At a glance
Silquetech is a senior-only digital studio. We collect the minimum information needed to do good work for you: your contact details when you reach out, project details when you brief us, account info when you use the client portal, and basic technical data (hashed IP, user-agent) for security and abuse prevention. We don't sell your data, we don't use it for ad targeting, and we don't share it with anyone you wouldn't expect.
Our payment processing runs through Stripe, our chatbot uses Google's Gemini API, and we relay transactional email through Hostinger. Beyond those operational vendors, your data stays inside Silquetech.
Who we are
Silquetech Ltd is an e-commerce and web solutions studio. We design, build, and maintain online stores, websites, and web applications for our clients, and we operate this site along with the underlying client portal. We collect contact information — name, email address, and phone number — when you sign up for an account, engage our services, or contact us. We have offices in London, Karachi, Sheridan (Wyoming, US), and Ajman (UAE). Our US and UAE offices operate in partnership with Ample Solutions LLC; data shared with them is governed by an inter-company data-processing agreement.
For questions about this policy or to exercise any of your rights, email us at privacy@silquetech.com.
What we collect
Information you give us
When you submit a project brief, book a call, create an account, or open a support ticket, we store what you provide:
- Contact briefs — name, work email, phone number, company, role, project type, budget range, timeline, message, and whether you've requested an NDA.
- Call bookings — name, email, phone number, company, role, project type, topic, your timezone, and the time slot you picked.
- Client / staff accounts — name, email, company, an Argon2id-hashed password (we never see your plain-text password), and optional 2FA TOTP secret + recovery codes (also hashed). When you sign in, we record a coarse device fingerprint (browser family + IP /24 prefix) so we can email you when an unrecognized device accesses your account.
- Support tickets & project messages — subject, body, attachments, and any files you upload.
- Invoices & payments — invoice line items, billing address you provide, and payment method metadata returned by Stripe (last-4 of card, country, brand). We never store full card numbers — they live on Stripe's servers.
- Chatbot conversations — the messages you exchange with our site assistant (Silque), so admins can review past conversations and our assistant has context across turns.
Information collected automatically
- IP address (hashed) — we apply a one-way hash before storage, used for rate-limiting and abuse detection.
- User-agent string — your browser + OS, used for compatibility logging and the "new sign-in" security email.
- Session cookie — a single HTTP-only cookie issued by Auth.js when you sign in, scoped to our domain. Required to keep you logged in.
- Audit log — sensitive admin actions (user create / edit / delete, password reset, 2FA enable/disable, invoice paid, dispute opened, email send failures) are logged for accountability.
Information from third parties
When you pay an invoice, Stripe tells us the payment status, amount, currency, and a reference id. When the chatbot is enabled, we send your conversation messages to Google's Gemini API to generate replies. That's the extent of third-party data ingress.
How we use it
- Respond to inquiries — read your brief, reply within one business day, schedule discovery calls.
- Deliver our services — design, engineer, ship, and bill the project we agreed to.
- Send transactional email — call confirmations, invoice receipts, project updates, ticket replies, security alerts. We don't send marketing email without your explicit opt-in.
- Send SMS messages where you've opted in — verification codes (OTPs), customer support replies, appointment and callback confirmations, and service updates. See SMS/Text Messaging for the full program terms and how to opt out.
- Operate the client portal — show you projects, invoices, tickets, files, and timelines.
- Security & fraud prevention — hashed IPs for rate-limiting, device fingerprints for sign-in alerts, audit logs for accountability.
- Improve the product — anonymized aggregate metrics (e.g. how many bookings per week, which call types are popular). No personally identifying information is used for analytics.
We rely on your consent when you submit a brief, on contractual necessity when we deliver a project we've been engaged for, and on our legitimate interest in operating a secure, abuse-resistant service for the technical data above.
SMS/Text Messaging
If you provide your phone number and opt in, Silquetech may send you text messages related to your account and the services you have engaged us for. These include one-time passcodes (OTPs) for verification, customer support replies, appointment and callback confirmations, and service notifications and updates about your projects, invoices, and tickets.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be sold, rented, or shared with any third parties.
Program details
- Message frequency — message frequency varies based on your account activity.
- Cost — message and data rates may apply.
- Opting out — you can opt out at any time by replying STOP to any message from us. You will receive a single confirmation message and we will send you no further texts.
- Getting help — reply HELP to any message for assistance, or contact our support team at hello@silquetech.com.
- Carrier liability — carriers are not liable for delayed or undelivered messages.
- Consent is optional — consenting to receive SMS messages is not a condition of purchasing any product or service from us.
We use your phone number solely to deliver the messages described above and to reach you about work we are doing for you. It is never used for advertising, and it is never passed to advertisers, data brokers, or affiliates.
How long we keep it
- Contact briefs & bookings — kept for as long as we're considering or actively delivering a project for you, then archived for 24 months in case you come back.
- Account data — retained while your account is active; we'll delete on request (see your rights) within 30 days, except where we're legally required to keep records (e.g. invoices for tax / accounting purposes).
- Invoices & payment records — kept for the period required by applicable accounting and tax law (typically 6–10 years depending on jurisdiction).
- Audit log entries — kept indefinitely for accountability; rows reference an actor id but no plaintext password / token.
- Login device fingerprints — kept while your account is active so we can recognize known devices and only alert on new ones.
- Email outbox log — recipient address and subject line only, kept for 12 months for deliverability troubleshooting.
- Chatbot conversations — kept while we have a legitimate interest in supporting you; you can request deletion at any time.
Security
We take a small, focused set of measures because we run a small, focused operation:
- Passwords are hashed with Argon2id before storage. Plain-text passwords never touch our database or our logs.
- Two-factor authentication is available (and recommended) for all admin and staff accounts.
- Recovery codes are stored as Argon2id hashes; we can't recover them if lost.
- API keys and tokens are encrypted at rest with AES-256-GCM where applicable.
- All public form endpoints have rate-limiting to deter scraping and abuse.
- Sensitive admin actions are written to an audit log so we can investigate after the fact.
- We use TLS for all traffic — both inbound to our servers and outbound to vendors.
- Code changes ship through review; production deploys are tracked.
If you discover a security vulnerability, please email security@silquetech.com. We'll acknowledge within 48 hours and won't pursue legal action against researchers acting in good faith under standard responsible-disclosure norms.
Your rights
You can ask us to do any of the following at any time, and we'll respond within 30 days:
- Access — get a copy of the personal data we hold about you.
- Correct — fix anything that's wrong.
- Delete — erase your account and associated data, subject to the legal-retention exceptions noted above.
- Export — receive your data in a portable, machine-readable format.
- Object / restrict — limit how we use your data, or object to specific uses.
- Withdraw consent — for anything we're doing on a consent basis.
- Lodge a complaint — with your local data-protection authority (e.g. the UK ICO if you're in the UK). We'd rather you talk to us first, but it's your right.
Email privacy@silquetech.com from the address associated with your account to make any of these requests. We may ask you to verify your identity before acting on a request, especially for export or deletion.
International transfers
Because we operate across four countries, your data may be processed in the United Kingdom, Pakistan, the United Arab Emirates, and the United States. Where data leaves the UK / EEA, transfers happen under Standard Contractual Clauses or equivalent safeguards, and our partner Ample Solutions LLC is bound by an inter-company data-processing agreement that mirrors UK GDPR protections.
Children
Our services aren't directed at children under 16, and we don't knowingly collect their personal data. If you believe a child has submitted information to us, email privacy@silquetech.com and we'll delete it.
Changes to this policy
We'll update this policy when our practices change. The "last updated" date at the top reflects the most recent change. For material changes (e.g. a new vendor with access to your data, or a new processing purpose), we'll notify you by email if you have an account, and post a notice at the top of this page for at least 30 days.
Contact us
Questions, requests, or concerns about this policy or how we handle your data:
Or write to us at our London office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
See also: Contact us · About Silquetech