Privacy Policy

This Privacy Policy explains how Codeyard including Code Yard Private Limited (Nepal), Codeyard LLC (USA), and 52D Games Private Limited (India) — collects, uses, stores, and protects your personal data when you visit our website, use our services, or interact with us through any channel including email, WhatsApp, or our lead generation pages. We take your privacy seriously and are committed to being transparent about what we do with your information.

​

01 Who We Are

​

Codeyard is a global digital technology company founded in 2019 by Haimal Khetan. We provide web development, e-commerce, Search Engine Optimisation (SEO), Generative Engine Optimisation (GEO), Zoho products, SaaS development, Wix Templates, Wix Apps, and white label services to businesses and agencies across more than 20 countries.

​

We operate through the following legal entities:

• Code Yard Private Limited - registered in Nepal. Primary delivery hub for development and GEO/SEO operations.

• Codeyard LLC - registered in the State of Wyoming, USA,USA. Serves US-based clients and agency partners.

• 52D Games Private Limited - registered in India. Development hub and client-facing team for South Asian markets.

​

References to "Codeyard," "we," "us," or "our" in this policy refer collectively to all three entities. References to the "Website" refer to codeyard.app and any subdomain or associated landing page operated by Codeyard.

​

For the purposes of the UK GDPR and EU GDPR, the data controller responsible for your personal data is Code Yard Private Limited, with Codeyard LLC acting as data controller for residents of the United States.

​

02 What Data We Collect

​

A. Data you provide directly

Identity data : Contact forms, audit requests, lead magnets

Contact data: Any form submission or direct communication

Business data: GEO audit, SEO audit, and service enquiry forms

Message data: Contact forms, WhatsApp messages, email

Employment data: Career applications and spontaneous applications

Payment data: Invoice and payment processing via third parties (No card data stored by Codeyard directly.)

 

B. Data collected automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, time zone.

• Usage data: Pages visited, time spent on each page, click paths, referring URLs, exit pages, search terms used to find our site.

• Cookie and tracking data: Identifiers set by cookies, pixels, and similar technologies — including Google Analytics, Meta (Facebook) Pixel, and any remarketing tags. See Section 9 for full details.

​

C. Data from lead magnets and free resources

When you download the 2026 GEO Checklist, request a Free AI Visibility Audit, request a Free SEO Audit, or subscribe to any Codeyard newsletter or resource, we collect your name, email address, business name, and website URL. This data is used to deliver the requested resource and may be used to follow up regarding related services. You may opt out at any time.

​

D. Data from WhatsApp communications

We use WhatsApp (+977 9818 110 388) as a primary business communication channel. When you contact us via WhatsApp, your phone number, display name, and the content of your messages are processed. WhatsApp communications are subject to Meta's Privacy Policy in addition to this policy. We do not store WhatsApp message histories beyond what is necessary to serve your enquiry.

​

​

03 How We Collect Your Data

​

We collect personal data through the following channels:

• Direct interactions: When you fill in a form on our website, email us, message us on WhatsApp, apply for a position, or otherwise contact us directly.

• Automated technologies: As you browse our website, we automatically collect technical and usage data using cookies, server logs, and analytics tools.

• Third-party sources: We may receive data about you from analytics providers (Google), advertising platforms (Meta/Facebook), scheduling tools (Calendly), and our Zoho CRM system where you have previously interacted with those platforms in connection with Codeyard.

• Referrals: When an existing client or partner refers you to us, we may receive your name and contact details. We will contact you in accordance with the referrer's consent.

• Public sources: Business information publicly available through LinkedIn, company directories, or similar professional platforms, where relevant to a potential business relationship.

​

​

04 Why We Use Your Data

​

PurposeDescription

​

Service deliveryTo provide, manage, and improve the web development, SEO, GEO, e-commerce, and other services you have engaged us for.

Responding to enquiriesTo respond to your questions, audit requests, contact form submissions, and WhatsApp messages promptly and accurately.

Free resource deliveryTo deliver downloadable resources such as the 2026 GEO Checklist, AI Visibility Audit reports, and SEO Audit reports you have requested.

Marketing communicationsTo send you information about our services, insights, blog posts, or promotional offers where you have consented or where we have a legitimate interest. You may opt out at any time.

​

Recruitment

To evaluate your application for employment or freelance work, conduct interviews, and make hiring decisions.

​

Analytics

and improvementTo understand how visitors use our website, identify areas for improvement, and optimise performance using tools including Google Analytics.

​

Targeted advertising

To serve relevant advertisements to you on platforms including Google and Meta/Facebook, using data collected via cookies and pixels with your consent.

​

Legal compliance

To comply with applicable laws, regulations, and legal processes, and to respond to valid requests from public authorities.

 

Business operations

For invoicing, contract management, fraud prevention, and internal record-keeping.

​

​

05 Legal Basis for Processing (GDPR)

​

If you are located in the United Kingdom or European Economic Area, we are required to have a lawful basis for processing your personal data. Our legal bases are:

• Contract: Processing necessary to perform a contract with you or to take steps at your request before entering a contract — for example, delivering services you have paid for or responding to a project enquiry.

• Legitimate interests: Processing necessary for our legitimate business interests, where those interests are not overridden by your rights. This includes responding to enquiries, improving our services, security monitoring, and sending relevant marketing to existing clients and business contacts.

• Consent: Where you have given us explicit consent — for example, subscribing to our newsletter, downloading a lead magnet, or accepting non-essential cookies. You may withdraw consent at any time by contacting us at info@codeyard.app or using the unsubscribe link in any marketing email.

• Legal obligation: Processing necessary to comply with a legal or regulatory obligation to which we are subject.

​

For data subjects in Nepal and India, we comply with applicable national data protection legislation. For data subjects in the United States, we comply with applicable state privacy laws including the California Consumer Privacy Act (CCPA) where applicable.

​

​

06 Who We Share Your Data With

​

We do not sell your personal data. We do not trade, rent, or sell your information to third parties for their own marketing purposes under any circumstances.

​

We may share your data with the following categories of third parties, strictly for the purposes described in this policy:

• Service providers and technology partners: Including Google (Analytics, Ads, Workspace), Meta/Facebook (Pixel, Advertising), Zoho (CRM, Mail, Workplace), Calendly (appointment scheduling), and our hosting and email infrastructure providers. These parties process data on our behalf under data processing agreements.

• Platform partners: Shopify, Wix, and WooCommerce, in the context of delivering e-commerce and web development services where you are a mutual client or partner.

• Zoho — as a Value Added Reseller: As an authorised Zoho VAR, we may process client data within Zoho's platform on your behalf. Zoho's own privacy policy applies to their storage and processing of that data.

• Internal entities: We share data between Code Yard Private Limited, Codeyard LLC, and 52D Games Private Limited as necessary to deliver services and manage our global operations.

• White label partners: If you are an agency client using Codeyard's white label services, we operate under strict NDAs and do not disclose your identity or your clients' identity to any third party.

• Legal and regulatory authorities: Where required by law, court order, or to protect the legal rights, safety, or property of Codeyard, our clients, or others.

• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the acquiring entity. You will be notified of any such change.

​

​

07 International Data Transfers

​

Codeyard operates globally with teams and entities in Nepal, India, the United Kingdom, and the United States. As a result, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not have the same level of data protection as your home country.

​

Where we transfer personal data from the UK or EEA to countries not deemed adequate by the relevant authority, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO, as applicable.

• Binding corporate arrangements between our group entities where appropriate.

• Your explicit consent, in cases where other transfer mechanisms are not available.

​

You may request a copy of the transfer safeguards we rely on by contacting us at info@codeyard.app.

​

​

08 How Long We Keep Your Data

​

Client project data and communications

7 years from end of engagement (legal and tax compliance)

 

Contact and enquiry data (non-client)

2 years from last contact, unless a service relationship begins

​

Lead magnet and audit request data

2 years, or until you unsubscribe / request deletion

​

Job application data

If unsuccessful : 6 months from the date of decision, unless you consent to longer retention for future roles

 

Job application data

If successful: Duration of employment plus 7 years

​

Website analytics data

26 months (Google Analytics default, reduced where possible)

Cookie consent records1 year from consent date

​

Financial and invoicing records

7 years (statutory requirement)

​

After the applicable retention period, we will securely delete or anonymise your personal data. You may request early deletion at any time — see Section 10.

​

​

09 Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit our site.

​

Types of cookies we use

• Essential cookies: Necessary for the website to function correctly. These cannot be disabled without affecting core functionality. No consent is required for essential cookies.

• Analytics cookies: We use Google Analytics to understand how visitors use our website — pages visited, time on site, traffic sources. This data is aggregated and anonymised where possible. These cookies are set only with your consent.

• Marketing and advertising cookies: We use the Meta (Facebook) Pixel and Google Ads tracking to measure the effectiveness of our advertising campaigns and to serve relevant ads to visitors who have shown interest in our services. These cookies are set only with your consent.

• Functionality cookies: Used to remember your preferences and improve your experience (for example, language preferences or form completion state).

​

Managing cookies

​

When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, accept essential cookies only, or customise your preferences. You can change your cookie preferences at any time by clicking "Cookie Settings" in the footer of our website.

You may also control cookies through your browser settings. Note that disabling cookies may affect the functionality of certain parts of our website. For more information about managing cookies, visit allaboutcookies.org.

​

Third-party tracking

​

Our website may load scripts from Google, Meta, and other third-party platforms as part of our analytics and advertising activity. These third parties may set their own cookies and collect data about your browsing behaviour across multiple websites in accordance with their own privacy policies.

​

​

10 Your Data Protection Rights

​

Depending on your country of residence, you may have some or all of the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.

• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where there is no compelling reason for us to continue processing it.

• Right to restrict processing: You have the right to request that we limit how we use your data in certain circumstances.

• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

• Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing immediately.

• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

• Right not to be subject to automated decision-making: We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

​

California residents (CCPA): You have the right to know what personal information is collected about you, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

​

To exercise any of these rights, please contact us at info@codeyard.app with the subject line "Data Subject Request." We will respond within 30 days (UK/EU GDPR) or 45 days (CCPA). We may need to verify your identity before fulfilling your request.

​

If you are located in the UK or EEA and believe we have not handled your data correctly, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EEA, contact your national Data Protection Authority.

 

​

11 Children's Privacy

​

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data without appropriate consent, please contact us immediately at info@codeyard.app and we will take steps to delete that information promptly.

​

​

12 Third-Party Links

​

Our website contains links to third-party websites including client portfolio examples, platform partner sites (Shopify, Wix, Zoho), and social media profiles. Clicking these links will take you away from our website and to sites governed by their own privacy policies. We are not responsible for the privacy practices or content of those third-party websites and encourage you to review their policies before providing any personal data.

 

13 Data Security

​

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption across all data transmission between your browser and our servers.

• Access controls limiting personal data access to authorised personnel only, on a need-to-know basis.

• Regular security reviews of our internal systems and third-party processors.

• Secure data processing agreements with all third-party service providers handling personal data on our behalf.

• Staff training on data protection obligations and secure data handling practices.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with applicable law.

 

14 Changes to This Policy

​

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you directly by email.

We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes acceptance of the updated policy.

​

15 How to Contact Us

​

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us using the details below. We will respond to all enquiries within 30 days.

​

Email: info@codeyard.app

Phone / Whatsapp: +977 9818110388