Privacy Policy

Your privacy matters to us. This policy explains exactly what data Code Wingz collects, why we collect it, how we use it, and the rights you have over your own information.

CODEWINGZ
Section 01

Who We Are

Code Wingz is a digital product studio headquartered in Township, Lahore, Punjab, Pakistan. We specialise in cross-platform mobile app development using Flutter, AI and machine learning integration, scalable backend engineering, and UI/UX design for startups, SMEs, and enterprise clients worldwide.

This Privacy Policy applies to all information collected through our website at codewingz.com, our project quotation forms, email communications, client onboarding processes, and any other services we provide (collectively, the “Services”).

By accessing or using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our Services.

Section 02

Information We Collect

We collect information in two primary ways: directly from you when you interact with us, and automatically when you use our website.

CategoryExamplesSource
IdentityFull Name, Company name job titleYour provide this directly
Contact DataEmail address, phone number, WhatsAppYou provide this directly
Project DataProject brief, budget range, timeline, feature requirementsYou provide via quotation forms
Technical DataIP address, browser type, device info, OS versionAutomatically via your browser
Usage DataPages visited, time on page, referral source, clicksAutomatically via analytics tools
Communications DataEmails, messages, meeting notes, project files you shareYou provide directly during engagement
Financial DataInvoice records, payment references (we do not store card numbers)Transaction process
Section 03

How We Use Your Information

We use the information we collect for the following specific purposes only. We do not sell your data to third parties for marketing purposes, ever.

To respond to your inquiry, project brief, or quotation request in a timely manner

To draft, negotiate, and execute client contracts and service agreements

To deliver the digital products and services you commission from us

To send project updates, milestone notifications, and deliverable files

To issue invoices and process payments for completed work

To provide post-launch support, bug fixes, and maintenance services

To improve the quality, performance, and content of our website and services

To comply with applicable laws, regulations, and legal processes

To send occasional updates about new services, case studies, or company news — only if you have opted in and only with your ability to unsubscribe at any time

To protect the rights, property, and safety of Code Wingz, our clients, and the public

Section 04

Legal Basis for Processing

Where applicable under data protection laws (including GDPR for EU/EEA residents), we process your personal data on the following legal grounds:

Contract performance

processing necessary to fulfil a service agreement or pre-contractual steps you request (e.g. preparing a project proposal)

Legitimate interests

processing necessary for our legitimate business interests, such as improving our services and maintaining security, provided these are not overridden by your rights

Consent

where you have given clear, specific, and freely given consent (e.g. subscribing to our newsletter or accepting non-essential cookies)

Legal obligation

where processing is required to comply with a legal obligation (e.g. retaining financial records for tax purposes)

Section 05

Sharing Your Information

We do not sell, trade, rent, or share your personal data with any third party for commercial gain. We may share data only in the following limited circumstances:

Service Providers:

Trusted third-party tools we use to operate our business — including Google Workspace (email), Notion (project management), Figma (design), GitHub (code hosting), Stripe/bank transfers (invoicing), and Google Analytics (website analytics). Each is bound by strict data processing agreements.

Project Collaborators:

Freelance designers, developers, or specialists who may work alongside our team on your specific project. These individuals are bound by confidentiality agreements and only receive the minimum data necessary to complete their scope of work.

Legal requirements:

If required by law, court order, or government authority, or to protect the rights, property, or safety of Code Wingz, our clients, or the public.

Business transfer:

In the unlikely event of a merger, acquisition, or sale of assets, your data may be transferred to the succeeding entity, which will honour the commitments in this policy.

Section 06

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience and help us understand how visitors use our site.

CategoryPurposeCan You Optout?
Strictly NecessaryCore website functionality security and session managementNo-required to use the site
Analytics DataGoogle Analytics - page views, traffic sources, device info (anonymised)Yes - via cookie settings
Preference CookiesRemember your language or display preferencesYes - via cookie settings
Marketing CookiesWe currently do not use marketing or retargeting cookiesN/A
Section 07

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law.

Enquiry / lead data:

Retained for 12 months from last contact if no project engagement begins

Active client data:

Retained for the duration of the project plus 3 years post-completion for support and warranty purposes

Financial and invoicing records:

Retained for 7 years in compliance with Pakistani tax and financial record-keeping regulations

Email communications:

Retained for 3 years, then securely deleted unless part of an ongoing legal matter

Website analytics data:

Retained for 26 months (Google Analytics default), then purged automatically

Section 08

Your Rights

Depending on your location, you may have the following rights regarding your personal data. We honour these rights for all users, regardless of geography.

Right to Access:

Request a copy of the personal data we hold about you, free of charge, within 30 days

Right to Rectification:

Request correction of any inaccurate or incomplete personal data

Right to Erasure (“Right to Be Forgotten”):

Request deletion of your data where we have no legal obligation to retain it

Right to Restrict Processing:

Request that we limit how we use your data while a dispute is resolved

Right to Data Portability:

Request your data in a structured, machine-readable format so you can transfer it elsewhere

Right to Object:

Object to processing based on legitimate interests, including direct marketing at any time

Right to Withdraw Consent:

Withdraw consent for any processing based on consent, at any time, without penalty

Right to Lodge a Complaint:

File a complaint with your local data protection authority if you believe your rights have been violated

Section 09

Data Security

We take the security of your data seriously and implement industry-standard technical and organisational measures to protect it from unauthorised access, accidental loss, destruction, or disclosure.

All website traffic is encrypted via HTTPS / TLS 1.2+

Client project files and communications are stored in password-protected, access-controlled systems

Internal team access to client data follows a principle of least privilege – only team members who need specific data to do their job can access it

We use two-factor authentication (2FA) on all critical business accounts and tools

Regular security reviews of our tools, hosting environments, and processes

We sign NDAs with clients on request before any sensitive project information is shared

Section 10

Third-Party Links

Our website may contain links to external websites — including client portfolio case studies, technology partners, social media platforms, and third-party tools. These sites have their own privacy policies, which we do not control and are not responsible for.

We encourage you to review the privacy policy of any third-party site you visit via a link on our website. Our Privacy Policy applies solely to information collected through Code Wingz's own website and Services.

Section 11

Children's Privacy

Our Services are not directed at, designed for, or intended to be used by individuals under the age of 16. We do not knowingly collect personal data from children under 16.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at codewingz@gmail.com. We will delete the information promptly upon verification.

Section 12

International Data Transfers

Code Wingz is based in Pakistan and works with clients across the world, including in the United States, European Union, United Kingdom, UAE, and Asia-Pacific region. When you provide data to us from outside Pakistan, your data may be transferred to, stored, and processed in Pakistan.

For clients in the EU/EEA, we acknowledge our obligations under the GDPR. Where we transfer data outside the EEA to processors, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms.

By using our Services, you consent to the transfer of your information to Pakistan and to other countries where our service providers operate, subject to the protections described in this policy.

Section 13

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Last Updated" date at the top of this page

Notify active clients and subscribers by email at least 14 days before the changes take effect

Post a prominent notice on our website homepage for 30 days following significant changes