Privacy Policy

Effective Date: September 6, 2025

Welcome to Turn Me Digital (“we”, “us”, “our”). We are a digital agency based in Pakistan, providing digital marketing, SEO, web development, branding, social media marketing, and related services to clients worldwide. Your privacy and trust are paramount to us. This Privacy Policy explains how we collect, use, share, and protect your personal data when you interact with our website (https://turnmedigital.com) (“Site”) and our services.

We are committed to complying with all applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the UK Privacy and Electronic Communications Regulations (PECR), and relevant Pakistani data protection standards.

Information We Collect

• Contact Data: Name, email address, phone number, company name, and any other information you provide via our contact forms, email, or during client onboarding.
• Account and Transaction Data: Billing information, payment details (processed securely via third-party providers), project details, and communication history.
• Usage Data: IP address, browser type, device information, operating system, referring/exit pages, and usage patterns collected via cookies and analytics tools.
• Security Data: Public IP addresses collected for security purposes, including rate limiting, fraud prevention, and abuse protection. We do not collect private or reserved IP ranges.
• Marketing Data: Preferences, feedback, and communication history if you subscribe to our newsletters or marketing communications.
• Cookies and Tracking Data: See Cookies and Tracking Technologies section for details.

We do not knowingly collect or process data from children under 16 years of age.

How and Why We Collect Data

• Service Delivery: To provide, manage, and improve our digital services, respond to inquiries, and fulfill contractual obligations.
• Client Onboarding and Support: To manage client accounts, contracts, and ongoing communications.
• Analytics and Site Optimization: To understand how visitors use our Site and services, enabling us to enhance user experience and performance.
• Security and Fraud Prevention: To protect our website and users from abuse, spam, and malicious activities through rate limiting and security monitoring.
• Marketing and Communications: To send newsletters, updates, and promotional materials, with your consent where required.
• Legal Compliance and Protection: To comply with legal obligations, resolve disputes, enforce agreements, and protect our rights and interests.

We collect data directly from you (e.g., forms, emails) and automatically via cookies and analytics technologies.

Security and Fraud Prevention

To protect our website and users from abuse, fraud, and security threats, we collect and process the following data:

• Public IP Addresses: We collect public IP addresses to implement rate limiting, prevent spam, and protect against malicious activities. We do not collect private or reserved IP ranges (192.168.x.x, 10.x.x.x, 127.x.x.x, etc.).
• Request Headers: Basic technical information such as user agent strings and referrer URLs to identify and block suspicious traffic patterns.
• Form Submission Data: Contact form submissions are logged with IP addresses for security monitoring and abuse prevention.

This data is collected based on our legitimate interest in protecting our website and users from security threats. The data is retained for a maximum of 30 days and is not used for marketing, advertising, or any purpose other than security and fraud prevention.

Legal Basis: Legitimate interest (security and fraud prevention). This processing is necessary to protect our business and users from abuse and malicious activities.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable essential website functionality
• Analyze website traffic and usage (e.g., Google Analytics)
• Remember your preferences and settings
• Support marketing and retargeting efforts

You can control cookies through your browser settings and opt out of non-essential cookies at any time. For more information, please review our Cookie Policy.

Third-Party Services

We may share your data with trusted third parties, including:

• Analytics Providers: e.g., Google Analytics (data may be transferred internationally)
• Payment Processors: e.g., Stripe, PayPal (for secure transactions)
• Email Marketing Tools: e.g., Mailchimp, SendGrid (for newsletters and updates)
• Hosting and IT Providers: For secure website and data hosting
• Professional Advisors: Legal, accounting, or other professional services as required

All third-party providers are contractually obligated to protect your data and use it only for specified purposes. We do not sell your personal data.

Data Storage and Security

We store your data on secure servers and implement industry-standard technical and organizational measures to protect it against unauthorized access, loss, misuse, or alteration. Access to your data is restricted to authorized personnel only, and we regularly review our security practices.

International Data Transfers

As a global agency, your data may be transferred to and processed in countries outside your own, including the European Economic Area (EEA), the United States, and Pakistan. We ensure such transfers comply with applicable laws and that your data is protected by appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, it is securely deleted or anonymized.

• IP Addresses: Retained for a maximum of 30 days for security and fraud prevention purposes.
• Contact Form Submissions: Retained for 2 years for business purposes and legal compliance.
• Marketing Data: Retained until you unsubscribe or request deletion.
• Client Data: Retained for the duration of the business relationship plus 7 years for legal compliance.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Obtain a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (“right to be forgotten”).
• Restriction: Limit processing of your data.
• Objection: Object to certain processing activities, including direct marketing.
• Data Portability: Receive your data in a portable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, please contact us at p***@t***.com. We will respond to your request in accordance with applicable laws.

Children's Data

Our services are not directed to children under 16. We do not knowingly collect or process personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information promptly.

Data Subject Requests and Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can address your concerns directly.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will post the updated policy on this page and update the “Effective Date” above. Please review this policy periodically.

Contact Us

Disclaimer: This Privacy Policy is provided for informational purposes and does not constitute legal advice. For specific legal guidance, please consult a qualified attorney.

Turn Me Digital is committed to protecting your privacy and providing a secure experience worldwide.