1. Document Scope & Data Controller
This Privacy Policy outlines how CodeX404 Solutions ("we", "us", "our") collects, uses, protects, and handles personal data when you interact with our website (codex404solutions.online) or communicate with our engineering team.
For data protection inquiries or to exercise your statutory privacy rights, our designated Data Protection Officer can be reached directly at privacy@codex404solutions.online.
2. What Information We Collect
In accordance with data minimization principles, we only collect information necessary to respond to your inquiries and evaluate prospective project scopes:
- Contact Information: Full name, professional work email address, telephone number, job title, and company name.
- Project Scoping Details: Business problem summaries, target service areas, estimated budget ranges, and project timelines.
- Technical Telemetry: IP address (masked for analytics), user-agent string, timestamp, and standard server log headers for security defense.
3. Lawful Basis for Processing (GDPR)
If you reside within the European Union or United Kingdom, we process your personal data under the following legal bases:
- Consent (Article 6(1)(a)): You have given clear consent via explicit form checkboxes for us to process your information to respond to an inquiry.
- Contractual Necessity (Article 6(1)(b)): Processing necessary to take steps at your request prior to entering into a master software development agreement.
- Legitimate Interests (Article 6(1)(f)): Defending our digital infrastructure against brute-force attacks, spam bots, and security vulnerabilities.
4. Strict No-Sale & Sharing Policy
We do not sell, rent, lease, or monetize your personal information to third parties. Under any circumstances.
Data is shared strictly with trusted operational infrastructure sub-processors necessary to run our service (such as encrypted cloud hosting and transactional email dispatch) under compliant data processing agreements.
5. Data Retention Schedule
- Active Inquiries & Client Leads: Retained for the duration of the commercial relationship.
- Inactive Discovery Leads: Retained for a maximum of 2 years from last contact, then cryptographically anonymized or deleted.
- Financial & Contractual Records: Retained for 7 years to fulfill statutory accounting and tax compliance regulations.
- Security & Access Logs: Retained for 90 days before automated rotation.
6. Cookie Policy
Our website utilizes a limited number of cookies:
PHPSESSID (Essential): Standard session identifier for CSRF protection and form continuity. Expired upon browser close.csrf_token (Essential): Cryptographic defense token guarding form submissions against unauthorized third-party requests.codex404_cookie_consent (Essential): Remembers your cookie preference choice.
7. Your Statutory Rights
You possess the following rights regarding your personal information:
- Right to Access: Request a full copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete contact data.
- Right to Erasure ("Right to be Forgotten"): Request immediate permanent deletion of your contact records.
- Right to Data Portability: Obtain your data in a structured, machine-readable JSON format.
- Right to Object: Withdraw consent or object to any non-essential communication at any time.
To exercise any statutory right, email privacy@codex404solutions.online. We respond to all verified requests within 30 days free of charge.
