Privacy Policy

1. Who We Are

Kodlyft is a software studio based in Pakistan that builds digital products, enterprise platforms and cloud solutions for clients worldwide. References to "we", "us" or "our" in this policy refer to Kodlyft.

If you have questions about how we handle your personal data, contact us at hello@kodlyft.com.

2. What Data We Collect

We collect personal data in the following ways:

• Contact form. When you submit an enquiry on our website, we collect your name, email address, company name (optional) and the message you send.
• Email correspondence. When you email us directly, we retain that correspondence including any personal data it contains.
• Service delivery. During an engagement, we may process personal data you share with us to complete the work for example, employee records when building HR systems. This is processed on your behalf as a data processor under your instructions.
• Technical data. Our web hosting provider may log your IP address, browser type and pages visited for security and performance monitoring. We do not use this data for profiling.

We do not collect sensitive categories of personal data (health, biometric, financial credentials) through this website.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiry or request.
• To deliver the services you have engaged us for.
• To send you information about a project, invoice or delivery milestone.
• To comply with our legal obligations.

We do not sell, rent or trade your personal data to any third party. We do not use your data for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

Where applicable, we process your personal data under one or more of the following legal bases:

• Contract. Processing is necessary to perform a contract with you or to take steps at your request before entering into one.
• Legitimate interests. Responding to enquiries, managing client relationships and operating the website are in our legitimate business interests, balanced against your rights.
• Legal obligation. We may process data to comply with applicable law.
• Consent. Where we rely on consent (e.g. optional mailing list), you may withdraw it at any time.

5. Third-Party Services

Our website uses the following third-party services that may process limited personal data:

• Google Fonts. Loaded from Google servers; your browser's IP address is sent to Google to retrieve font files. Governed by Google's Privacy Policy.
• FormSubmit.co. Our contact form uses FormSubmit to forward your message to our email inbox. FormSubmit receives the form data you submit. See FormSubmit's privacy policy for details.
• Web hosting provider. Our hosting provider may log access data for security purposes.

We do not use advertising trackers, third-party analytics scripts (e.g. Google Analytics) or social-media tracking pixels on this website.

6. Cookies

This website does not use cookies for analytics or advertising. We store a single local-storage entry (kl-theme) on your device to remember your light/dark theme preference. This entry contains no personal data and is never sent to our servers.

7. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Enquiry data (contact form, emails) is retained for up to 3 years from last contact, to allow us to follow up appropriately.
• Client project data is retained for the duration of the engagement plus 5 years for legal and accounting compliance.
• You may request earlier deletion see Section 9 below.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encrypted communication channels (HTTPS), access controls and secure credential management.

No method of transmission over the internet is completely secure, however. If you have concerns about how we store your data, please contact us.

9. Your Rights

Depending on applicable law, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data where we no longer have a lawful basis to retain it.
• Restriction: ask us to restrict processing of your data in certain circumstances.
• Objection: object to processing based on our legitimate interests.
• Portability: receive your data in a structured, machine-readable format.

To exercise any of these rights, email hello@kodlyft.com. We will respond within 30 days.

10. International Transfers

Kodlyft is based in Pakistan. Where we provide services to clients outside Pakistan, personal data may be transferred internationally. We take appropriate steps to ensure any such transfers comply with applicable data-protection law and that your data remains adequately protected.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website or services after changes are posted constitutes your acknowledgement of the updated policy.

12. Contact Us

For any privacy-related questions, requests or concerns, contact us at hello@kodlyft.com. We aim to respond within one business day.