Privacy notice
What we collect through this website, why, and what you can ask us to do about it. In short: what you type into a form, and the basic request details every web server records. No cookies.
Who we are
This website is run by WhiteHat Design Studio, an engineering design studio based in Islamabad, Pakistan. WhiteHat Design Studio is a trading name of WhiteHat Design Studio (Private) Limited.
To ask about your data, email contact@whitehatdesignstudio.com.
What we collect, and why
When you send a brief or request the capability statement
We receive what you type: your brief or request, your email address, and anything optional you add, such as your name, company, role, country, phone number and the inputs you ticked. We use it to reply to you and, if you want to work with us, to prepare a proposal. The lawful basis is our legitimate interest in answering enquiries about our work, and taking steps at your request before a contract.
The form also holds a box that people never see. It helps filter automated spam without a captcha.
When you message us on WhatsApp
We receive your message and your phone number, and we use them to reply. WhatsApp carries the conversation under its own privacy policy. If search cannot find what you asked and you choose to ask an engineer, your question opens in WhatsApp for you to send.
When you search this website
Search runs in your browser. What you type is not sent to us or to anyone else.
When you visit any page
Like every website, ours is served by a hosting provider whose servers record each request: the address of the device asking, the browser, the page and the time. These logs are kept by the host for security and to keep the site running. The lawful basis is our legitimate interest in a secure website.
Counting visits
This website does not count or track visits.
Cookies and your browser
This website sets no cookies. If you choose dark mode or pause the motion, that choice is kept in your browser so the next page remembers it. It stays on your device and never reaches us, and nothing else is stored.
Who else receives it
Only the engineers who reply, and the service providers that carry your message to them and host this website. Forms are delivered by Web3Forms, which passes what you type on to our inbox. Web3Forms says it does not store submissions and that its servers are in the United States. We do not sell personal data, and we do not use it for advertising.
Where it goes
We are based in Pakistan, so what you send is read by our engineers there, wherever you write from.
How long we keep it
We keep briefs and requests for 730 calendar days after our last contact with you, then delete them, unless they become part of a contract.
Host logs are kept for the period the hosting provider sets for security.
Your rights
You can ask us for a copy of your personal data, to correct it, to delete it, to restrict how we use it, or to stop using it, and you can object to any use based on our legitimate interests. Email us and we will answer. If you are unhappy with how we handled your data, please tell us first, so we can put it right.
Changes
We will update this notice when what we collect changes. This version is dated 7 November 2026.