LEGAL
Privacy Policy
Last updated 21 September 2026
Still outstanding: the SECP incorporation number and the registered office address are not printed below, because they have not been supplied — a privacy policy is ordinarily expected to carry both. This page accurately describes the data flows in the site’s code, but it has not been reviewed by a lawyer, and the paragraph on Pakistani data-protection law below should be confirmed against the statute in force today.
Who is responsible for your data
The data controller is Halyx Technologies (Private) Limited, a company incorporated in Pakistan, registered with the Securities and Exchange Commission of Pakistan (SECP) and based in Lahore, Punjab. “Halyx”, “we” and “us” below mean that company. Anything on this page can be raised by email at halyxtechnologies@gmail.com.
The short version
This site sets no cookies and runs no analytics or tracking of any kind. Fonts are served from this domain, so no request for them reaches a third party. Nothing you send is written to a database. The only personal data that persists anywhere is the enquiry email itself, sitting in the studio’s inbox.
What is collected, and when
Only when you choose to start one of these three things. Browsing the page collects nothing.
- The enquiry form. Your name, and optionally your company, email address, phone number, the service you are interested in, and your brief. Name and email are required because there is no way to reply without them.
- The text assistant. The messages you type. Do not paste anything confidential into it.
- The voice assistant. Your microphone audio, for as long as the conversation is running. Your browser will ask permission first, and the conversation does not start until you grant it. The audio is transcribed as it arrives and is not recorded or stored by this site.
Your language choice is kept in your browser’s local storage so the site remembers it on your next visit. It stays on your device, is never sent anywhere, and clearing your browser data removes it.
Why, and on what basis
Enquiry details are used to answer your enquiry and for nothing else. They are not sold, rented, or added to a marketing list, and you will not receive anything you did not ask for. The lawful basis is legitimate interest — you contacted a business expecting a reply. For the microphone, the basis is your consent, which you give in the browser prompt and can withdraw by ending the conversation or revoking the permission.
Who else processes it
These providers handle your data on the studio’s behalf in order to make the site work. Each sees only the part it needs.
| Provider | What it does | Located |
|---|---|---|
| Vercel | Hosting and delivery of this site | United States |
| Resend | Delivers the enquiry email and your acknowledgement | United States |
| Groq | Generates the text assistant's replies | United States |
| LiveKit | Carries the audio for a voice conversation | United States |
| Deepgram | Transcribes your speech during a voice conversation | United States |
| OpenAI | Generates the voice assistant's replies | United States |
| Cartesia | Synthesises the assistant's speech | United States |
International transfers. Two of them, stated plainly. We are in Pakistan, and every provider in the table above is a United States company. So if you are in the UK or the EEA, your data leaves it twice over — once to Pakistan and once to the United States — and neither is covered by a UK or EU adequacy decision. Transfers to the providers rely on their own safeguards, typically Standard Contractual Clauses under their data processing agreements. If that matters to you, email before using the form or the assistant and we will take your enquiry by another route.
How long it is kept
- Enquiries: the email stays in the studio’s inbox while the conversation is live and for up to 24 months afterwards, then is deleted.
- Assistant conversations: not stored. They exist for the length of the exchange and are gone when you close the page. There is no transcript to request or delete.
Your rights
Wherever you are, and whatever your local law entitles you to, you can ask for a copy of what is held about you, ask for it to be corrected or deleted, or object to it being held at all. Email halyxtechnologies@gmail.com and say what you want done. There is no form and no account to log into — a plain email is enough, and we will act on it within 30 days. We offer this as a matter of policy rather than only where a statute compels it, because the alternative is deciding which visitors deserve an answer.
If you are in the UK or the EEA and the UK GDPR or the GDPR applies to this processing, you additionally keep your statutory rights, including the right to complain to your own supervisory authority — the Information Commissioner’s Office in the UK, or your national data protection authority in the EEA. You do not have to come to us first.
If you are in Pakistan, the applicable regime is Pakistan’s own law on electronic crime and data protection, which has been undergoing reform. Rather than name an authority that may not be the right one by the time you read this, we will tell you the current route on request — and the rights above apply to you regardless of what the statute requires.
Changes
If the site starts collecting something new — analytics, a cookie, a different provider — this page changes in the same release, and the date at the top moves. It is not updated quietly.
Contact
Questions about any of this go to halyxtechnologies@gmail.com.