Last Updated: January 2025

1. Introduction

Code Bite Solutions (“Code Bite Solutions,” “we,” “us,” or “our”), having its registered office at Office 424, Pride Sapphire, Pandit Dindayal Upadhyay Road, opp. Golden Super Market, Sirvar Park, Kotecha Nagar, Rajkot, Gujarat 360001, India, is committed to protecting the privacy and security of the personal data of individuals who visit our website, engage our services, or otherwise interact with us (collectively, “you” or “User”).

This Privacy Policy explains how we collect, use, disclose, store, and protect information obtained through our website located at codebitesolutions.com (the “Website”), and through our provision of website design and development, search engine optimisation, digital marketing, e-commerce solutions, web hosting and maintenance, and related services (collectively, the “Services”).

This Privacy Policy is published in accordance with, and forms an electronic record under, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), together with any rules, regulations, or notifications issued thereunder from time to time.

By accessing or using the Website, or by engaging our Services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Website or use our Services.

We may provide our Services to clients located anywhere in the world. Regardless of your location, our processing of your personal data is governed by the laws of India, as set out in Section 15 (Governing Law) below, without prejudice to any mandatory data protection rights you may separately hold under the law of your own country, to the extent such rights cannot lawfully be excluded.

2. Definitions

For the purposes of this Privacy Policy:

• “Personal Data” means any data about an individual who is identifiable by or in relation to such data.
• “Sensitive Personal Data” means such personal data which may reveal, be related to, or associated with, a data principal’s financial data, health data, official identifier, sex life, sexual orientation, biometric data, genetic data, transgender status, caste or tribe, or religious or political belief or affiliation, to the extent recognised under applicable Indian law.
• “Processing” means the collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, or destruction of Personal Data.
• “Data Principal” means the individual to whom the Personal Data relates (referred to as “you” or “User” in this Policy).
• “Data Fiduciary” means Code Bite Solutions, being the entity that determines the purpose and means of processing Personal Data.
• “Cookies” means small text files placed on your device, as further described in our Cookie Policy.

3. Information We Collect

We collect information in the following categories:

3.1 Information You Provide Directly

Contact details such as your name, email address, phone number, company name, and postal address, when you fill out a contact form, request a quote, subscribe to updates, or communicate with us via email, phone, or messaging platforms.
Project-related information you share with us in the course of engaging our Services, including business requirements, branding materials, content, credentials to third-party systems you authorise us to access (e.g., hosting or domain panels), and any other material necessary for us to deliver the Services.
Billing and invoicing information necessary to process payments made via bank transfer or UPI, including bank account details or UPI identifiers you provide for the purpose of receiving invoices or confirming payment, and transaction references. We do not process or store card payment details, as we do not accept card payments.
Any information you voluntarily provide in testimonials, reviews, surveys, or correspondence.

3.2 Information Collected Automatically

When you visit the Website, certain information is collected automatically through the use of cookies and similar tracking technologies, including:

Device and browser information (e.g., IP address, browser type and version, operating system, device identifiers).
Usage data (e.g., pages visited, time spent on pages, referring website, links clicked, date and time of visit).
Approximate geographic location derived from your IP address.

This information is collected through Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies and similar technologies to collect and analyse information about use of the Website and report on activity trends. For more information on how Google collects and processes data, please refer to Google’s own privacy policy at https://policies.google.com/privacy. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout, or by managing cookie preferences as described in our Cookie Policy.

We may, from time to time, integrate additional third-party analytics, marketing, communication, or functionality tools into the Website to improve our Services. Where any such tool involves the processing of your Personal Data, we will update this Privacy Policy and, where legally required, seek your consent before such processing begins.

3.3 Information from Third Parties

We may receive limited information about you from third parties, such as referral partners, if they refer you to us for our Services, or from publicly available sources in the ordinary course of business development.

3.4 No Collection Through Client-Side Tools

Certain interactive tools that may be made available on the Website in the future (such as file conversion or optimisation utilities) may be designed to process files entirely within your own browser, without any file or its contents being uploaded to, transmitted to, or stored on our servers. Where a tool operates in this manner, we will state so clearly on the relevant page, and no Personal Data from such use is collected by us.

4. How We Use Your Information

We process your Personal Data only for specified, explicit, and legitimate purposes, including to:

1. Provide, operate, and maintain our Services, including project delivery, website development, hosting, maintenance, and support.
2. Respond to your enquiries, quote requests, and support requests.
3. Process invoices and reconcile payments made via bank transfer or UPI.
4. Communicate with you regarding your project, account, or our business relationship, including sending service-related notices.
5. Send you marketing communications regarding our Services, where you have opted in to receive such communications, and always with an option to withdraw consent at any time.
6. Analyse Website usage and traffic patterns to improve Website performance, content, and user experience.
7. Detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal or policy-violating activity.
8. Comply with applicable legal, regulatory, tax, and accounting obligations.
9. Establish, exercise, or defend legal claims.

We do not use your Personal Data for any purpose incompatible with the purposes stated above without first notifying you and, where required by law, obtaining your consent.

5. Legal Basis for Processing

Where the DPDP Act or other applicable law requires a lawful basis for processing, we rely on one or more of the following:

• Consent, freely given, specific, informed, and unambiguous, obtained via clear affirmative action (e.g., ticking a consent box on a form), which you may withdraw at any time with prospective effect.
• Performance of a contract, where processing is necessary to deliver Services you have engaged us for.
• Legal obligation, where processing is necessary for compliance with applicable law (e.g., tax record-keeping).
• Legitimate uses, as permitted under the DPDP Act, including where you have voluntarily provided your Personal Data for a specified purpose and have not indicated that you do not consent to its use.

6. Disclosure of Information

We do not sell, rent, or trade your Personal Data to any third party for monetary consideration. We may disclose your Personal Data only in the following circumstances:

• Service Providers: To trusted third-party service providers who perform services on our behalf, currently limited to Google LLC (for website analytics via Google Analytics) and Hostinger (for website hosting and domain services). Each such provider is authorised to use your Personal Data only to the extent necessary to perform the relevant service and is contractually or by policy bound to appropriate confidentiality and security standards.
• Future Service Providers: Should we engage additional third-party tools or service providers that process Personal Data, we will update this Privacy Policy accordingly prior to, or promptly upon, such engagement.
• Legal Requirements: Where disclosure is required by applicable law, regulation, legal process, or governmental request, including to the Data Protection Board of India, courts, law enforcement agencies, or regulatory authorities.
• Business Transfers: In connection with any merger, acquisition, reorganisation, sale of assets, or similar transaction involving Code Bite Solutions, in which case Personal Data may be transferred as part of that transaction, subject to standard confidentiality safeguards.
• Protection of Rights: Where we believe disclosure is necessary to investigate, prevent, or take action regarding suspected illegal activities, fraud, or situations involving potential threats to the safety of any person, or to enforce our Terms & Conditions or protect our legal rights.
• With Your Consent: For any other purpose disclosed to you and to which you have consented.

7. Cross-Border Transfer of Data

Certain third-party service providers we use, including Google LLC, may process data on servers located outside India. By using the Website and Services, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside India for the purposes described in this Privacy Policy, subject to any restriction on cross-border transfer that may be notified by the Government of India from time to time under the DPDP Act. We take reasonable steps to ensure that any such transfer is subject to appropriate safeguards consistent with applicable law.

8. Data Retention

We retain Personal Data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, tax, or reporting requirements. In determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements. Invoicing and transaction-related records are generally retained for a minimum period as required under applicable Indian tax and accounting law. Upon expiry of the applicable retention period, or upon a valid request for erasure where no overriding legal obligation to retain the data exists, we will securely delete or anonymise the relevant Personal Data.

9. Data Security

We implement reasonable security safeguards, and reasonable security practices and procedures, in a manner proportionate to the nature of the Personal Data processed, including administrative, technical, and physical measures designed to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include, where applicable, secure hosting infrastructure, access restrictions, and encrypted transmission protocols (such as HTTPS/TLS) for data submitted through the Website.

However, no method of transmission over the internet, and no method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security, and you acknowledge and accept this inherent risk when transmitting information to us over the internet.

10. Your Rights as a Data Principal

Subject to applicable law, you have the following rights in relation to your Personal Data:

• Right to Access: To request confirmation of whether we are processing your Personal Data, and to obtain a summary of the Personal Data being processed and the processing activities undertaken.
• Right to Correction and Erasure: To request correction of inaccurate or incomplete Personal Data, and to request erasure of Personal Data that is no longer necessary for the purpose for which it was processed, subject to any legal obligation requiring us to retain it.
• Right to Grievance Redressal: To register a grievance with us in relation to the processing of your Personal Data, as set out in Section 13 below, prior to approaching the Data Protection Board of India.
• Right to Withdraw Consent: To withdraw any consent previously given, at any time, with the same ease with which consent was given, without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Nominate: To nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.

To exercise any of these rights, please contact us using the details in Section 14. We may need to verify your identity before actioning any such request, and we will respond within a reasonable time and in accordance with applicable legal timelines.

11. Children’s Privacy

Our Website and Services are directed at businesses and individuals who are at least 18 years of age. We do not knowingly collect Personal Data from individuals below the age of 18. Where any tool made available on the Website in the future is intended for general use and does not involve the collection or storage of Personal Data, no age-verification consent is required for that specific tool; however, where any future feature does require the processing of a child’s Personal Data, we will implement verifiable parental or guardian consent mechanisms in compliance with the DPDP Act before such processing occurs, and we will not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

12. Third-Party Links

The Website may contain links to third-party websites, plugins, or applications not operated by us. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or practices. We encourage you to review the privacy policy of every website you visit.

13. Grievance Redressal

In accordance with the Information Technology Act, 2000, the rules made thereunder, and the DPDP Act, the contact details of the Grievance Officer are provided below. If you have any grievance, complaint, or concern relating to the processing of your Personal Data, please contact:

Grievance Officer: Deep P. Sojitra
Code Bite Solutions
Office 424, Pride Sapphire, Pandit Dindayal Upadhyay Road, opp. Golden Super Market, Sirvar Park, Kotecha Nagar, Rajkot, Gujarat 360001, India
Email: hello@codebitesolutions.com
Phone: +91 816 004 5235

We will endeavour to acknowledge and address any grievance within the timelines prescribed under applicable law. If you are not satisfied with our resolution, you retain the right to file a complaint with the Data Protection Board of India.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Code Bite Solutions
Office 424, Pride Sapphire, Pandit Dindayal Upadhyay Road, opp. Golden Super Market, Sirvar Park, Kotecha Nagar, Rajkot, Gujarat 360001, India
Email: hello@codebitesolutions.com
Phone: +91 816 004 5235

15. Governing Law

This Privacy Policy, and any dispute or claim arising out of or in connection with it or its subject matter, shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions, and shall be subject to the exclusive jurisdiction of the competent courts located in Rajkot, Gujarat, India, irrespective of the country from which you access the Website or receive our Services.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. The “Last Updated” date at the top of this Privacy Policy indicates when it was last revised. Where changes are material, we will provide reasonably prominent notice, such as by posting a notice on the Website or, where appropriate and where we hold your contact details, by direct communication, prior to the change taking effect. We encourage you to review this Privacy Policy periodically.

17. Severability

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable by a court or authority of competent jurisdiction, the remaining provisions shall continue in full force and effect, and the invalid, illegal, or unenforceable provision shall be deemed modified to the minimum extent necessary to make it valid, legal, and enforceable while preserving its original intent.