineering, and enterprise automation solutions.

This Privacy Policy outlines how we collect, handle, protect, and process personal information when you visit our website (gullgtech.online), interact with our services, transmit project briefs, or engage with our capabilities deck materials.

We only collect personal information that you voluntarily choose to provide to us when submitting inquiries, requesting our capabilities deck, or providing project specifications:

• Contact Details: Your full name, corporate email address, and direct phone number.
• Company Information: Company name, existing website URL, and geographic location.
• Project Specifications: Project briefs, architectural requirements, timeline goals, and uploaded supporting files (e.g. PDF, DOCX, ZIP).
• Technical & Log Data: Basic server diagnostic logs, IP address, browser type, and operating system collected routinely to maintain infrastructure stability and security.

We gather information through transparent, direct user actions:

• Direct submission via the "Let's Talk" interactive brief form on our contact page.
• Capabilities deck download requests submitted through our footer and header triggers.
• Direct email inquiries directed to our team at hi@gullgtech.online.
• Automated server-level protocol logs when establishing secure TLS connections to our domain.

Personal information collected by GullG Technologies is utilized exclusively for legitimate business and client-relationship purposes:

• Evaluating project viability, technical scope, and engineering estimates.
• Responding promptly to consultations and capabilities deck distribution.
• Executing formal service agreements, non-disclosure agreements (NDAs), and technical workflows.
• Maintaining network integrity, mitigating DDoS threats, and safeguarding server uptime.

We never sell, rent, monetize, or broker your personal information to third-party data brokers or marketing affiliates.

In accordance with global privacy frameworks (including GDPR, UK GDPR, and international data protection standards), we process your data under the following legal bases:

• Consent: When you voluntarily submit forms, accept policy terms, or request documentation.
• Contractual Necessity: To take preparatory steps prior to entering into a master services agreement or technical development contract.
• Legitimate Interests: To deliver reliable digital agency operations, secure our infrastructure, and communicate with enterprise partners.
• Legal Compliance: Fulfilling our statutory, tax, accounting, and regulatory obligations.

Our web application is built on modern Next.js architecture and strictly prioritizes user privacy:

• We only utilize strictly essential technical session storage and cookies necessary for navigational routing, hydration, and visual preferences.
• We do not deploy intrusive behavioral cross-site trackers or third-party advertising cookies.
• You can configure your browser to reject cookies or notify you when a cookie is placed.

GullG Technologies avoids invasive third-party telemetry tools. Any analytics performed on our platform are strictly privacy-preserving, anonymized server-side diagnostic measurements designed solely to monitor site performance, latency, and system availability.

We do not disclose your personal information to outside parties, except under the following strict parameters:

• Infrastructure Service Providers: Trusted hosting providers, cloud computation platforms, and secure email relays operating under strict confidentiality and data protection agreements.
• Legal Compulsion: When required by court order, subpoena, or applicable statutory authority to protect legal rights and public safety.
• Business Transfers: In connection with an organizational merger, acquisition, or asset transfer, subject to standard confidentiality protections.

As an international engineering studio serving clients across North America, Europe, Asia, and the Middle East, personal information may be transferred to and maintained on secure servers situated outside your domestic jurisdiction.

Whenever cross-border transfers occur, we implement appropriate contractual, organizational, and technical safeguards, including Standard Contractual Clauses (SCCs), to ensure data protection equivalent to GDPR standards.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying project engagement lifecycles, accounting obligations, and dispute resolution.

Inquiries that do not mature into active client engagements are routinely purged from our active communication repositories after 24 months, unless a shorter deletion period is requested.

We employ multi-layered technological and organizational measures to safeguard your information against unauthorized access, destruction, loss, or alteration:

• End-to-end TLS encryption for all data transmitted across our web surfaces.
• Restricted principle-of-least-privilege access protocols for internal studio staff.
• Continuous vulnerability assessments and zero-trust cloud configuration audits.

Depending on your jurisdiction, you possess specific statutory rights regarding your personal information:

• Access: Request confirmation and a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete records.
• Erasure ("Right to be Forgotten"): Request the permanent deletion of your personal records.
• Restriction: Request temporary restriction of data processing activities.
• Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Objection: Object to processing based on legitimate studio interests.

To exercise any of these rights, contact our Data Protection Officer at hi@gullgtech.online.

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents are entitled to specific disclosures:

• We do not sell personal data or share personal data for cross-context behavioral advertising.
• You have the right to know what personal information is collected, used, and disclosed.
• You have the right to non-discrimination for exercising your CCPA rights.

If you reside in the European Economic Area (EEA) or the United Kingdom (UK), our data processing complies strictly with Regulation (EU) 2016/679 (GDPR) and the UK Data Protection Act 2018.

You have the right to lodge a complaint with your competent national supervisory authority (e.g., the Information Commissioner's Office in the UK or your local European Data Protection Authority) if you believe our data processing infringes applicable law.

Our services and website are tailored exclusively for commercial enterprises, professional founders, and adult creative partners. We do not knowingly solicit, collect, or process personal data from children under 16 years of age. If we become aware of inadvertent collection from a minor, we will promptly delete such records.

Our website may contain hyperlinks to third-party digital properties (such as LinkedIn, Instagram, Facebook, and X). We do not control and are not responsible for the privacy practices, cookie policies, or content of external sites. We encourage you to review the individual privacy policies of any third-party destinations you visit.

GullG Technologies does not utilize automated decision-making systems or profiling algorithms that produce legal or similarly significant effects concerning users. All project evaluations and partnership communications are conducted by human directors and engineers.

We may update this Privacy Policy periodically to reflect emerging technological capabilities, service updates, or regulatory modifications. Any changes will be published on this page with an updated "Effective Date" at the top. We encourage regular review of this policy.

If you have any questions, inquiries, or requests regarding this Privacy Policy or our data management practices, please contact our legal and administrative office: