Privacy Policy | Workflow Day
Legal

Privacy Policy

This policy explains what information Workflow Day collects when you use our website or work with us, why we collect it, who we share it with, and what control you have over it.

Last updated: 29 August 2026

Who we are

Workflow Day is an automation, SEO and web development consultancy operating from Pakistan and working with clients internationally. This website is workflowday.com.

For the purposes of data protection law, Workflow Day is the data controller for the personal information described in this policy. If you have a question about how we handle your data, write to info@workflowday.com.

Information we collect

We only collect information you give us or that your browser sends automatically. We do not buy contact lists and we do not scrape personal data.

What When we collect it
Name and email When you submit the contact form, email us, or book a call.
Company and role When you include them in the contact form. Both are optional.
Project details What you write in the brief field, including budget range, tools and timeline.
Phone number If you message us on WhatsApp, we receive your number through that platform.
Booking details Date, time and timezone when you schedule a call through our booking tool.
Technical data IP address, browser type, device type, pages visited and referring site. Collected automatically by our host and analytics.
Project data During an engagement we may access systems you connect us to, such as a CRM, mailbox or spreadsheet, in order to build what you asked for.

We never ask for payment card numbers, bank details or passwords through this website. If you receive such a request claiming to be from us, do not respond to it and let us know.

How we use your information

  • To reply to your enquiry and answer questions about a possible project.
  • To prepare a quote and scope the work you have described.
  • To schedule and hold calls with you.
  • To deliver and support the work once a project starts.
  • To send invoices and keep the financial records we are required to keep.
  • To understand which pages of our site are useful and improve them.
  • To keep our website and systems secure.

We do not sell your personal information to anyone, and we do not use it to train machine learning models.

Legal basis for processing

If you are in the United Kingdom, the European Economic Area or another region with similar law, we rely on the following grounds.

  • Contract. Where processing is necessary to quote for, deliver or support work you have engaged us for.
  • Legitimate interests. Where we respond to enquiries, maintain the security of our systems, and understand how our site is used. We balance this against your rights and keep the processing proportionate.
  • Consent. Where you opt in to non essential cookies or agree to receive updates from us. You can withdraw consent at any time.
  • Legal obligation. Where we are required to retain records for tax or accounting purposes.

Services we use

Running this website and our work involves a small number of third party services. Each one processes some of your data on our behalf.

Service What it handles
Calendly Call bookings. Receives your name, email, timezone and any details you enter when scheduling.
n8n Our automation platform. Contact form submissions pass through it so we receive a notification.
Google Fonts Typefaces used across the site. Your browser requests these files, which involves your IP address.
WordPress and our host Serves the website and keeps server logs.
Email provider Delivers and stores our correspondence with you.
WhatsApp If you choose to message us there. Your use of WhatsApp is governed by its own privacy policy.

These providers act on our instructions and are not permitted to use your information for their own marketing.

Cookies

Cookies are small files stored by your browser. This site uses them in two ways.

  • Essential cookies keep the site working, remember your cookie choices, and protect forms from automated abuse. These cannot be switched off.
  • Analytics cookies tell us which pages people read and where they arrive from. These are only set if you agree.

You can clear or block cookies through your browser settings at any time. Blocking essential cookies may stop parts of the site from working properly.

Sharing your information

We share personal information only in these situations.

  • With the service providers listed above, so they can perform their function.
  • With our accountant, where a record is needed for invoicing or tax.
  • Where the law requires it, or to establish or defend a legal claim.
  • If our business is transferred to another owner, in which case your information would move with it and this policy would continue to apply until you are told otherwise.

We do not share client project data between clients, and we do not use one client’s data as an example for another without written permission.

International transfers

We operate from Pakistan and our clients are based in many countries. Some of the services we use store data in the United States or the European Union. This means your information may be transferred outside the country where you live.

Where we transfer information out of the United Kingdom or the European Economic Area, we rely on the safeguards our providers have in place, such as standard contractual clauses. You can ask us for more detail on this at any time.

How long we keep your information

  • Enquiries that do not become projects. Kept for up to 24 months, then deleted.
  • Client records and correspondence. Kept for the length of the engagement and for 7 years afterwards, in line with record keeping obligations.
  • Access to your systems. Removed when the project ends or sooner if you ask.
  • Website analytics. Retained in aggregated form and not linked to you personally.

Your rights

Depending on where you live, you may have the right to do the following.

  • Ask what personal information we hold about you and receive a copy.
  • Have inaccurate information corrected.
  • Ask us to delete your information where we have no ongoing reason to keep it.
  • Ask us to restrict how we use it while a concern is resolved.
  • Object to processing we carry out on the basis of legitimate interests.
  • Receive your information in a portable format.
  • Withdraw consent you previously gave.

To exercise any of these, email info@workflowday.com. We will respond within 30 days. There is no charge unless a request is clearly excessive or repetitive.

If you are in the United Kingdom or the European Economic Area and you are unhappy with our response, you can complain to your local data protection authority.

Security

We keep access to client systems on a need to know basis, use unique credentials with two factor authentication where the platform supports it, and remove access when a project ends.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a breach occurs that affects your rights, we will tell you and the relevant authority as required by law.

Children

This website and our services are intended for businesses and adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We update this policy when our practices or the services we use change. The date at the top of this page shows when it was last revised. If a change materially affects how we handle your information, we will make that clear rather than quietly updating the page.

Contact us

For any question about this policy or about your data, reach us at: