Who we are#
CodeKuma ("CodeKuma", "we", "us") is a web and app development agency operated by Muhammad Daniyal, based in Wilmington, Delaware, USA. We run the website codekuma.com.
For the personal information described in this policy, we are the controller, which means we decide how and why it is used.
Information we collect#
Information you give us
- Contact form: your name, email address, the service you are interested in, your project details, and, if you choose to give them, a WhatsApp, Telegram, or phone contact and a reference link. We also record that you ticked the consent box.
- Messages: anything you send us by email, WhatsApp, Telegram, or LinkedIn.
- Project information: if you become a client, the requirements, content, files, and access details you share, and the billing details we need to invoice you.
Information collected automatically
- Server logs: our hosting provider records technical data such as IP address, browser type, pages requested, and timestamps, for security and reliability.
- A session cookie: set only when you submit the contact form, to limit repeated submissions. See our Cookie Policy.
What we do not collect
This website does not collect payment card details. Please do not send sensitive personal data, such as health or financial account details, in your message.
How and why we use it#
| Purpose | Information used | Legal basis |
|---|---|---|
| Reply to inquiries and prepare consultations and quotations | Contact form and message details | Your consent, and steps taken at your request before a contract |
| Deliver projects, communicate, and invoice | Project, contact, and billing information | Performing our contract with you |
| Keep the website secure and prevent spam or abuse | Server logs, session cookie, anti-spam field | Our legitimate interests in protecting the site |
| Meet tax, accounting, and legal duties | Billing and project records | Legal obligation |
| Improve the website and our services | Feedback you choose to give us | Our legitimate interests |
We use your information to respond to your inquiry and to carry out the work you ask for. We do not send marketing newsletters unless you ask us to. We do not use automated decision-making or profiling, and we do not sell personal information.
Cookies and similar technologies#
We use a single functional cookie, and only when you send the contact form. We do not use advertising or analytics cookies. The details are in our Cookie Policy.
Who we share information with#
We share personal information only where it is needed to run the website and deliver our services:
- Service providers: web hosting and email providers that store or transmit the information on our behalf.
- Messaging and social platforms: if you contact us on WhatsApp, Telegram, or LinkedIn, that platform processes your messages under its own privacy policy.
- Third-party resources: our pages load fonts and icons from Google Fonts, jsDelivr, and cdnjs. When your browser requests them, those providers receive your IP address and browser details.
- Advisers and authorities: professional advisers such as accountants, and public authorities when the law requires us to disclose information.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
International transfers#
We work with clients worldwide, and our providers may process information in countries other than your own. Where the law requires it, we rely on safeguards such as the standard contractual clauses approved by the European Commission or an adequacy decision, so your information stays protected.
How long we keep information#
- Inquiries that do not become projects: up to 24 months, then we delete them.
- Client project records: for the duration of the project, and afterwards for as long as tax, accounting, and legal rules require.
- Server logs: for the period set by our hosting provider.
- Backups: removed as they rotate out.
You can ask us to delete your information earlier, and we will unless we are legally required to keep it.
How we protect it#
We use HTTPS on our website, limit access to personal information to the people who need it, and handle credentials you share with care. No online service can be completely secure, so if you think your information has been compromised, tell us straight away.
Your rights#
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct information that is inaccurate or incomplete;
- ask us to delete your information;
- restrict or object to certain uses of your information;
- receive your information in a portable format;
- withdraw your consent at any time, without affecting earlier use.
To use any of these rights, contact us at hello@codekuma.com. We may ask you to confirm your identity first, and we aim to reply within one month. If you are in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.
If you live in California or another US state with a privacy law, you may have the right to know, correct, and delete your personal information. We do not sell it or share it for advertising, and we will not treat you differently for using your rights.
Children#
Our website and services are for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has sent us information, please contact us and we will delete it.
Changes to this policy#
We may update this policy when our practices or the law change. The date at the top shows when it last changed. If we make a significant change, we will make it clear on this page.
Contact us#
If you have a question about this document or want to exercise a right described in it, contact us at hello@codekuma.com or through our contact form. We read every message.