Privacy Policy
Privacy Policy
How Ali Ahsan, operating under the business name Criflet, collects, uses, stores, and protects personal information submitted through the Criflet website and business communications.
Document Status
Effective date
July 23, 2026
Last updated
July 23, 2026
These pages are general website terms and notices. They are not a substitute for legal advice.
01
Introduction
This Privacy Policy explains how Ali Ahsan, operating under the business name Criflet, collects, uses, stores, and protects personal information when you visit criflet.com, submit a contact form, submit a software project brief, communicate by email, WhatsApp, LinkedIn, or another agreed channel, or otherwise interact with Criflet.
Criflet is an independent, founder-operated software brand based in Pakistan and is not currently a separately incorporated legal entity. Ali Ahsan is responsible for personal information collected through the Criflet website and related business communications.
This Privacy Policy applies to the public Criflet website and initial business enquiries. Separate contractual privacy, confidentiality, security, or data-processing terms may apply when Criflet begins a client project or processes information on behalf of a client.
02
Responsible Person
Business name: Criflet. Operator: Ali Ahsan. Business type: independent software brand and founder-led software studio. Country: Pakistan. Website: https://criflet.com. Privacy contact: hello@criflet.com.
For privacy-related questions or requests, use the subject line Privacy Request - Criflet.
03
Information Collected
The information collected depends on how you interact with Criflet.
- Contact form information, including name, email address, business or organization, subject, reason for contact, message, preferred response method, phone or WhatsApp number if provided, and other information voluntarily included.
- Project enquiry information, including contact details, company or product name, country or region, website or product links, project type and stage, project summary, business problem, intended users, features, roles, platforms, existing systems, integrations, timelines, budget, decision-maker context, referral source, and supporting information voluntarily provided.
- Direct communication information from email, WhatsApp, LinkedIn, video calls, or other agreed channels, including visible profile information, contact details, messages, links, attachments, call notes, dates, and communication history.
- Automatically processed technical information, which may include IP address, browser and device type, operating system, referring source, pages visited, approximate access time, language and region settings, technical errors, performance information, security logs, and consent preferences where a consent tool is active.
04
How Information Is Used
Criflet will not use project information to publicly disclose your confidential ideas, business processes, or materials without permission. Submitting a project brief does not create a client relationship, contract, quotation, or obligation for either party.
- To receive, review, and respond to enquiries.
- To understand a proposed software project and assess suitability, scope, timing, budget, and technical fit.
- To prepare for a discovery call, consultation, clarification request, or project discussion.
- To provide service information and communicate about existing or proposed projects.
- To maintain business correspondence and manage professional relationships.
- To improve website content, navigation, usability, performance, and security.
- To prevent spam, fraud, misuse, and security threats.
- To comply with legal obligations and establish, exercise, or defend legal rights.
05
Legal Grounds
Depending on your location and the circumstances, Criflet may rely on consent, steps requested before a contract, contractual necessity, legitimate business interests, legal obligations, or legal claims.
Legitimate interests may include responding to business enquiries, maintaining professional correspondence, improving services and website performance, protecting the website and business from misuse, and keeping appropriate records.
06
Cookies and Analytics
Criflet's use of cookies and similar technologies is explained in the Cookie Policy.
No Google Analytics, Microsoft Clarity, or other website analytics provider is currently implemented in the source reviewed for this page. If Google Analytics is enabled later, this Privacy Policy, Cookie Policy, and any cookie controls should be updated before relying on the analytics implementation.
07
Sharing Information
Criflet does not sell or rent personal information.
- Information may be shared with hosting, infrastructure, email, communication, analytics where enabled, security, abuse-prevention, professional adviser, contractor, collaborator, authority, or legal recipients only where reasonably necessary.
- A contractor or collaborator may receive limited information only when their involvement is relevant, disclosure is reasonably necessary, appropriate confidentiality expectations apply, and the client or prospect has been informed where appropriate.
- Criflet should not imply that it has a team when work is being carried out solely by Ali Ahsan.
08
Third Parties and International Processing
The website may link to or use third-party platforms such as WhatsApp, LinkedIn, email providers, scheduling or video-call services, portfolio or project websites, social-media platforms, or embedded maps and media. Criflet does not control independent third-party privacy practices.
Criflet operates from Pakistan and may work with clients, prospects, and service providers in other countries. Information may therefore be processed in Pakistan or in countries where website, email, cloud, communications, or infrastructure providers operate.
09
Retention
Criflet retains information only for as long as reasonably necessary for the purpose for which it was collected, legitimate business needs, legal obligations, security, or legal claims.
| Information | Intended retention |
|---|---|
| General enquiries that do not become projects | Up to 24 months after the last meaningful communication |
| Unsuccessful or inactive project enquiries | Up to 24 months after the last meaningful communication |
| Active client and project correspondence | For the duration of the relationship and a reasonable period afterward |
| Contracts, invoices, payment, tax, and legal records | For the period required by applicable law or reasonably needed for legal claims |
| Consent records | For as long as needed to demonstrate or manage consent |
| Website security logs | Generally up to 90 days, unless needed longer to investigate an incident |
| Analytics data | According to the configured retention period of the active analytics service, if analytics is enabled |
10
Security
Criflet takes reasonable technical and organizational steps appropriate to the nature of the information handled. These may include HTTPS, access controls, secure credentials, software updates, validation and spam protection on forms, limited access to enquiry information, secure environment-variable handling, backups where appropriate, monitoring, and error logging.
No website, email system, cloud service, or internet transmission can be guaranteed completely secure. Do not send unnecessary sensitive information through public forms or unsecured channels.
11
Your Rights
Your rights depend on your location and applicable law. Where applicable, you may have the right to ask whether Criflet holds personal information about you, request access, correction, deletion, restriction, portability, withdraw consent, unsubscribe from permitted marketing, object to certain processing, or complain to a relevant authority.
These rights may be subject to legal limitations, exemptions, identity verification, recordkeeping obligations, or overriding legal grounds. To make a request, email hello@criflet.com with the subject Privacy Request - Criflet.
12
Children and Automated Decisions
Criflet's website and software-development services are intended for businesses, founders, professionals, and adult decision-makers. The website is not directed to children, and Criflet does not knowingly collect personal information from children through business or project forms.
Criflet does not use solely automated decision-making through the public website to make decisions that produce legal or similarly significant effects. Spam filters, security systems, or form-validation tools may automatically block suspicious or invalid submissions.
13
Changes and Contact
Criflet may update this Privacy Policy when website features, service providers, processing practices, legal requirements, or Criflet's business structure change. The updated version will be posted with a revised Last updated date.
Contact: Ali Ahsan, operating as Criflet, Pakistan. Email: hello@criflet.com. Website: https://criflet.com.
Questions
Need clarification about this page?
Contact Criflet directly for website, privacy, accessibility, or business communication questions.
Contact Criflet