Privacy Policy | Codearbro

1. Who we are

Codearbro Solution OPC Private Limited is an IT services company registered in India, with its office at B-01, C-127, Sector 63, Noida, Uttar Pradesh 201309, India. For the personal data described in this policy, we are the Data Fiduciary under the DPDP Act: we decide why and how that data is processed.

This policy covers codearbro.com and the lead forms we run on third-party platforms. Our blog at codearbro.com/blog and any client project we deliver under a separate contract may have additional terms.

2. What personal data we collect

Data you give us

Website forms (contact form, consultation pop-up, landing-page forms): your name, email address, phone number, company name, the service you are interested in and anything you write about your project.
Meta lead ads (Facebook and Instagram) and Google Ads lead forms: the details you submit in the ad form, usually your name, email, phone number and answers to the form's questions. The ad platform passes these to us when you tap submit.
Consultation bookings: your name, contact details and the time slot you choose when you book a call through our scheduling tool.
Chat and messaging: messages you send us through the live chat on our website, WhatsApp, email or phone, along with your name and number or email.
Client engagements: billing and contact details of the people we work with once you become a client.

Data collected automatically

Technical data such as IP address, browser and device type, pages visited, time on page, referring website and approximate location derived from your IP address.
Advertising and analytics identifiers, including cookies and click identifiers (for example Google's gclid or Meta's fbclid) that tell us which ad or campaign brought you to the site.

We do not ask for financial account details, government ID numbers, health data or other sensitive information through our website, and we ask you not to include it in free-text fields.

3. Why we use it

To respond to your enquiry, call or message you back, and schedule the consultation you asked for.
To prepare proposals and quotes, and to deliver and invoice the services you engage us for.
To send you follow-ups about your enquiry and, where you have agreed, occasional updates about our services. You can opt out of marketing messages at any time.
To measure which ads and pages lead to enquiries (conversion tracking) so we can improve our campaigns and stop showing irrelevant ads.
To keep our website secure, prevent spam and misuse, and fix technical problems.
To meet our legal, tax and accounting obligations and to respond to lawful requests from authorities.

4. Our legal basis

We process your personal data on the basis of your consent, which you give when you submit a form, book a call or message us after being shown this notice, or for legitimate uses permitted by Section 7 of the DPDP Act. These include using data you have voluntarily shared for the purpose you shared it, and complying with the law. You can withdraw your consent at any time (see section 8). Withdrawal does not affect processing that took place before it.

5. Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf (Data Processors) under contract, and only as needed for the purposes above:

Zoho Corporation: our CRM, automation, appointment booking, live chat and email tools (Zoho CRM, Zoho Flow, Zoho Bookings, Zoho SalesIQ). This is where your enquiry is stored and managed.
Google (Google Ads, Google Tag Manager): to receive Google lead-form submissions and to measure ad conversions.
Meta Platforms (Facebook, Instagram, WhatsApp): to receive lead-ad submissions, measure ad conversions, and talk to you on WhatsApp if you contact us there.
Hosting and infrastructure providers (including Hostinger) that host this website.
Professional advisers such as accountants, auditors and lawyers, under a duty of confidentiality.
Government, regulatory or law-enforcement authorities, when required by law or to protect our legal rights.

Some of these providers may store or process data outside India. We transfer personal data abroad only as permitted under Section 16 of the DPDP Act and any restrictions notified by the Government of India.

6. How long we keep it

Enquiries that do not become projects: only for as long as we need them to respond to you and follow up on your enquiry, after which we delete or anonymise them.
Client records, contracts and invoices: for as long as Indian tax, company and accounting law requires.
Analytics and advertising data: for the retention period set in the respective Google or Meta tool.

If you withdraw consent or ask us to erase your data, we delete it unless the law requires us to keep it.

7. How we protect it

We use reasonable security safeguards to protect your personal data against unauthorised access, loss or misuse. These include access controls on our CRM, encryption in transit (HTTPS), and limiting access to the people who need it. No system is completely secure, but if a personal data breach does occur, we will notify the Data Protection Board of India and affected users as the DPDP Act requires.

8. Your rights

Under the DPDP Act you have the right to:

Access: get a summary of the personal data we hold about you, how we process it, and who we have shared it with.
Correction and erasure: ask us to correct, complete or update inaccurate data, or to erase data we no longer need.
Withdraw consent: as easily as you gave it. We then stop processing and delete the data unless the law requires us to keep it.
Grievance redressal: raise a complaint with our Grievance Officer (section 10) and get a response.
Nominate another person to exercise these rights on your behalf if you die or become incapable.
Complain to the Data Protection Board of India if you are not satisfied with our response to your grievance.

To use any of these rights, email info@codearbro.com or our Grievance Officer. We may need to verify your identity before acting on a request. To stop marketing messages, you can also reply "STOP" on WhatsApp or use the unsubscribe link in any email.

9. Cookies and tracking

Our website uses cookies and similar technologies:

Essential: to make the site work, for example remembering that you have already seen our consultation pop-up during this visit.
Analytics and advertising: Google Tag Manager, Google Ads conversion tracking and, where enabled, the Meta Pixel. These measure visits and conversions and can be used to show you our ads on other sites.
Live chat: Zoho SalesIQ sets cookies so that a chat conversation continues as you move between pages.

You can block or delete cookies in your browser settings, and you can manage ad personalisation in your Google and Meta account settings. Blocking cookies may affect how parts of the site work.

10. Grievance Officer

If you have a question or complaint about how we handle your personal data, please contact:
The Grievance Officer
Codearbro Solution OPC Private Limited
B-01, C-127, Sector 63, Noida, Uttar Pradesh 201309, India
Email: info@codearbro.com
Phone: +91 96163 30844

We will acknowledge your grievance promptly and respond within the time required by applicable law.

11. Children

Our services are meant for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their data, contact us and we will delete it.

12. Third-party websites

Our site links to other websites and platforms, such as WhatsApp, Zoho and social networks. Their own privacy policies apply to them, not this one.

13. Changes to this policy

We may update this policy as our services or the law change. The "Last updated" date at the top shows when it last changed. If we make significant changes, we will highlight them on this page.