Privacy Policy

Who we are

Koddox Technologies, 9 Star Arcade, Opposite DHA Bosan Road Gate, Multan, Pakistan, is responsible for personal information used to manage this website and business enquiries. Contact support@koddox.com with the subject “Privacy request”.

For client projects, our role depends on the engagement. Where we process information on a client’s instructions, the client’s privacy notice and our data-processing agreement govern that processing. This website policy does not replace those agreements.

Information we receive

Our enquiry form requests your name, email, company, service interest, budget range, timeline and project description. We also receive information you provide through email, proposals and project communications.

Hosting and website services may receive IP addresses, browser and device information, requested pages and timestamps. Please do not send passwords, payment-card details, identity documents, patient records or other sensitive production data through the general enquiry form.

Purposes and lawful bases

We use enquiry information to respond, assess project requirements and prepare proposals. We use client information to deliver and administer agreed work, manage invoices, resolve issues and meet applicable legal obligations.

Where the EU GDPR or UK GDPR applies, requested steps before a contract and contract performance provide a basis where appropriate. For business-contact communications and website security, we rely on legitimate interests in responding to relevant requests and protecting our services, balanced against individual rights. Legal recordkeeping relies on applicable legal obligations. Where consent is required for an activity, that activity requires separate consent; sending an enquiry does not authorize unrelated marketing.

Website technologies and providers

Hostinger provides our website hosting and business email. Google Analytics is optional and its tag loads only after you accept analytics. When enabled, it can collect usage events, device and browser information and identifiers to help understand website use. Advertising storage, advertising user-data consent and ad personalization remain denied.

Use Cookie settings on any page to accept or reject optional analytics or withdraw a previous acceptance. We remember your preference in browser local storage for up to 180 days; this preference record is used to respect your choice. On withdrawal, the page reloads with analytics blocked and accessible first-party Google Analytics cookies are cleared. This does not erase information already received by Google. An enabled Global Privacy Control signal keeps optional analytics off. Clearing browser storage or using another browser may require a new choice. Google Analytics cookie expiry is configured to 180 days, subject to browser limits; this is separate from retention of data already collected.

Recipients and disclosures

Information is shared with hosting, email and website service providers to the extent needed for their services. Authorized project personnel and agreed project providers may receive information necessary for delivery. Project-specific subprocessors and access conditions are addressed in the engagement documentation.

We may disclose information when required by law, to address legal claims or protect rights, or in connection with a business restructuring subject to appropriate safeguards. Public links to services such as LinkedIn are governed by those providers’ own notices.

International processing

Koddox operates from Pakistan and serves clients internationally. Information may be accessed from Pakistan and processed in locations used by Hostinger, Google and agreed project providers. A client’s location does not by itself establish where data is stored or accessed.

For transfers subject to EU GDPR or UK GDPR restrictions, the appropriate transfer mechanism and risk assessment must be established for the specific transfer. Where appropriate, these may include European Commission standard contractual clauses, or the UK International Data Transfer Agreement or UK Addendum, with necessary supplementary measures. These are distinct instruments. A website enquiry is not blanket consent to international transfers.

For Canadian engagements, applicable accountability obligations continue when a service provider processes information abroad. Transfer arrangements must address protection of the information and transparency about foreign processing.

Retention and deletion

Retention is based on purpose rather than a single period for all records. Enquiry correspondence is retained while the enquiry or related business discussion remains relevant; project records for delivery, support and applicable contractual obligations; financial records for applicable accounting and tax requirements; and security records for proportionate investigation and protection needs.

A legal requirement or dispute may justify retaining relevant records longer. Project data return and deletion follow the processing agreement and applicable law. Backup copies may remain until the relevant backup cycle expires. Contact us to ask about the retention criteria for your records or request deletion where applicable.

Privacy rights and requests

Depending on the law that applies, you may have rights to access, correct, delete or obtain a copy of information, restrict or object to processing, withdraw consent and complain to a regulator. Rights may be subject to lawful exceptions. Withdrawal of consent does not affect earlier lawful processing.

Send requests to support@koddox.com with enough information to identify the relevant records. We may request proportionate verification or evidence of an authorized representative’s authority. For client-controlled information, we may refer the request to the client and assist according to our agreement. Requests, extensions and refusals are handled within applicable legal requirements; you may ask us to review a decision and use any applicable appeal or regulator route.

Regional rights

UK and EEA: where applicable, rights include access, rectification, erasure, restriction, portability and objection, including objection to direct marketing. You may complain to the UK Information Commissioner’s Office or your relevant EEA supervisory authority. Applicable GDPR requests are normally answered within one month, with extensions only as permitted by law.

Canada: applicable federal and provincial requirements determine access, correction, consent and complaint rights. Contact us first with a privacy concern; you may also contact the Office of the Privacy Commissioner of Canada or the appropriate provincial regulator.

United States: rights depend on applicable state and sector-specific law and whether it covers the activity. Where applicable, rights may include access, correction, deletion, portability, appeal, and opt-out of sale, sharing or targeted advertising. Legally required preference signals, such as Global Privacy Control where applicable, must be respected. This notice does not waive any statutory rights.

Europe includes jurisdictions outside the EEA, such as Switzerland, whose requirements must be assessed separately. Serving a market does not constitute certification of compliance with every law in that market.

Security and children

Security requirements depend on the information and processing risks. Our Security & Compliance page explains project responsibilities and safeguards to agree. No website or internet transmission can be guaranteed completely secure.

Our services and website are intended for business audiences and are not directed to children. If you believe a child has provided personal information, contact us so the information can be assessed and appropriately removed.

Changes and contact

Contact Koddox Technologies, 9 Star Arcade, Opposite DHA Bosan Road Gate, Multan, Pakistan, or email support@koddox.com. Material changes to this notice will be reflected in the updated date and additional notice will be provided where required. A policy update does not replace consent where consent is required for a new purpose.