Privacy notice
Last updated 28 October 2026.
Who is responsible
The controller of your personal data is Muhammad Haseeb, trading as Tenon Stack, IT Center G-9/1, Islamabad, Pakistan. Contact: [email protected].
This website
This website has no forms, sets no cookies, has no analytics and no scripts or fonts loaded from other sites. Our hosting provider (Cloudflare) serves the pages and may keep ordinary server logs, such as IP addresses and requested pages, as part of running the service. We do not add tracking of our own.
What we collect, and why
When you email us
Your name, email address, company, anything you tell us about your systems and the content of the correspondence. We use it to reply, to scope and quote work, and to keep a record of what was discussed.
When we contact you about our services (business outreach)
We email small numbers of businesses we think we could help. For each person we keep: name, business email address, company, job role if known, where we found the business contact details (usually the company's own website or a public business listing), the specific reason we contacted you, copies of the emails we sent, and any reply. We do not buy contact lists and we do not email personal addresses. We write to one person at a time.
Opt-out record
If you ask us to stop, we keep your email address on a suppression list so that we do not contact you again. That is the only reason this entry is kept.
Legal basis
Where UK or EU data protection law applies, our basis is legitimate interests (Article 6(1)(f)): we have a legitimate interest in offering business services to businesses that may need them, and in answering people who write to us. We limit what we collect to business contact details, we check the reason for each contact, and we stop when asked. If you object, we stop. Where the law requires consent for a type of message, we do not send it without consent.
Who sees it
Tenon Stack uses it to run the business. We share it with these categories of recipients: software and cloud service providers, including AI service providers, who process data for us under their own terms. We do not sell personal data and we do not share it for other companies' marketing. Because we are based in Pakistan and our providers operate in several countries, your data may be processed outside your own country.
How long we keep it
- Outreach records for people who do not reply: deleted 12 months after the last email we sent.
- Enquiry and reply correspondence that does not lead to work: deleted 24 months after the last message.
- Records connected to a paid engagement: kept as long as contract, accounting and tax obligations require.
- Opt-out (suppression) entries: kept so that we do not contact you again.
Opting out and your rights
To stop our emails, reply "unsubscribe" to any email from us, or write to [email protected]. We act on it and do not email you again.
You can also ask us what personal data we hold about you, ask us to correct or delete it, or object to our use of it. Write to [email protected] and we will respond. If you are in the UK or EU you may also complain to your local data protection authority.
Changes
If we change this notice, the new version goes on this page with a new date.