How we handle your data

Data we collect

We collect only what we need to respond to enquiries and deliver engagements.

• Contact details you submit through forms: name, work email, company, phone and message content.
• Recruitment data you send to careers@koderclub.com, including CVs and portfolio links.
• Aggregate website analytics: pages viewed, referrer, approximate region and device type.
• Client project data processed strictly under a signed engagement agreement or NDA.

How we use it

• To respond to proposal, consultation and support requests.
• To prepare scoping documents, estimates and contracts.
• To evaluate job applications and communicate hiring outcomes.
• To improve site content and measure which resources are useful.

Legal basis and consent

Where required, we process data on the basis of your consent when you submit a form, or on the basis of legitimate interest and contractual necessity for existing clients. You may withdraw consent for marketing communication at any time.

Sharing and processors

We do not sell personal data. We share limited data with vetted service providers that support our operations — hosting, email delivery, scheduling and analytics — each bound by contractual confidentiality obligations.

Data residency and transfers

Website data is hosted on infrastructure operated by our cloud providers. For client engagements, data residency is agreed per contract; UAE and Saudi clients can require in-region hosting and processing.

Retention

• Enquiry data: retained up to 24 months from last contact.
• Recruitment data: retained up to 12 months unless you ask us to delete it sooner.
• Client project data: retained for the contract term plus any statutory period, then deleted or returned.

Security

We apply least-privilege access, encrypted transport, encrypted secret storage, audit logging and periodic access reviews. Engagement-specific controls are documented in the relevant security appendix.

Your rights

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion where no legal or contractual obligation requires retention.
• Object to marketing communication or withdraw consent.

Children

This website and our services are intended for business use. We do not knowingly collect personal data from children.

Changes to this policy

We update this policy when our practices or applicable regulations change. Material changes are reflected in the last-updated date above.