Privacy Policy.

Zenpixl ("we", "us", "our") is a software development firm operating from Pabna, Bangladesh. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website at zenpixl.com or engage with our services.

We are committed to protecting your privacy and handling your personal data in a transparent, lawful manner — consistent with the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and applicable international standards.

By using our website or contacting us, you agree to this policy. If you do not agree, please discontinue use of our site.

The data controller responsible for your personal information is:

For data protection enquiries, GDPR-related requests, or to exercise your rights, please contact us at the email above with the subject line "Data Privacy Request".

We collect only the minimum data necessary for the purposes described in this policy:

a) Contact form submissions
When you use our contact form, we collect your name, email address, company name, and any project details you choose to provide (service, budget, timeline, message). We also record how you first arrived at our website (for example the referring site, landing page and campaign tags) so we understand which channels bring enquiries. This is provided voluntarily by you.

a2) Newsletter and resources
If you sign up for our newsletter or request a resource such as our SaaS MVP checklist, we store your email address, where you signed up and how you first arrived at the site. You can unsubscribe at any time by replying "unsubscribe" or emailing us.

b) Communication data
If you contact us via email or WhatsApp, we store records of that correspondence, including your contact details and message content.

c) Technical / usage data
Our website may collect standard server logs including IP address, browser type, device type, pages visited, and referring URLs. This data is collected automatically for security and performance purposes.

d) Cookies and similar technologies
We use browser storage for essential site functionality (theme preference, your cookie choice, and how you first arrived at the site). With your consent we also use analytics and marketing cookies: Google Analytics 4 (site usage statistics), Microsoft Clarity (anonymised session recordings and heatmaps) and the LinkedIn Insight Tag (measuring LinkedIn campaigns). Visitors in the UK, EEA and Switzerland are not tracked by these tools until they click "Accept"; elsewhere Google Analytics runs in a privacy-preserving mode without advertising features. You can change your choice at any time using "Cookie settings" in the website footer, or block cookies in your browser.

e) Spam and bot protection
Our forms use Cloudflare Turnstile to check that submissions come from people rather than automated bots. Turnstile processes technical signals such as your IP address and browser characteristics for this security purpose only and does not use them for advertising. See Cloudflare's privacy policy for details.

f) Client project data
During active engagements, we may process project-related data you share with us (source code, databases, credentials, business data). This is governed separately by your project contract and/or a Data Processing Agreement (DPA) on request.

We use the data we collect to:

• Respond to your enquiries and discuss potential project engagements
• Provide, manage, and deliver our software development services
• Send project updates, invoices, and contractual communications during an active engagement
• Improve our website performance and security
• Comply with legal obligations or respond to lawful requests
• Protect our legitimate business interests

We do not use your data for automated decision-making, profiling, or targeted advertising.

For individuals in the European Economic Area (EEA) and UK, we process personal data under the following legal bases:

• Legitimate interest — responding to enquiries and communicating about potential work
• Contract performance — where processing is necessary to fulfil a signed project agreement
• Legal obligation — where we are required by law to retain certain records
• Consent — for any optional communications where we have explicitly requested it

We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:

Service providers: We use a small number of trusted third-party services to operate our business — including hosting providers (DigitalOcean), email delivery (Gmail), bot protection (Cloudflare Turnstile), scheduling (Cal.com), live chat (Tawk.to), analytics (Google Analytics, Microsoft Clarity) and advertising measurement (LinkedIn), and project management tools. These providers are bound by their own privacy policies and process data only as necessary to provide their services.

Legal compliance: We may disclose data if required by law, court order, or to protect the rights, property, or safety of Zenpixl or others.

Business transfer: If our business is sold or merged, your data may be transferred as part of that transaction, subject to continued protection under this policy.

We require all third parties to respect the security of your data and to treat it in accordance with applicable law.

Zenpixl operates from Bangladesh and may process data of individuals in the EU, UK, US, and other jurisdictions. By using our services, you acknowledge that your data may be transferred to and processed in Bangladesh.

We take appropriate safeguards to ensure that such transfers are protected, including using standard contractual clauses where required under GDPR. For clients requiring a formal Data Processing Agreement (DPA), we provide one on request.

We retain personal data only as long as necessary for the purposes it was collected:

• Enquiry data: Up to 12 months after last contact, or until you request deletion
• Client project data: For the duration of the engagement plus 7 years (legal record-keeping requirement)
• Server logs: Typically 30–90 days for security purposes
• Invoice and financial records: Up to 7 years as required by financial regulations

After these periods, data is securely deleted or anonymised.

Under GDPR and applicable privacy laws, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your data where no legal basis to retain exists
• Right to restriction — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time where processing is based on consent

To exercise any of these rights, email us at info@zenpixl.com with the subject line "Data Privacy Request". We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

We implement appropriate technical and organisational security measures to protect your data against unauthorised access, loss, destruction, or disclosure. These include:

• HTTPS/TLS encryption on all web communications
• Access controls and authentication on all internal systems
• Regular security updates and patch management
• Restricted access to personal data on a need-to-know basis

No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Our website may contain links to third-party websites (e.g., Upwork, LinkedIn, GitHub). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies independently. This Privacy Policy applies only to zenpixl.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our website after changes constitutes your acceptance of the updated policy.

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: