Privacy Policy.

Zenpixl ("we", "us", "our") is a software development firm operating from Dhaka, Bangladesh. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website at zenpixl.com or engage with our services.

We are committed to protecting your privacy and handling your personal data in a transparent, lawful manner — consistent with the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and applicable international standards.

By using our website or contacting us, you agree to this policy. If you do not agree, please discontinue use of our site.

The data controller responsible for your personal information is:

For data protection enquiries, GDPR-related requests, or to exercise your rights, please contact us at the email above with the subject line "Data Privacy Request".

We collect only the minimum data necessary for the purposes described in this policy:

a) Contact form submissions
When you use our contact form, we collect your name, email address, company name, and any project details you choose to provide. This is provided voluntarily by you.

b) Communication data
If you contact us via email or WhatsApp, we store records of that correspondence, including your contact details and message content.

c) Technical / usage data
Our website may collect standard server logs including IP address, browser type, device type, pages visited, and referring URLs. This data is collected automatically for security and performance purposes.

d) Cookies
We use minimal cookies for essential site functionality (theme preference, session state). We do not use advertising, tracking, or third-party analytics cookies. You can disable cookies in your browser settings, though some site features may be affected.

e) Client project data
During active engagements, we may process project-related data you share with us (source code, databases, credentials, business data). This is governed separately by your project contract and/or a Data Processing Agreement (DPA) on request.

We use the data we collect to:

• Respond to your enquiries and discuss potential project engagements
• Provide, manage, and deliver our software development services
• Send project updates, invoices, and contractual communications during an active engagement
• Improve our website performance and security
• Comply with legal obligations or respond to lawful requests
• Protect our legitimate business interests

We do not use your data for automated decision-making, profiling, or targeted advertising.

For individuals in the European Economic Area (EEA) and UK, we process personal data under the following legal bases:

• Legitimate interest — responding to enquiries and communicating about potential work
• Contract performance — where processing is necessary to fulfil a signed project agreement
• Legal obligation — where we are required by law to retain certain records
• Consent — for any optional communications where we have explicitly requested it

We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:

Service providers: We use a small number of trusted third-party services to operate our business — including hosting providers (DigitalOcean), email delivery (where applicable), and project management tools. These providers are bound by their own privacy policies and process data only as necessary to provide their services.

Legal compliance: We may disclose data if required by law, court order, or to protect the rights, property, or safety of Zenpixl or others.

Business transfer: If our business is sold or merged, your data may be transferred as part of that transaction, subject to continued protection under this policy.

We require all third parties to respect the security of your data and to treat it in accordance with applicable law.

Zenpixl operates from Bangladesh and may process data of individuals in the EU, UK, US, and other jurisdictions. By using our services, you acknowledge that your data may be transferred to and processed in Bangladesh.

We take appropriate safeguards to ensure that such transfers are protected, including using standard contractual clauses where required under GDPR. For clients requiring a formal Data Processing Agreement (DPA), we provide one on request.

We retain personal data only as long as necessary for the purposes it was collected:

• Enquiry data: Up to 12 months after last contact, or until you request deletion
• Client project data: For the duration of the engagement plus 7 years (legal record-keeping requirement)
• Server logs: Typically 30–90 days for security purposes
• Invoice and financial records: Up to 7 years as required by financial regulations

After these periods, data is securely deleted or anonymised.

Under GDPR and applicable privacy laws, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your data where no legal basis to retain exists
• Right to restriction — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time where processing is based on consent

To exercise any of these rights, email us at info@zenpixl.com with the subject line "Data Privacy Request". We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

We implement appropriate technical and organisational security measures to protect your data against unauthorised access, loss, destruction, or disclosure. These include:

• HTTPS/TLS encryption on all web communications
• Access controls and authentication on all internal systems
• Regular security updates and patch management
• Restricted access to personal data on a need-to-know basis

No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Our website may contain links to third-party websites (e.g., Upwork, LinkedIn, GitHub). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies independently. This Privacy Policy applies only to zenpixl.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our website after changes constitutes your acceptance of the updated policy.

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: