Privacy Policy

DataBI (“DataBI”, “we”, “us” or “our”) is a data analytics and business intelligence consultancy. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website at www.databi.me, contact us, book a call, or engage our services, and it describes your rights under applicable data-protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).

For the purposes of the GDPR/UK GDPR, DataBI is the data controller of the personal data described in this policy. By using our website or services, you acknowledge that you have read and understood this policy.

We collect the following categories of information:

• Information you provide to us. When you complete a contact or download form, book a call, or email us, we collect the details you choose to share — typically your name, email address, company, phone number, and the content of your message.
• Information collected automatically. When you visit our website we automatically receive certain technical data, including your IP address, approximate location (city/country level), browser and device type, operating system, referring URLs, and the pages you view and how you interact with them.
• Cookies and similar technologies. We use cookies and comparable technologies to operate the site and to understand usage. See “Cookies & tracking technologies” below.
• Client project data. During an engagement we may access business data within your own systems. This is governed by our contract with you — see “Client & project data” below.

We do not intentionally collect special categories of sensitive personal data through our website.

We use personal data to:

• respond to your enquiries and provide the information or resources you request;
• schedule and conduct calls and meetings;
• provide, manage and improve our analytics and consulting services;
• operate, secure, maintain and improve our website and understand how it is used;
• send service-related communications and, where you have consented or where permitted by law, relevant updates about our services (you can opt out at any time);
• comply with legal obligations and enforce our agreements.

We do not sell or rent your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Consent — for optional analytics/marketing cookies and marketing communications; you may withdraw consent at any time.
• Contract — to take steps at your request before entering into, and to perform, a contract for our services.
• Legitimate interests — to respond to enquiries, secure and improve our website, and promote our services, balanced against your rights and freedoms.
• Legal obligation — where we must process data to comply with the law.

We use a limited set of cookies and similar technologies. Strictly necessary cookies are required for the site to function. Analytics cookies (for example Google Analytics) help us understand aggregate usage; the data is aggregated and not used to identify you.

You can control cookies through your browser settings and, where offered, our cookie banner. Disabling some cookies may affect how the site works. For Google Analytics you can also install Google’s opt-out browser add-on.

We share personal data only as needed and with appropriate safeguards:

• Service providers (processors). Trusted vendors who process data on our behalf and under contract — for example our email provider, our scheduling provider (Calendly), analytics (Google Analytics), and our website hosting provider. Each processes data under its own privacy terms and only on our instructions.
• Legal and safety. Where required to comply with law, regulation, legal process, or an enforceable governmental request, or to protect our rights, property or safety.
• Business transfers. In connection with a merger, acquisition, financing or sale of assets, subject to this policy.

We do not sell your personal information, and we do not “share” it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.

We operate from the United States and Pakistan and use service providers that may process data in other countries. Where we transfer personal data across borders — including from the EEA or UK — we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or equivalent mechanisms, so your data remains protected.

We keep personal data only for as long as necessary for the purposes described in this policy, to comply with legal, accounting or reporting obligations, and to resolve disputes. Enquiry emails are retained while needed to serve you and are deleted on request. Client project data is handled per our engagement agreement (see below).

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration — including access controls, encryption in transit, and the principle of least privilege. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you and any regulator of a breach where the law requires.

Depending on where you live, you may have the following rights:

EEA / UK (GDPR): the right to access; rectification; erasure; restriction of processing; data portability; to object to processing (including direct marketing); and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).

California (CCPA/CPRA): the right to know/access the personal information we collect and how we use and disclose it; to request deletion; to request correction; to opt out of the “sale” or “sharing” of personal information (note: we do not sell or share it); and not to be discriminated against for exercising your rights.

To exercise any right, email us at privacy@databi.me. We will verify your request and respond within the timeframes required by applicable law. You may use an authorised agent where the law permits.

For analytics and BI engagements we work inside your own environment and accounts wherever possible. We treat all client business data as strictly confidential, are happy to sign a Non-Disclosure Agreement and a Data Processing Agreement before accessing any data, and act only on your documented instructions as a processor. We do not retain client data after an engagement ends except where you ask us to or the law requires.

Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

Our website may link to third-party sites and services we do not control. This policy does not apply to those sites, and we are not responsible for their content or privacy practices. We encourage you to review their policies.

We may update this Privacy Policy from time to time. The current version will always be posted on this page with the “Last updated” date above. Where changes are material, we will take reasonable steps to notify you. Your continued use of our website or services after an update constitutes acceptance of the revised policy.

If you have questions about this policy or how we handle your personal data, contact us:

• Email: privacy@databi.me (privacy / data requests: connect@databi.me)
• USA: 1309, Coffeen Ave, STE 1200, Sheridan, WY 82801, United States
• Pakistan: Office 3203-04, Third Floor, National Science & Technology Park (NSTP), NUST, H-12, Islamabad, 44000