Enterprise Privacy Policy

FHDTech (“FHDTech”, “we”, “us”, “our”), founded and operated by Fahid Ali, operates fhdtech.com. This Enterprise Privacy Policy describes our commitment to protection of personal data and detail how we collect, store, process, share, and protect your information.

1. Scope of This Policy

This policy applies to all visitors of fhdtech.com, clients who utilize our CRM setup services, subscribers to our tutorials, and users who input information into our forms or book consultation calls.

2. Who We Are (Data Controller)

FHDTech acts as the primary data controller for the information you submit directly to our website. For CRM configurations where we set up databases on your behalf, we act as a data processor under your instructions.

3. Legal Basis for Processing Data (GDPR)

We process personal data based on the performance of our contract with you, your explicit consent, compliance with our legal and carrier obligations, and our legitimate interests in protecting website integrity.

4. Information You Directly Provide to Us

We collect names, email addresses, phone numbers, WhatsApp contact credentials, business names, project budgets, and technical requirements that you submit voluntarily via form components.

5. Technical Information Collected Automatically

Our servers log system metadata, including your IP address, browser user-agent string, operating system version, referring URLs, screen resolution, and behavioral logs concerning pages visited.

6. Information We Obtain From Third Parties

We may receive professional profile information, company directories, and public business data from platforms like LinkedIn, Google My Business, or freelance marketplaces (Fiverr) to verify your account registration.

7. How We Utilize Your Data

We use your data to configure CRM pipelines, set up AI models, dispatch billing invoices via Stripe, send WhatsApp consultation reminders, and perform localized SEO audit scans for your business.

8. GoHighLevel CRM Processing Rules

All leads, customer profiles, booking calendars, and automation pipelines designed during project sprints are hosted on secure GoHighLevel server structures, adhering to their data security policies.

9. Twilio & Carrier A2P 10DLC compliance

We enforce strict carrier compliance. Phone numbers, customer records, and opt-in databases collected for SMS workflows are kept isolated and are never shared with third parties for affiliate marketing purposes.

10. Subprocessors and Service Providers

We share necessary data with trusted subprocessors to perform core business functions, including Calendly (scheduling), Stripe (invoicing), Formspree (forms), and Microsoft Clarity (analytics).

11. International Data Transfers

Your information may be transferred and stored on servers located outside your home country, including the United States. We implement Standard Contractual Clauses (SCCs) to guarantee secure transfers.

12. Data Encryption and Hashing Security

All database accesses, credentials, and API tokens shared with us during project implementations are handled via encrypted password managers. We use HTTPS encryption across all pages.

13. Data Retention Specifications

We retain client contact metadata for up to 3 years post-contract termination to comply with audit requirements. Basic website traffic logs are deleted automatically after 90 days.

14. Cookie Consent & Analytics Settings

We use functional and analytical cookies to track user interactions. You can decline optional cookie configurations through our user-facing Cookie Consent Banner without losing page access.

15. Your Rights Under GDPR (EEA/UK Residents)

EU and UK residents have the right to access their data, correct inaccuracies, request complete deletion, restrict processing, and export data in structured, machine-readable formats.

16. Your Rights Under CCPA/CPRA (California Residents)

California consumers have the right to know what personal data we collect, opt out of the sale or sharing of personal data, and request complete erasure of their stored records.

17. Twilio Opt-Out & Opt-In Rules

All automated text messages configured by FHDTech contain opt-out capabilities. Recipients can opt out of SMS flows by texting "STOP", "END", or "QUIT" at any point.

18. Children’s Online Privacy Protection (COPPA)

Our website and CRM services are designed strictly for business entities and adults. We do not knowingly collect or target information from children under the age of 13.

19. Updates to this Privacy Document

We reserve the right to modify this policy as regulatory frameworks change. Significant updates will be highlighted via a notification banner or emailed directly to registered clients.

20. Contacting Our Data Protection Officer

For questions, data access requests, or deletion queries, please contact Fahid Ali at Fahaidaliofficial@gmail.com or message on WhatsApp at +92 348 4103239.