This policy explains what personal data ESFORGE collects through esforge.com, why we collect it, how long we keep it, and what you can ask us to do with it. It covers the website only. Data processed under a signed client engagement is governed by that contract instead.
Who we are
ESFORGE is a technology consultancy based in Islamabad, Pakistan, providing simulation, robotics, artificial intelligence and software engineering services. For any question about this policy or about data we hold, contact contact@esforge.com.
What we collect, and why
We only collect data you actively submit, plus limited analytics data if you consent to it. We do not buy personal data, and we do not build profiles across other websites.
| Where | What | Why | Kept for |
|---|---|---|---|
| Consultation booking | Name, email, company, message, chosen time | To hold the meeting you requested and prepare for it | 24 months from last contact |
| Project brief and quote requests | Name, email, company, project details, any files you attach | To assess and respond to your enquiry | 24 months from last contact |
| Newsletter | Email address, confirmation status | To send the newsletter you asked for | Until you unsubscribe |
| Job applications | Name, contact details, CV, links, answers to screening questions | To assess your application | 12 months, or longer with your consent |
| Talent pool | Name, email, discipline, seniority, CV | To contact you when a matching role opens | 24 months, or until you ask us to remove it |
| Event registration | Name, email, company | To admit you to the event and send joining details | 24 months |
| Resource downloads | Email address, which resource | To send the file and understand which topics are useful | 24 months |
| Site assistant | Your messages to the assistant, page context | To answer your question and improve the assistant | 12 months |
| Analytics (consent only) | Pages viewed, approximate location, device, referring site | To understand how the site is used and improve it | 14 months |
Legal basis
- Your consent — analytics cookies, newsletter, and talent-pool alerts. You can withdraw consent at any time.
- Steps prior to a contract — bookings, briefs and quote requests you initiate.
- Legitimate interests — responding to enquiries, assessing job applications, and keeping the site secure. We balance these against your rights and use the minimum data needed.
Who your data is shared with
We do not sell personal data. We share it only with the service providers needed to operate the site:
| Provider | Purpose |
|---|---|
| Supabase | Database and file storage for submissions |
| Netlify | Website hosting and delivery |
| Google Analytics | Website analytics, only with your consent |
| Microsoft Clarity | Behavioural analytics, only with your consent |
| Email delivery provider | Sending confirmations and the newsletter |
Some of these providers operate outside Pakistan and outside the European Economic Area. Where data is transferred internationally, we rely on the provider’s standard contractual clauses or equivalent safeguards.
How we protect it
- All traffic is served over HTTPS with HSTS enabled.
- Submissions are stored with row-level security so that only authenticated ESFORGE administrators can read them. No visitor can read another visitor’s submission.
- Uploaded CVs are held in a private storage bucket and served only through short-lived signed links.
- Access to the admin dashboard requires an authenticated account with an administrator role.
Your rights
You can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct anything that is wrong or out of date.
- Delete your data, where we have no continuing need or legal obligation to keep it.
- Stop using your data for a particular purpose, including marketing.
- Withdraw consent you previously gave, without affecting what was done beforehand.
Email contact@esforge.com with your request. We respond within 30 days. If we cannot act on a request, we will explain why.
Cookies
Analytics cookies are not set until you accept them. Full detail, including how to change your choice, is in the cookie policy.
Children
This site is intended for business use and is not directed at children under 16. We do not knowingly collect their data. If you believe we have, contact us and we will delete it.
Changes
If we change this policy we will update the date at the top of this page. Material changes to how we use analytics will also re-prompt you for consent.