Privacy Policy
Last updated: September 6, 2026
Hashbooks is a sole-owner bookkeeping business managed by Muhammad Hassan Shakeel. For website inquiries and direct bookkeeping engagements, Muhammad Hassan Shakeel trading as Hashbooks is the data controller unless an engagement agreement states otherwise.
1. Information We Collect
We collect information you provide when requesting an assessment, making an inquiry, or beginning an engagement. This can include your name, email, phone number, company, business location, transaction-volume range, account counts, industry, book condition, software selections, payroll or inventory details, requested handoff date, messages, and records needed for the agreed bookkeeping work.
Do not submit bank passwords, one-time authentication codes, government identifiers, or financial statements through the public website forms.
2. Purposes and Legal Bases
Information is used to respond to inquiries, prepare proposals, provide contracted bookkeeping services, communicate about the engagement, issue invoices, protect the service, and meet legal obligations. The applicable basis may be steps requested before a contract, contract performance, legitimate interests, legal obligations, or consent where required.
Submitting a website form permits Hashbooks to respond to that request. It does not enroll you in unrelated marketing.
3. Access and Security
Accountant invitations, delegated roles, or read-only connections are preferred where supported. Hashbooks does not ask clients to email banking passwords or authentication codes. Data is also protected by the controls of the hosting, email, accounting, payroll, inventory, and storage platforms selected for the engagement. No Internet-based service can guarantee complete security. Read the Security & Data Handling page.
4. Cookies and Analytics
An essential local-storage entry records whether you accepted or declined optional analytics. Google Analytics and Meta Pixel load only after you select “Accept Optional Analytics.” If you choose “Essential Only,” optional analytics do not load. Use the persistent control in the footer to change or withdraw your choice. Withdrawal disables analytics collection for the current browser and removes recognized Hashbooks analytics cookies where accessible to this site.
5. Service Providers and Recipients
Website and communication providers can include Vercel for hosting, Brevo for inquiry email delivery, and Calendly when you choose to schedule a call. Google Analytics and Meta receive website data only after analytics consent. Client-selected systems can include QuickBooks Online, Xero, Wave, FreshBooks, Odoo, ADP, Gusto, BILL, Finale Inventory, banks, storage tools, and payment platforms. Only providers needed for the website or agreed engagement are used.
6. International Access and Transfers
Hashbooks is operated from Pakistan and serves clients remotely. This means inquiry or engagement information may be accessed from Pakistan and processed in locations used by selected service providers. Transfer requirements and client-specific data-location needs should be addressed in the engagement agreement before access is granted.
7. Retention and Deletion
Website inquiries that do not become clients are generally retained for up to 24 months after the last communication, unless a shorter period is requested or a longer period is required for security or legal reasons. Engagement records are retained for the period stated in the client agreement, required by applicable law, or needed for an agreed transition. Provider copies remain subject to provider retention settings. Eligible data is deleted or anonymized when it is no longer needed.
8. Your Choices and Rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, consent withdrawal, or information about recipients. You may also complain to your local data-protection authority. Rights can be limited by legal, contractual, security, or recordkeeping requirements.
9. Children
The website and bookkeeping services are intended for businesses and adults. Hashbooks does not knowingly collect personal information from children.
10. Requests and Contact
Email contact@hashbooks.site with “Privacy Request” in the subject. Include enough information to identify the relevant inquiry or engagement. Identity verification may be required before disclosing or deleting data.
This policy should be reviewed by qualified privacy counsel against the actual tools, contracts, and data flows used for each market.