PESA VESA / LEGAL
Privacy Policy
Website notice draft · Updated 21 October 2026
About this notice
Pesa Vesa offers e-commerce operational support and digital growth services. This notice describes the data flows implemented by this website. Contact thepesavesa@gmail.com with privacy questions. The legal entity, controller address, applicable jurisdiction, and retention schedule must be confirmed by the owner before public launch.
Information you choose to share
An inquiry asks for your name, email, country, chosen service, and goals. Professional background, service interests, and purchasing-budget readiness are optional. Do not send passwords, identity documents, banking information, or remote-access credentials.
How inquiries are handled
When configured, the website validates an inquiry on the server and sends a notification to Pesa Vesa through Resend. It does not store leads in a website database or CRM. Messages remain in the recipient mailbox and provider systems under their respective policies. When online delivery is unavailable, the email fallback prepares a draft in your email application; you must send it yourself.
Purposes and lawful basis
Inquiry details are used to respond to a requested conversation and evaluate service suitability. Depending on the circumstances, processing may relate to requested pre-contractual steps or legitimate interests in responding and preventing abuse. Form acknowledgement is not consent to marketing. Optional analytics require a separate preference; no marketing subscriptions are created. The owner must confirm applicable lawful bases before launch.
Scheduling providers
If configured, selecting Choose a Time loads Cal.com or Calendly in an embedded frame. The provider receives your connection information and any details you submit under its own privacy terms. Scheduling time zones and confirmation are handled by that provider. No booking is inferred from opening the scheduler.
Cookies, local storage, and attribution
A successful server-side inquiry sets an HTTP-only confirmation cookie lasting up to 30 minutes. This supports a truthful confirmation page. Your optional analytics preference is stored locally until changed or cleared. UTM campaign fields in the current consultation URL may accompany your inquiry. No advertising or analytics scripts are installed by default. Optional event hooks are enabled only after you allow them in the preference control below.
Security and abuse prevention
Input validation, request limits, a hidden spam field, and submission timing help reduce abuse. Production online delivery requires a configured distributed rate limiter unless an operator explicitly enables the limited single-instance alternative. Rate-limit keys use a truncated hash of the network address in ten-minute windows. Hosting and email providers may keep operational logs; do not submit unnecessary sensitive data.
Recipients and international processing
Configured providers may include Vercel for hosting, Resend for email, Upstash for rate limiting, an email mailbox provider, and Cal.com or Calendly for scheduling. Our operational team is based in Pakistan. Providers and team members may process information across borders. The owner must verify provider terms, regional arrangements, and required transfer safeguards before launch. We do not sell inquiry data through this website.
Retention and your choices
Request access, correction, deletion, or information about processing by emailing the contact above. Depending on applicable law you may have objection, restriction, portability, withdrawal, or complaint rights. Optional analytics can be declined or changed below. The owner must establish and disclose a specific inquiry and mailbox retention schedule before launch.
Updates and owner review
This is a review draft reflecting the implemented website, not finalized legal advice. The owner must confirm controller details, jurisdiction, applicable UK and US privacy obligations, actual providers, retention periods, transfer safeguards, and any required regulator or consumer disclosures before production launch.
No advertising or analytics scripts are installed. You can allow anonymous interaction events for a future configured analytics provider. Inquiry processing does not depend on this choice.
Current choice: not set. You can change it here at any time.