Privacy Policy

Last updated: 2 May 2025

1. Who We Are

A99 Solutions (“A99,” “we,” “our”) is a B2B web‑design and digital‑marketing agency headquartered in Texas, USA, with operations and clients worldwide.

Data‑Protection Officer (DPO)

Email: info@a99solutions.com
Phone: +1 262 286 2381
Address: 10601 Clarence Dr, Suite 250, Texas City, TX 75833, USA

2. Scope of This Policy

This notice describes how we collect, use, disclose, and safeguard personal information when you:

Visit a99solutions.com or any subdomain.
Engage our services or interact with our marketing channels.

It is designed to comply with:

Region	Governing Laws & Regulations
United States	CCPA/CPRA, CAN‑SPAM, COPPA, state privacy acts
United Kingdom/EU	UK GDPR, EU GDPR, Data Protection Act 2018, PECR
United Arab Emirates	UAE Federal Decree‑Law No. 45 of 2021 (PDPL)
Pakistan	Personal Data Protection Bill 2023 (draft)
Global	ISO 27001/27701 best‑practice principles

3. Information We Collect

Category	Examples	Source	CCPA Category
Identifiers	Name, email, phone, postal address, IP	Web forms, emails, calls	Identifiers
Commercial Data	Project details, invoices, and payment status	Contracts, billing	Commercial information
Internet/Device Data	Browser type, pages visited, cookies, ad IDs	Automatic	Internet activity
Geolocation (coarse)	Country or city via IP	Analytics tools	Geolocation
Professional Data	Job title, employer, portfolio links	Forms, LinkedIn	Professional info

Sensitive data: We do not intentionally collect special‑category data (e.g., health, biometrics, children’s data). Contact us if you believe you have provided such data inadvertently.

4. How We Collect Information

Directly – completed forms, contracts, emails, calls.
Automatically – cookies, pixels, log files, analytics.
Third Parties – LinkedIn profiles, design platforms, payment processors.

5. Legal Bases for Processing

Purpose	EU/UK Legal Basis	UAE PDPL Basis
Responding to enquiries	Legitimate interests / pre‑contractual steps	Contractual necessity
Performing signed statements of work	Contract	Contract
Marketing newsletters	Consent	Consent
Analytics & security	Legitimate interests	Legitimate interests / Public interest
Record‑keeping & taxes	Legal obligation	Legal obligation

6. How We Use Information

Deliver and manage web design, development, and marketing services.
Issue invoices and process payments.
Improve site content, user experience, and security.
Send service messages and (with consent) marketing emails.
Detect, investigate, and prevent fraud or security incidents.
Comply with legal obligations or defend legal claims.

7. Sharing & Disclosure

We never sell personal information. We share it only with:

Service providers (cloud hosting, CRM, analytics, email, payments) operate under strict confidentiality.
Sub‑contractors engaged on client projects, bound by NDAs.
Authorities or courts, when required by law or to protect rights, safety, or property.
Corporate transactions (e.g., merger or acquisition) – you will be notified.

All processors are vetted for security and, where necessary, bound by Standard Contractual Clauses (SCCs) or equivalent safeguards.

8. International Transfers

Data may be stored or processed in the USA, Pakistan, UAE, UK, EU, or other jurisdictions. Where GDPR, UK GDP,R or PDPL applies, we rely on:

Adequacy decisions (e.g., UK–US Data Bridge, if applicable).
SCCs or International Data Transfer Agreements (IDTAs).
Consent or contract performance where other safeguards are unavailable.

9. Security Measures

We deploy industry‑standard technical and organisational controls, including:

TLS 1.2+ encryption in transit
At‑rest encryption for critical data
Multi‑factor authentication on internal systems
Least‑privilege access management
Regular vulnerability scans and logging

No method of transmission or storage is 100 % secure, but we continually improve our defences.

10. Cookies & Similar Technologies

We use first‑party cookies for site functionality and third‑party cookies for analytics (Google Analytics) and marketing optimisation (Meta Pixel, HubSpot). On your first visit, a banner lets you:

Accept all cookies
Reject non‑essential cookies
Customise preferences

You can also clear or block cookies via your browser settings.

11. Data Retention

Data Type	Retention Period	Rationale
Contracts & invoices	7 years after project closure	Statutory accounting
Marketing contacts	Until opt‑out or 24 months of inactivity	Relevancy
Analytics logs	Aggregated after 26 months	Performance & trends
Job applications	12 months	Future hiring consideration
System backups	An additional 30 days	Disaster recovery

12. Children’s Privacy

Our services are aimed at business professionals. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us, and we will delete it promptly.

13. Your Privacy Rights

Region	Rights Summary
EU/UK	Access • Rectification • Erasure • Restriction • Portability • Objection • Withdraw consent • Complain to a Supervisory Authority
California	Know/Access • Delete • Correct • Opt‑out of sale/sharing • Limit sensitive data • No retaliation
Other US States (VA, CO, CT, UT)	Similar rights to access, delete, correct, and opt out of targeted ads
UAE	Access • Rectification • Erasure • Restriction • Portability • Object to automated processing • Complain to the UAE Data Office
Pakistan (draft bill)	Access • Correction • Erasure • Withdraw consent • Complain to the future Data Protection Authority

14. How to Exercise Your Rights

Email info@a99solutions.com with your request. We will:

Verify your identity (or your authorised agent).
Respond within 30 days (EU/UK/UAE) or 45 days (California/other US states).
Inform you if we need more time and explain why.

15. Marketing Communications

We send electronic marketing only with consent or where otherwise permitted. You may unsubscribe at any time via the link in our emails or by contacting us. We honour Do‑Not‑Track and Global Privacy Control (GPC) signals where feasible.

16. Third‑Party Links

Our site may link to external websites (e.g., portfolio items, social media). We are not responsible for their privacy practices. Please review their policies before submitting data.

17. Changes to This Policy

We may update this policy periodically. Material changes will be highlighted on this page or notified via email. Historical versions are available on request.

18. Contact Us

A99 Solutions

Email: info@a99solutions.com
Phone: +1 262 286 2381

If your concern remains unresolved:

EU/UK: Contact your local Supervisory Authority (e.g., UK ICO).
UAE: Contact the UAE Data Office.
California: Contact the California Attorney General.