Privacy Policy

CodeMyPixel is a design and software studio run as a partnership of Johirul Hoq Akash (Chief Executive Officer and founder), Pravas Chandra Sarkar (Chief Operating Officer and co-founder), and Md Sabbir Ahmed (Chief Technology Officer and co-founder).

CodeMyPixel decides why and how the personal data described in this policy is used, which makes it the "controller" of that data under the EU and UK General Data Protection Regulation (GDPR). Our trade licence is registered in the name of Johirul Hoq Akash, who represents the studio as the controller.

• Address: Poshchim Dharmaganj, Enayetnagar, Fatulla, Narayanganj 1400, Bangladesh
• Email: admin@codemypixel.com
• Privacy requests are handled by: Chief Technology Officer

This policy explains how we handle personal data when you:

• visit codemypixel.com, or use the chat, contact, newsletter, job application or request forms on it;
• write to us, book a call with us or work with us;
• receive a business message from us, by email or on LinkedIn.

When we build or run software for a client, the client decides what happens to the personal data in it. Our contract with that client covers that work, together with a data processing agreement if they ask for one. This policy does not.

What you give us on this website

• Contact form: your name and email address, and anything else you choose to tell us: phone number, company, the kind of project, budget, how you heard of us, and your message.
• Job applications: your name, email address and the role, and anything else you choose to give: phone number, experience, current company, address, portfolio and profile links, a note, your CV and a photo.
• Website chat: what you write, the page you started the chat on, your browser, and your country when our host tells us.
• Newsletter: your email address and the language of the page you signed up on.
• Landing page forms (pages at codemypixel.com/for/...): the details the form asks for, usually your name, work email and company.
• Privacy requests: your email address or LinkedIn profile, and what you ask us to do.

When you deal with us directly

Emails and messages you send us, calls you book through Cal.com and, for clients, the contact, project and billing details we need to do the work and be paid.

From other sources, for business outreach

We contact businesses we think could use our work. For that we use business contact details we bought from Apollo.io, a business contact database, and details people publish on LinkedIn: name, job title, company, work email address, LinkedIn profile, location, and facts about the company such as its size and industry. We add our own notes, and keep a record of the messages we exchange.

Automatically

• Our host keeps standard server logs (IP address, browser and the page requested) to run the site and keep it secure.
• When you read a blog post, we count the visit. So that one reader is counted once, we store a scrambled code made from your IP address, never the address itself, and we delete the code after one day.
• Only if you accept analytics cookies, Google Analytics records how the site is used. See "Cookies and similar storage" below.

We don't ask for sensitive information, such as health, religion or political opinions. Please leave it out of messages and CVs.

Under the GDPR, every use of personal data needs a legal basis. These are ours:

Where we rely on our legitimate interests, we have weighed them against your interests and rights. You can object at any time, as described in "Your rights".

We found your work details in a business contact list we bought from Apollo.io, or on LinkedIn. We use them only to offer services relevant to your company, and we keep our messages short and few.

Every email we send ends with a link that stops all further contact, by email and on LinkedIn, as soon as you use it. You can also reply "stop", or use our request page. Once you ask, we add a scrambled, one-way copy of your email address or LinkedIn profile to a block list, so that you are never added again, even if your details appear in a list we buy later.

We don't delete purchased business contact lists on a schedule. If you ask us to delete your details, we remove them from our systems, including our copy of the purchased list, and keep only the block list entry, so that we never contact you again.

We use AI tools in our work, and a person reviews what they produce before it is used. Some features of our internal tools send text to OpenAI (ChatGPT) or Anthropic (Claude) through their business APIs. Where we can, we remove names, email addresses and other personal details before anything is sent, and under their business terms these providers don't use what we send to train their models.

We don't make decisions about you by automated means alone that have legal or similarly significant effects on you.

We set only what the site needs to work, unless you accept analytics.

The site also keeps a few small values in your browser's own storage: your light or dark theme, whether you have started a chat, whether a video is muted, and which blog posts have already been counted during this visit. They are not sent to anyone.

Google Analytics loads only after you press Accept. We have switched off Google signals and advertising features, and Google keeps the event data for 14 months. You can change your mind at any time with "Cookie settings" at the foot of every page. If you reject analytics after accepting it, we delete the Google Analytics cookies. If your browser sends a Global Privacy Control signal, we treat it as a rejection and don't ask.

Videos on the site use YouTube's privacy-enhanced player, which loads nothing from YouTube until you press play. Booking a call takes you to Cal.com, whose own privacy policy applies there.

We don't sell your personal data, and we don't share it for advertising. We use these providers to run the studio, each only for the purpose listed:

We may also disclose personal data when the law requires it, or to establish, exercise or defend legal claims.

We work from Bangladesh, and our providers keep data in the USA, Singapore and the other countries listed above. These countries may not protect personal data in the same way as the European Union or the United Kingdom.

Where a provider offers them, we rely on the European Commission's Standard Contractual Clauses, with the UK addendum for UK data, or on the provider's certification under the EU-US Data Privacy Framework. You can ask us which safeguard applies to any provider at admin@codemypixel.com.

Enquiries, job applications, chats, newsletter addresses and privacy requests are deleted automatically when their time is up, by a job that runs every night.

Copies of enquiries, job applications, chats and newsletter sign-ups posted to our private Discord server, and our email correspondence, are kept until you ask us to delete them.

Everything travels to and from the site encrypted. Only the people who need personal data can see it: our internal console requires each person to sign in, gives each one only the permissions their work needs, and records who changed what. CVs and photos are kept in private storage.

If a breach puts your personal data at risk, we will tell you and the relevant authorities, as the law requires.

Wherever you live, you can ask us to:

• stop contacting you, at any time, with no reason needed;
• send you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete your data.

If the GDPR or the UK GDPR applies to you, you also have the right to restrict how we use your data, to receive it in a portable format, to object to any use based on our legitimate interests, and to withdraw your consent at any time, without affecting what happened before.

The quickest way is our request page. You can also email admin@codemypixel.com. To protect your data, we ask you to confirm requests to delete, copy or correct it from your email address first. We answer within one month.

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the data protection authority where you live or work, such as the Information Commissioner's Office in the United Kingdom or the Garante per la protezione dei dati personali in Italy.

The California Consumer Privacy Act (CCPA) gives California residents specific rights. In the last 12 months we have collected these categories of personal information, from the sources and for the purposes described above:

• identifiers, such as your name, email address, phone number and IP address;
• professional or employment information, such as your job title, employer, CV and work history;
• internet activity, such as the pages you visit and how you use the site;
• approximate location, from your IP address or your business address;
• photographs, if you send one with a job application.

We disclose these to the service providers listed above, for the purposes listed above. We do not sell or share personal information, as the CCPA defines those words, and we do not use sensitive personal information to infer anything about you.

You have the right to know what we hold about you and how we use it, to have it corrected or deleted, and to opt out of any sale or sharing. We will not treat you differently for using these rights. You can use them through our request page, by emailing admin@codemypixel.com, or through an authorised agent with your signed permission. We verify every request by email and answer within 45 days. We honour Global Privacy Control signals.

This website and our services are not meant for anyone under 18, and we don't knowingly collect their data. You must be 18 or older to apply for a job with us. If you think a child has given us personal data, email admin@codemypixel.com and we will delete it.

When we change this policy, we update the date at the top of this page. If a change affects how we use data we already hold, we will say so on the site, and by email where we can.

This policy is written in English and translated automatically into the site's other languages. If a translation differs from the English, the English version applies.