Privacy Policy.

2. Information We Collect

Information we collect falls into one of two categories: voluntarily provided information and automatically collected information.

“Voluntarily provided” information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.

“Automatically collected” information refers to any information automatically sent by your devices in the course of accessing our products and services.

3. Collection and Use of Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our engineering, advisory, or digital services.

We may collect personal information when you:

• Register for an account or book an engineering consultation;
• Access our platforms or services via browser or API;
• Contact us via email, social channels, or form submissions;
• Engage with our technical publications or growth funnels.

We hold, use, and process information for the following specific purposes:

• To provide you with our platform’s core features, codebase access, and engineering deliverables;
• To customize and optimize your experience of our documentation and services;
• To deliver agreed consulting, architecture specifications, and software solutions;
• For internal record keeping and administrative tracking;
• For security, fraud prevention, and ensuring site usage complies with our terms.

4. Data Security & Retention

When we collect and process personal information, and while we retain this information, we protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

Although we implement industry-standard cryptographic practices and access controls, no method of electronic transmission or storage is 100% secure, and no provider can guarantee absolute security.

We retain personal information only for as long as needed to fulfill the stated operational purposes, service agreements, or as required by applicable tax, accounting, and regulatory compliance mandates. When no longer required, data is securely erased or anonymized within 30 days.

5. Children’s Privacy

We do not aim any of our products or services directly at children under the age of 13, and we do not knowingly collect personal information about children under 13.

6. Disclosure of Personal Information to Third Parties

We may disclose personal information to:

• A parent, subsidiary, or affiliate of our company;
• Third-party service providers (IT, data storage, hosting, analytics, payment gateways, and maintenance operators) solely to enable delivery of their services;
• Our employees, contractors, and related entities under strict non-disclosure obligations;
• Regulatory authorities, courts, and law enforcement officers as required by applicable legal process;
• An entity acquiring or assuming our business operations or assets.

Third-Party Analytics Services Currently Used:

• Google Analytics (web traffic analysis)
• Open Web Analytics (privacy-focused usage metrics)

7. International Transfers of Personal Information

The personal information we collect is stored and/or processed in India, the United States, or where our partners, affiliates, and cloud hosting infrastructure providers maintain facilities.

We ensure all cross-border data transfers comply with applicable international legal frameworks, applying standard contractual clauses and binding safeguards.

8. Your Rights and Controlling Your Personal Information

• Your Choice: You are never required to provide personal information, though declining may restrict your access to specific features or services.
• Access & Portability: You may request details of the personal data we hold about you in a structured, commonly used machine-readable format.
• Correction: You may request the rectification of any inaccurate, out-of-date, or incomplete records.
• Non-Discrimination: We will not discriminate against you or alter service tiers for exercising your statutory privacy rights.
• Complaints: If you believe we have breached applicable data protection law, contact us immediately. We will investigate promptly and provide written findings.
• Unsubscribe: You may opt out of promotional communications at any time using the link provided in the message or by contacting us.

9. Use of Cookies

We use cookies to maintain security sessions, track aggregated usage patterns, and remember user preferences. For detailed specifications on cookie categories, see our dedicated Cookie Policy.

10. Business Transfers

If we or our assets are acquired, or in the unlikely event of bankruptcy or corporate reorganization, data including personal information would be transferred as part of the business assets to the successor entity.

11. Australian Privacy Act Compliance (AU)

Where the processing of your personal information is subject to the Australian Privacy Act 1988 (Cth), we adhere to the Australian Privacy Principles (APPs). You acknowledge that certain offshore third parties may not be bound by the Privacy Act, and we implement commercially reasonable vetting to ensure equivalent standards of data protection.

12. GDPR Compliance Disclosures (EU/EEA)

Under the General Data Protection Regulation (Regulation (EU) 2016/679), Code Partner acts as a Data Controller and/or Data Processor with respect to personal information processed through our systems.

Lawful Bases for Processing

• Consent: Where you have granted explicit permission for a specific processing purpose;
• Performance of a Contract: Necessary for scoping, fulfilling, or delivering agreed software engineering contracts;
• Legitimate Interests: Operating and improving services, ensuring infrastructure security, and fraud prevention;
• Legal Obligation: Maintaining compliance with applicable statutory, fiscal, and regulatory requirements.

Your GDPR Rights

You have the right to request restriction of processing, object to legitimate-interest processing, request data erasure (“right to be forgotten”), and lodge complaints with your local EU Data Protection Authority.

13. California Privacy Disclosures (CCPA / Shine the Light)

Under California Civil Code Section 1798.83 (“Shine the Light”), California residents may request once per calendar year a list of categories of personal information shared with third parties for their direct marketing purposes.

Do Not Track: Some browsers offer a “Do Not Track” signal. At this time, our systems do not alter processing behaviors in response to automated DNT headers.

California Consumer Privacy Act (CCPA): In the preceding 12 months, we have collected identifiers (name, email, IP address), demographic data, and geolocation data solely for business operations. We do not sell personal information to third parties.