Privacy Policy

The data controller for this website is Code Vibe Digital, based in Alappuzha, Kerala, India. The studio is the sole operator of codevibedigital.com. Every enquiry channel published on this site — including the international numbers listed for the UAE, Saudi Arabia, Malta and Mauritius — reaches the same Kerala studio; there are no branch offices, local entities or local teams in those markets.

For any privacy question, including a request for a copy of your data or for it to be deleted, write to codevibedigital@gmail.com or use the WhatsApp number in the footer of this site.

This website has no user accounts, no login, no newsletter sign-up and no comment system. Browsing the site sends us nothing beyond the ordinary technical data described further down. Personal data reaches us only when you choose to send it, through the contact form or by messaging us on WhatsApp.

The contact form asks for exactly these fields:

• Name and email address (both required).
• Phone number (required — a number we can reach).
• Company name, the service you are interested in, and an indicative budget range (all optional).
• Your message about the project (required).

Please do not include sensitive personal data in a project brief. Fields are length-capped — the message box, for instance, accepts a maximum of 5,000 characters — and submissions are rejected if the name, email, phone or message fails basic validation.

Enquiry data is processed for one purpose: to read your brief and reply to it. We use the lawful basis of legitimate interest in responding to a business enquiry you initiated, and — once we start quoting or working together — the necessity of taking steps at your request before entering a contract.

We do not sell enquiry data, do not share it with advertisers or data brokers, and do not use it for automated decision-making or profiling.

Contact form submissions are written to a single database table (contact_submissions) in a Supabase-hosted PostgreSQL database, accessed through the Supabase service API. The table is configured so that an anonymous visitor can insert a row and nothing else: reads, updates and deletes are only possible with a server-side service credential, which never leaves the server and is never present in any browser bundle. Row-level security is enabled.

Supabase and the hosting platform this site runs on are third-party processors acting on our instructions. Where a processor stores data outside India or the EU/UK, standard contractual safeguards apply. Details of the specific processors, or a copy of the relevant safeguards, are available on request at codevibedigital@gmail.com.

When you submit the contact form, the server reads your IP address from the request headers to apply a short rate limit — roughly twenty seconds between submissions from the same address — so the form cannot be used to flood the database. That address is held only in server memory for the duration of that window and is then discarded. It is not written to the database, not written to a log we retain, and not associated with your enquiry.

This site currently loads no analytics or advertising scripts. The Google Analytics and Google Tag Manager integrations exist in the codebase but are disabled — with no measurement ID configured, no script tag is rendered and nothing is sent.

The web font used across the site is self-hosted from this domain, so loading a page does not make a request to a font provider. The site sets no advertising or tracking cookies. One functional value — a session-storage flag recording that you have already seen the opening animation — is stored locally in your own browser and is never transmitted to us.

If analytics are ever enabled for visitors in the EU, UK or Malta, they will be gated behind a consent mechanism and configured for consent mode first. This page will be updated at the same time.

The WhatsApp buttons on this site open a chat at wa.me. From that point the conversation is handled by WhatsApp under Meta's own privacy policy, which we do not control; the message you send is visible to WhatsApp as well as to us. The same applies to any other external link you follow from this site. The enquiry numbers published for the UAE, Saudi Arabia, Malta, Mauritius and India are contact routes to the Kerala studio, not local offices.

The site is served from a commercial hosting and CDN platform, which keeps standard request logs — IP address, user agent, requested URL, timestamp and response status — for security and abuse purposes. Those logs are maintained by the platform under its own retention schedule, are not used for marketing, and are not joined to contact form submissions.

• Enquiries that do not turn into work: retained for up to twelve months, then deleted, in case you return to the same project.
• Enquiries that become a project: retained for as long as the commercial relationship and its records require, including any period required for tax or accounting purposes.
• Rate-limit entries: seconds, in server memory only.
• Hosting logs: the platform's own retention window.

You may ask us to delete your enquiry earlier at any time, and we will, unless a legal obligation requires us to keep a record.

Subject to applicable law — the Information Technology Act and related Indian rules, and the GDPR or UK GDPR where you are in the EU or UK — you can ask us to:

• confirm whether we hold personal data about you, and give you a copy of it;
• correct data that is inaccurate or incomplete;
• delete your data, or restrict how it is used;
• object to processing based on legitimate interest;
• receive your data in a structured, commonly used, machine-readable format.

Send any of these requests to codevibedigital@gmail.com from the address you used for the enquiry. We aim to respond within thirty days. If you are in the EU or UK and are not satisfied with our response, you may complain to your local supervisory authority.

The site is served over HTTPS only, and HTTP requests are redirected to HTTPS. Server-only credentials — the database service key and the notification recipient — are held in environment variables, are never prefixed for browser exposure, and are never included in client-side JavaScript. Database access from the browser is limited to inserting a validated enquiry row.

No method of transmission is completely secure. If you need to share something confidential before we begin work, say so and we will agree a channel first rather than have it arrive in a web form.

This is a business-to-business website and is not directed at children. We do not knowingly collect personal data from anyone under sixteen. If you believe a child has sent us data, tell us and we will delete it.

If the way this site handles data changes — most plausibly if analytics tracking is switched on — this page will be updated and the "last updated" date above will change. The current version is always the one published at codevibedigital.com/privacy.