================================================================================
CODXPERT — PRIVACY POLICY
Last Updated: August 2026
================================================================================

Welcome to Cod Xpert (“Company”, “we”, “our”, or “us”). We are committed to protecting your personal information and respecting your privacy. This Privacy Policy outlines how we collect, use, process, disclose, and safeguard your personal data when you visit our website https://codxpert.com/ or engage our digital and web development services.

This Privacy Policy is formulated in strict compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”, India), the Information Technology Act, 2000, the General Data Protection Regulation (“GDPR”, EU), and applicable global data protection regulations. Under the DPDP Act, 2023, Cod Xpert operates as a “Data Fiduciary” and you, as the user or client, are recognized as the “Data Principal.”

——————————————————————————–
1. WHAT INFORMATION DO WE COLLECT?
——————————————————————————–
We collect personal data that you voluntarily provide to us when you express an interest in obtaining information about us or our services, when you contact us, or when you engage our software and web development services.

A. Personal Data Disclosed by You:
• Contact Identifiers: Full Name, Business Email Address, Phone Number, Mailing Address, and Company Name.
• Project & Business Data: Project specifications, technology requirements, communication logs, and billing details.
• Payment Data: Necessary billing details to process payments (all transactions are securely processed by accredited payment gateways; we do not store sensitive credit card credentials).

B. Information Automatically Collected:
• Technical Data: IP address, browser type, operating system, device characteristics, language preferences, referring URLs, and interaction timestamps through strictly necessary analytics cookies.

——————————————————————————–
2. HOW AND WHY WE PROCESS YOUR DATA (LAWFUL GROUNDS)
——————————————————————————–
In accordance with Section 4, 5, and 6 of the DPDP Act, 2023, we process your personal data strictly for specified, lawful, and transparent purposes based on your free, informed, specific, unconditional, and unambiguous consent:

• Service Delivery & Fulfillment: To develop, maintain, and deliver custom web solutions, software applications, and IT consulting.
• Client Communications: To respond to inquiries, provide technical support, send project updates, and share administrative notices.
• Contractual Performance: To execute service level agreements, process payments, and manage client accounts.
• Security & Fraud Prevention: To monitor platform security, prevent unauthorized access, and protect against security incidents.
• Legal & Regulatory Compliance: To comply with applicable statutory duties, accounting standards, and lawful government requests.

——————————————————————————–
3. INDIA DATA PRINCIPAL RIGHTS (DPDP ACT, 2023)
——————————————————————————–
If you are residing in India or your data is processed within India, you are entitled to the following statutory rights under Chapter III of the Digital Personal Data Protection Act, 2023:

• Right to Access Information (Section 11): You have the right to obtain a summary of personal data being processed, the processing activities undertaken, and the identities of all Data Fiduciaries and Data Processors with whom your data has been shared.
• Right to Correction & Erasure (Section 12): You have the right to request the correction of inaccurate or misleading data, the completion of incomplete data, updating of records, and the erasure of personal data that is no longer necessary for the purpose it was collected.
• Right of Grievance Redressal (Section 13): You have the right to have your data grievances redressed through our designated Grievance Redressal Officer within thirty (30) days.
• Right to Nominate (Section 14): You have the right to nominate any other individual who shall, in the event of your death or incapacity, exercise your data protection rights on your behalf.
• Right to Withdraw Consent (Section 6(4)): You may withdraw your consent at any time as easily as it was given, without affecting the lawfulness of processing based on consent before its withdrawal.

——————————————————————————–
4. PROTECTION OF CHILDREN’S PERSONAL DATA (SECTION 9)
——————————————————————————–
In strict compliance with Section 9 of the DPDP Act, 2023, Cod Xpert does not knowingly collect or process the personal data of children under the age of eighteen (18) years without obtaining verifiable consent from a parent or lawful guardian. We do not engage in tracking, behavioral monitoring, or targeted advertising directed at children, nor do we process children’s data in any manner that causes detrimental effect on the well-being of a child.

——————————————————————————–
5. DATA SECURITY & PERSONAL DATA BREACH NOTIFICATION
——————————————————————————–
We implement rigorous technical, organizational, and physical security safeguards (including SSL encryption, access control lists, firewalls, and routine vulnerability assessments) to prevent unauthorized access, loss, or alteration of personal data.

In compliance with Section 8(6) of the DPDP Act, 2023, in the event of a personal data breach, Cod Xpert will notify the Data Protection Board of India (DPBI) and affected Data Principals in the prescribed form and manner without undue delay.

——————————————————————————–
6. DATA RETENTION & ERASURE LIMITATION
——————————————————————————–
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by Indian tax, legal, or accounting obligations. Upon purpose completion or receipt of a valid consent withdrawal request, we securely erase, delete, or anonymize your personal data from all production databases.

——————————————————————————–
7. GLOBAL PRIVACY RIGHTS (GDPR & US LAWS)
——————————————————————————–
For clients and visitors located in the European Economic Area (EEA), United Kingdom, Switzerland, or the United States (California CCPA, Virginia, Colorado, Utah, Connecticut), we uphold all corresponding rights including data portability, right to object, non-discrimination, and opting out of automated profiling.

——————————————————————————–
8. DESIGNATED GRIEVANCE OFFICER & DATA PROTECTION BOARD CONTACT
——————————————————————————–
In accordance with Section 8(9) and Section 13 of the DPDP Act, 2023 and the Information Technology Act, 2000, you may contact our designated Grievance Redressal Officer for any privacy concerns, data subject requests, or complaints:

• Data Fiduciary: Cod Xpert
• Designated Grievance Officer: Legal & Compliance Officer
• Registered Office Address: House No. 119, I.T.C. Colony, Shankarpur, Munger, Bihar 811201, India
• Telephone / WhatsApp: +91 7979976451
• Dedicated Grievance Email: grievance@codxpert.com (or info@codxpert.com)
• Resolution Commitment: We acknowledge all grievance requests within 24-48 hours and provide a complete resolution within thirty (30) days.

Escalation to Data Protection Board: If you are not satisfied with the resolution provided by our Grievance Officer, you have the statutory right under Section 13(3) of the DPDP Act, 2023 to file a formal complaint with the Data Protection Board of India (DPBI).