Privacy Policy

Last updated 22 July 2026

This policy explains what personal data Codinary(“Codinary”, “we”, “us”) handles, why, and what you can do about it. We are the Data Fiduciary for that data under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

1. The short version

This website has no sign-up, no contact form, no analytics, and no tracking or advertising cookies. We do not sell personal data. The only data we get from the site itself is what our host records to serve and secure the page. Everything else comes from you choosing to contact us.

2. What we collect

Technical logs. Our hosting provider, Vercel, records standard request data when you load a page — IP address, browser and device type, the page requested, referring page, and a timestamp. This is used to serve the site, keep it available, and detect abuse. We do not use it to build a profile of you.

What you send us. If you message us on WhatsApp we receive your phone number, your WhatsApp profile name, and the contents of your messages. If you email us we receive your email address and whatever the message contains. Please do not send us sensitive personal data unless we have asked for it.

Client engagement data. When you become a client, we process business contact details and whatever information is needed to deliver the engagement. If that work involves us handling personal data belonging to your users, you remain the Data Fiduciary for it and we act on your instructions as a Data Processor under our engagement agreement.

3. Why we use it

• To operate, secure, and improve this website.
• To reply to your enquiry and discuss a possible engagement.
• To deliver, support, and invoice services you have engaged us for.
• To meet legal, tax, and accounting obligations, and to establish or defend legal claims.

We rely on your consent when you contact us voluntarily, and on legitimate uses recognised by the DPDP Act — such as performing a contract you are party to and complying with law — for the rest. We do not use your data for automated decision-making or profiling.

4. Cookies

This site sets no cookies and loads no analytics, advertising, or social-media tracking scripts. There is no cookie banner because there is nothing to consent to. If we add analytics later, we will update this policy and ask for consent where the law requires it.

5. Who else sees your data

We share personal data only with:

• Vercel Inc. — website hosting and delivery. Processes technical logs described above.
• WhatsApp / Meta— if you choose to message us there. Your use of WhatsApp is governed by Meta’s own privacy policy, not this one.
• Email and business software providers — for correspondence, accounting, and project delivery.
• Professional advisers and authorities — where we are legally required to disclose, or need to protect our legal rights.

We do not sell, rent, or trade personal data to anyone.

6. Transfers outside India

Some of the providers above store or process data on servers outside India. Where that happens we rely on contractual protections with those providers and transfer only what is necessary. Transfers are made in accordance with the DPDP Act and any restrictions the Government of India notifies.

7. How long we keep it

Technical logs are retained for a short period by our host for security and operations. Enquiry correspondence is kept for as long as needed to respond and for a reasonable period after, in case you follow up. Client records are kept for the duration of the engagement and afterwards for as long as tax, accounting, and limitation laws require. When data is no longer needed for a legal purpose, we delete it or anonymise it.

8. Security

We apply reasonable technical and organisational safeguards — encrypted transport (HTTPS), access control on internal systems, and the principle of least privilege. No system is perfectly secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires.

9. Your rights

Under the DPDP Act you may:

• Access a summary of the personal data we hold about you and how we process it.
• Correct, complete, update, or erase your personal data, subject to what we must retain by law.
• Withdraw consent at any time, where our processing rests on consent. This does not affect processing already carried out.
• Nominate another individual to exercise your rights if you die or become incapacitated.
• Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these, email hello@codinary.org. We may need to verify your identity first. We aim to respond within 30 days.

10. Grievance officer

Complaints about how we handle personal data go to our grievance officer at hello@codinary.org, with “Data Grievance” in the subject line. If we do not resolve it to your satisfaction, you may complain to the Data Protection Board of India.

11. Children

Our services are for businesses and are not directed at children. We do not knowingly collect personal data of anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our practices or the law change. The version published here is the current one, and the date at the top shows when it last changed. Significant changes will be made clear on this page.

13. Contact

Codinary — hello@codinary.org, or message us on WhatsApp.