Privacy Policy

1. Introduction

Welcome to Code & Pixals (“we”, “us”, “our”).

Code & Pixals is a digital product studio that designs and builds websites, web applications, and SaaS products for founders and teams.

Protecting your privacy is a priority for us. This Privacy Policy explains:

• what information we collect,

• how and why we use it,

• how we protect it, and

• the rights you have regarding your personal data.

This policy applies to all visitors, clients, and users of our website, services, and communication channels.

As we work with clients globally, this policy is designed to comply with applicable privacy regulations, including GDPR, UK GDPR, CCPA/CPRA, and other relevant international laws.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us, submit a form, or engage our services, we may collect:

• Name

• Email address

• Phone number

• Company or business name

• High-level project details

• Any information you voluntarily share in messages or discussions

This information is used solely for communication, evaluation of fit, and project-related correspondence.

2.2 Client Project Information

During active projects, clients may provide materials necessary for execution, such as:

• Access credentials or API keys

• Platform or system access

• Integration tokens

• Internal documentation, SOPs, or reference files

• Project assets (text, media, instructions)

• Data samples required for development or testing

We only request information that is reasonably necessary to perform the agreed work. We do not intentionally collect sensitive personal data unless explicitly required and authorized.

2.3 Automatically Collected Information

We use analytics tools to understand how visitors interact with our website and to improve performance.

Automatically collected data may include:

• IP address

• Device and browser information

• Operating system

• Pages visited and time spent

• Referring URLs

• General interaction data

Analytics tools may include Google Analytics and platform-native analytics.

3. How We Use Information

We use collected information for legitimate and limited purposes, including:

3.1 Communication

• Responding to inquiries

• Continuing discussions

• Scheduling meetings

• Sharing relevant updates

3.2 Project Delivery

• Designing and building websites, web applications, or SaaS products

• Configuring systems and integrations

• Supporting implementation and maintenance when applicable

3.3 Improvement & Operations

• Improving our services and internal processes

• Diagnosing technical issues

• Enhancing website functionality and reliability

3.4 Legal & Security

• Preventing misuse or abuse

• Ensuring compliance with legal obligations

We do not sell, rent, or trade personal data.

4. Legal Basis for Processing (GDPR / UK GDPR)

We process personal data under one or more of the following lawful bases:

• Contractual necessity – to deliver services you request

• Legitimate interests – to operate, improve, and secure our services

• Consent – where explicitly provided (e.g., forms or analytics cookies)

• Legal obligation – where required by law

5. Data Storage and Security

Data may be stored using secure, industry-standard environments, including:

• Encrypted cloud infrastructure

• Secure databases

• Controlled local systems where necessary

5.1 Security Measures

We apply appropriate technical and organizational safeguards, including:

• Encryption in transit (HTTPS/TLS)

• Encryption at rest

• Access-controlled systems

• Credential isolation

• Restricted access to authorized personnel only

• Data minimization practices

5.2 Credential Handling

Client credentials and access tokens are:

• Stored separately from general project materials

• Never shared with third parties

• Used only for the intended project

• Removed when no longer required

6. Data Retention

We retain data only for as long as necessary.

6.1 Personal Information

Retained for the duration required to support communication, project delivery, or legal obligations.

6.2 Credentials and Access

Removed promptly upon project completion unless ongoing access is explicitly required.

6.3 Project Documentation

Non-sensitive materials may be retained for reference; sensitive content is removed once no longer necessary.

7. Data Sharing

We do not sell personal data.

Data may be shared only with trusted service providers when required for operations, such as:

• Hosting and infrastructure providers

• Analytics services

• Platform providers directly involved in service delivery

All third-party providers are required to follow appropriate security and privacy standards.

8. Cookies and Tracking

We may use cookies and similar technologies for:

• Essential site functionality

• Performance monitoring

• Analytics

You can manage or disable cookies through your browser settings.

9. International Data Transfers

As we work with clients internationally, data may be transferred across borders. All transfers are conducted in compliance with applicable legal safeguards, including standard contractual clauses where required.

10. Your Rights (GDPR / UK GDPR)

Depending on your location, you may have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion

• Restrict or object to processing

• Withdraw consent

• Request data portability

Requests can be made by contacting us at:
privacy@codeandpixals.site

11. California Privacy Rights (CCPA / CPRA)

California residents have the right to:

• Know what personal information is collected

• Request deletion of personal data

• Opt out of data sale (we do not sell data)

• Receive equal service without discrimination

12. Children’s Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children.

13. Use of AI Systems

Client-provided data may be used to build:

• Custom systems

• AI-assisted tools

• Knowledge-based applications

Client data is never used to train public or global AI models and is used solely within the scope of the client’s project.

14. Data Breach Response

In the unlikely event of a data breach, we will:

• Notify affected parties promptly

• Provide relevant details and guidance

• Comply with applicable legal notification requirements

15. Policy Updates

We may update this Privacy Policy to reflect changes in law, services, or operational practices. Updates will be published on this page with a revised “Last Updated” date.

16. Contact

For privacy-related questions or concerns, contact:
support@codeandpixals.site