Privacy Policy

1. Who we are

Kodenzah provides IT consulting, web and app development, custom software development, AI solutions, data and automation services, cybersecurity, cloud services, sales and marketing technology, managed support, system integration, and related professional services.

For privacy questions or requests, contact us at:

Kodenzah / Legal Company Name: [Registered legal name]
Address: UAE, Pakistan
Email: [privacy@yourdomain.com]
Phone: [Phone number]
Website: [https://www.yourdomain.com]

Where required by applicable law, Kodenzah acts as the data controller or equivalent responsible entity for personal information collected through its website and business operations. When Kodenzah processes information on behalf of a client, the client may be the controller or equivalent responsible entity and Kodenzah may act as a processor or service provider under the applicable agreement.

2. Personal information we collect

The information we collect depends on how you interact with Kodenzah.

Information you provide directly

We may collect your name, job title, company name, email address, telephone number, postal address, country, project requirements, budget information, communication preferences, and any information you include in a contact form, enquiry, consultation request, email, proposal request, support request, or other communication.

If you become a client, we may also collect billing details, contract information, project requirements, authorized-user information, support records, account details, credentials provided for service delivery, and information required to administer the relationship.

Please do not submit sensitive personal information through a website form unless we specifically request it and provide an appropriate secure method.

Information collected automatically

When you use our website, we may collect technical and usage information such as IP address, approximate location derived from IP address, browser type, device type, operating system, referring website, pages viewed, links selected, access times, language preferences, and information about how you interact with the website.

We may collect this information through server logs, cookies, pixels, tags, analytics tools, and similar technologies, subject to applicable law and your choices.

Information from third parties

We may receive information from service providers, business partners, public sources, advertising platforms, social-media platforms, professional networks, event providers, referral partners, identity providers, or other third parties. We will use such information in accordance with this Privacy Policy and any applicable notices provided when the information was collected.

Information from clients and users of client systems

When providing services, a client may provide Kodenzah with information relating to its employees, customers, users, suppliers, members, students, patients, visitors, or other individuals. Kodenzah will process that information only as instructed by the client and under the applicable contract, data-processing agreement, or service terms.

3. How we use personal information

We may use personal information to:

1. respond to enquiries, consultation requests, support requests, and communications;
2. prepare proposals, quotations, statements of work, contracts, invoices, and project documentation;
3. deliver, configure, maintain, secure, and support our services;
4. manage client relationships, accounts, projects, users, suppliers, and payments;
5. understand requirements and provide relevant technology recommendations;
6. improve website performance, usability, content, accessibility, security, and services;
7. send service-related messages, administrative notices, updates, and important information;
8. send marketing communications where permitted and where you have provided consent or where another lawful basis applies;
9. measure campaign, website, and communication performance;
10. detect, investigate, prevent, and respond to fraud, abuse, security incidents, technical problems, and unlawful activity;
11. comply with legal, regulatory, tax, accounting, audit, court, law-enforcement, or governmental requirements;
12. establish, exercise, or defend legal claims; and
13. pursue legitimate business purposes that are compatible with your reasonable expectations and applicable law.

We will not use personal information for purposes materially incompatible with the purpose for which it was collected without providing an appropriate notice or obtaining consent where required.

4. Legal bases for processing

Where applicable law requires a lawful basis for processing, Kodenzah may rely on one or more of the following:

• Performance of a contract: processing necessary to provide requested services, manage a client relationship, or take steps before entering into a contract.
• Legitimate interests: processing necessary for business administration, service improvement, security, fraud prevention, communications, and responsible operation, provided those interests are not overridden by your rights.
• Consent: processing where you have given consent, such as certain marketing communications or non-essential cookies.
• Legal obligation: processing necessary to comply with law or a valid legal request.
• Vital interests or public interest: processing where recognized by applicable law and necessary in exceptional circumstances.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal and may not affect processing based on another lawful basis.

5. Cookies and similar technologies

Kodenzah may use essential cookies and similar technologies to operate the website, maintain security, remember preferences, and provide requested functionality. Subject to applicable law and your choices, we may also use analytics, performance, functionality, and marketing technologies.

You can control cookies through your browser settings and, where available, our cookie preference tool. Disabling certain cookies may affect website functionality.

Before publishing this policy, Kodenzah should identify the actual cookies, analytics tools, advertising tools, consent platform, retention periods, and third-party providers used on the website. The website should link to a separate Cookie Notice if required by applicable law.

6. Marketing communications

We may send information about Kodenzah’s services, insights, announcements, events, or offers where permitted by law. You may unsubscribe by selecting the unsubscribe link in a marketing email or contacting us using the details above.

Even if you opt out of marketing communications, we may continue to send non-promotional service, transaction, security, legal, or administrative messages where necessary.

7. AI, data, and automated processing

Kodenzah may use AI-enabled tools, analytics, automation, software, cloud platforms, and technical systems to deliver or improve services. The specific use of these technologies depends on the service and the applicable client agreement.

We will not use personal information for AI training, model development, automated decision-making, or other purposes beyond the agreed service purpose unless permitted by the applicable agreement, a lawful instruction, or applicable law.

AI-generated or automated output may be incomplete, inaccurate, biased, or unsuitable for a particular decision. Where AI or automated processing is used in a service, appropriate human review, access controls, testing, security measures, and governance should be defined according to the nature and risk of the processing.

Do not submit confidential, sensitive, or personal information to public AI tools through this website. Use only approved channels and follow the relevant client agreement or service instructions.

8. How we share personal information

We may share personal information with:

• employees, contractors, consultants, professional advisers, and authorized suppliers who need it to perform their role;
• hosting, cloud, infrastructure, security, backup, analytics, communication, payment, customer relationship, project management, and support providers;
• software vendors, platform providers, model providers, and integration partners involved in delivering requested services;
• professional advisers such as lawyers, accountants, auditors, insurers, and financial institutions;
• regulators, courts, law-enforcement agencies, governmental authorities, or other parties where required or permitted by law;
• parties involved in a merger, acquisition, restructuring, financing, sale, or transfer of all or part of our business; and
• other parties where you have instructed us or provided consent.

We require service providers to handle personal information consistently with applicable agreements and appropriate confidentiality and security obligations. We do not sell personal information for money unless we clearly disclose that practice and provide the rights required by applicable law.

9. International data transfers

Kodenzah and its service providers may process or store personal information in countries other than the country in which it was collected. Those countries may have privacy laws that differ from your local laws.

Where required, we will use an appropriate legal mechanism for international transfers, such as an adequacy decision, approved contractual safeguards, consent, or another mechanism recognized by applicable law. Contact us for information about relevant transfer safeguards where permitted.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining business and financial records, resolving disputes, enforcing agreements, complying with legal obligations, protecting systems, and establishing or defending legal claims.

Retention periods vary according to the type of information, the purpose of processing, the nature of the relationship, legal requirements, and technical or operational requirements. When information is no longer required, we will delete it, anonymize it, or securely isolate it where appropriate.

Client data processed under a service agreement will be retained, returned, deleted, or archived in accordance with the applicable contract or data-processing agreement.

11. Information security

Kodenzah uses reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, and destruction. These measures may include access controls, authentication, encryption where appropriate, backups, monitoring, staff confidentiality obligations, supplier controls, secure development practices, and incident-response procedures.

No method of transmission, storage, or processing is completely secure. You should use secure channels, protect your account credentials, limit access to authorized persons, and notify us promptly if you suspect unauthorized access or a security incident.

12. Data breach and security incidents

If Kodenzah becomes aware of a security incident affecting personal information, we will assess and respond to it in accordance with applicable law and relevant contractual obligations. Where required, we may notify affected clients, individuals, regulators, or other parties within the required timeframe.

Clients must promptly notify Kodenzah of suspected compromise, unauthorized access, lost credentials, or security incidents relating to systems or services provided by Kodenzah.

13. Your privacy rights

Depending on your location and applicable law, you may have rights to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information in appropriate circumstances;
• request restriction of processing;
• object to processing based on legitimate interests or for direct marketing;
• request portability of certain information;
• withdraw consent where processing is based on consent;
• opt out of certain targeted advertising, profiling, or sale or sharing practices where applicable; and
• lodge a complaint with the relevant data-protection or privacy authority.

To exercise a right, contact us at [privacy email address]. We may need to verify your identity and may request additional information to protect against unauthorized requests. We will respond within the period required by applicable law.

Some rights are subject to exceptions, limitations, and exemptions. If Kodenzah processes information on behalf of a client, we may refer your request to the relevant client or assist that client as required by the applicable agreement and law.

14. Children’s privacy

Our website and services are intended for businesses and professional users and are not directed to children under [13/16] or the minimum age recognized by applicable law. We do not knowingly collect personal information from children through the website. If you believe a child has provided personal information, contact us so we can assess and delete it where appropriate.

15. Third-party websites and services

Our website may link to third-party websites, platforms, social-media pages, software services, or resources. Those third parties operate under their own privacy policies and terms. Kodenzah is not responsible for their privacy practices, content, security, or availability.

When Kodenzah configures or integrates a third-party service for a client, the service may process information according to the client’s instructions, the applicable service agreement, and the third party’s terms and privacy documentation.

16. Client data and service-specific processing

When a client provides information to Kodenzah for a project, the client is responsible for ensuring that it has a lawful basis, appropriate permissions, required notices, and necessary consents for Kodenzah to process that information.

The client must not provide information that Kodenzah is not authorized to process. For higher-risk, sensitive, regulated, or large-scale processing, the parties should document roles, instructions, security measures, retention, sub-processors, international transfers, incident notification, audit support, and deletion or return requirements in a separate data-processing agreement.

17. Privacy of communications and enquiries

Communications sent to Kodenzah may be stored and reviewed to respond to the enquiry, provide services, maintain business records, improve support, prevent abuse, and protect our legal rights. Do not send passwords, payment-card details, confidential credentials, or highly sensitive information through an ordinary contact form or unencrypted email.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, data practices, or business operations. The revised version will be posted on this page with an updated “Last updated” date.

Where required by law, we will provide additional notice or obtain consent for material changes. We encourage you to review this policy periodically.

19. Contact us

For questions, complaints, or privacy-rights requests, contact:

Kodenzah / Legal Company Name
Privacy contact: Kodenzah
Email: info@kodenzah.com
Address: UAE, Pakistan
Phone: [Phone number]