Privacy Policy

1. Who we are

CodeCafe is a software development and business consultancy firm based in Khulna, Bangladesh. This policy explains what personal data we collect through this website, why we collect it, how long we keep it and what rights you have.

For data you submit through this site, CodeCafe is the data controller. Where we process data inside a system we built for a client, that client is the controller and we act as a processor under their instructions and our contract with them.

2. What we collect

When you submit a form. Our contact form collects your name, company, email address, phone number, the service you are interested in, your budget range and your message. The consultation booking form additionally collects your company size, timeline, preferred date and a description of your goals. The newsletter form collects only your email address.

Automatically. Our server records the IP address a submission came from, together with the browser user agent for contact form submissions. This is kept for security and abuse prevention, not for profiling.

What we do not do. This site sets no advertising or tracking cookies, embeds no third-party analytics or social widgets, and does not attempt to identify you across other websites. The only cookie set is the session cookie Laravel uses to keep forms secure against cross-site request forgery.

3. Why we use it, and on what basis

We use your submission to respond to your enquiry, prepare a proposal and — where you have asked for one — arrange a consultation. The legal basis is our legitimate interest in responding to a request you initiated, and the steps necessary to enter into a contract.

Newsletter subscriptions are sent on the basis of your consent, given when you submit the form. You may withdraw it at any time.

We keep security-related records such as IP addresses on the basis of our legitimate interest in protecting the site from abuse.

4. Who sees it

Your data is seen by the CodeCafe staff who need it to respond to you — typically a member of the commercial team and the relevant technical lead.

We do not sell personal data, and we do not share it with third parties for their own marketing. We use a small number of service providers to operate the site and our email — our hosting provider and our email provider — who process data only on our instructions.

We disclose data to authorities only where legally required, and we will tell you if that happens unless we are legally prohibited from doing so.

5. Where it is stored, and for how long

Data is stored on servers operated by our hosting provider, protected by access controls, encryption in transit and regular backups.

Enquiries and consultation requests are retained for 24 months from your last contact with us, so we can pick up a conversation you resume later. Newsletter subscriptions are retained until you unsubscribe. Security logs are retained for 12 months. Where an enquiry becomes a contract, the relevant records are retained for as long as required by tax and company law.

6. Your rights

You may ask us to give you a copy of the personal data we hold about you, correct anything inaccurate, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent, you may withdraw it at any time — every newsletter contains an unsubscribe link.

To exercise any of these, email hello@codecafe.dev. We will respond within 30 days. We may ask you to confirm your identity before acting on a request, to make sure we are not disclosing your data to somebody else.

7. Security

We apply the same practices to our own systems that we recommend to clients: least-privilege access, encryption in transit, audit logging, dependency scanning and prompt patching. Access to form submissions is restricted to authenticated administrator accounts.

No system is perfectly secure. If a breach affects your personal data and is likely to put your rights at risk, we will notify you and the relevant authority without undue delay.

8. Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has submitted data to us, contact us and we will delete it.

9. Changes and contact

We update this policy when our practices change. The effective date at the top of this page reflects the current version.

Questions, requests or complaints about privacy: hello@codecafe.dev.