Privacy Policy
Effective 2 October 2026. This policy covers havenir.com only. Data we process for clients under a services contract is governed by that contract.
Who is responsible
- If you are in the EU or EEA: Havenir Solutions GmbH, Am Wasser 42, 28759 Bremen, Germany.
- Everyone else: Havenir Solutions(Private) Limited, St. 16 McLeod Rd, near Australia Chowk, Garhi Shahu, Lahore, Punjab 54000, Pakistan.
Contact for all privacy matters: [email protected].
Visiting the site
The site is served through Cloudflare, which protects it and caches pages. Cloudflare and our web server process your IP address, browser details and the pages you request, to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Our server logs are kept for 14 days.
Analytics
We use Google Analytics 4 to see how the site is used. It loads only after you click Accept in the cookie banner; until then, no request goes to Google. Ad storage, ad user data and ad personalisation are always denied.
After you accept, Google Analytics sets its _ga cookies and records the pages you visit and whether you submit the contact form. Basis: your consent (Art. 6(1)(a) GDPR).
Google Analytics data is kept for 14 months. Google may process it in the United States.
To change your choice, click Cookie settings in the footer. The banner then shows again. Reject stops further collection; to remove cookies already set, also clear this site's cookies in your browser.
What we store in your browser
| Key | Where | Purpose | Set when |
|---|---|---|---|
consent | localStorage | Your cookie choice (granted or denied) | You click Accept or Reject |
first-touch | sessionStorage | The first page of your visit, any utm_ campaign parameters in its URL and, without a utm_source, the domain of the site that linked you here | Your first page load in a tab; cleared when the tab closes |
theme | localStorage | Light or dark mode | You use the theme toggle |
_ga, _ga_* | Cookies | Google Analytics | Only after you accept |
first-touch stays in your browser unless you submit the contact form, which sends it with your enquiry.
Contact form
The form asks for your name, work email, company, country, what you need, the system you use today and an optional message, plus a required consent checkbox. It also sends the first page of your visit and the utm_source, utm_medium, utm_campaign and utm_content values if present. Without a utm_source, it sends the domain of the site that linked you here instead.
We use this to reply to your enquiry and prepare a proposal (Art. 6(1)(b) GDPR). The form creates a lead in our own ERPNext CRM, hosted on our server in Pakistan. After you submit, the form links to Cal.com, with your name and email filled in, so you can pick a call time; anything you enter there is processed by Cal.com in the United States. Our email runs on Microsoft 365.
The estimate and company-profile forms ask only for your work email and the consent checkbox, plus the same first-page and utm_* values and, for the estimate, your estimator answers, and email you the estimate or the profile. Each request is filed as a lead in the same CRM on the same basis.
If you email us instead, we process your email the same way.
International transfers
Our CRM and web server are in Pakistan, which has no EU adequacy decision. For EU and EEA visitors, we transfer enquiry data there because it is necessary for the pre-contractual steps you asked for (Art. 49(1)(b) GDPR). Google, Microsoft and Cal.com may process data outside the EU under their own transfer safeguards.
Who receives your data
- Cloudflare: delivery and security of the site.
- Google: analytics, only after you accept.
- Microsoft: email.
- Cal.com: call booking.
We do not sell your data or use it for advertising.
How long we keep it
- Enquiries: up to 3 years after our last contact. If a contract follows, we keep what the law requires for business records.
- Server logs: 14 days.
- Google Analytics: 14 months.
Your rights
You can ask us for access to your data, correction, erasure, restriction of processing, a portable copy, or object to processing based on our legitimate interests. You can withdraw consent at any time without affecting earlier processing. Email [email protected].
You can also complain to a supervisory authority. For Havenir Solutions GmbH this is Die Landesbeauftragte für Datenschutz und Informationsfreiheit Bremen.
Children
The site is for businesses and is not aimed at children.
Changes
We will post any changes on this page and update the effective date.