Privacy Policy

Last updated: January 29, 2025

Welcome to CodeShip at codeship.net (the "Site" or the "Platform"), hosted by CodeShip ("the Company", "we", "us", and/or "our"). CodeShip provides web development and software consulting services (the "Services"). We value your privacy and are dedicated to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and your rights.

If you have any questions, comments, or concerns regarding this Privacy Policy, our data practices, or would like to exercise your rights, please contact us at contact@codeship.net.

To Whom Does This Policy Apply

This Privacy Policy applies to visitors to our Site and users of our Services. If you access the Platform on behalf of a business or organization, you confirm you have authority to accept this Policy on its behalf. Each customer is responsible for posting its own terms, conditions, and privacy policies, and ensuring compliance with applicable laws and regulations.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. When we make material changes, we will update the date above. Your continued use of the Platform after any changes indicates your agreement with the revised Privacy Policy.

What Information We Collect

Information you provide directly:

Contact details (e.g., name, email, company, role)
Project details, messages, and files you share with us
Billing information (processed by our payment provider; we do not store full card numbers)

Information collected automatically:

Basic usage data such as page views, referring pages, general geolocation (city/region), device/browser type, and on-site events (e.g., button clicks)
Cookie identifiers, browser/device identifiers, and campaign attribution parameters used for analytics and ad measurement

We use third-party service providers for analytics and marketing measurement, including tools such as PostHog and Meta Pixel/Conversions API. These providers may set or read cookies or similar technologies to help us understand site usage, campaign performance, and booked-call conversions.

We do not sell your personal information for money.

Information from third parties (as applicable):

Payment confirmations from our processor
Operational data from service providers we use to run the Platform (see "Third-Party Services")

We may receive attribution, conversion, or performance data from advertising and analytics partners when you interact with our Site or campaigns.

What We Use Your Information For

To provide, operate, and improve the Services
To communicate about proposals, statements of work, project updates, and support
To secure and maintain our infrastructure, prevent fraud, and ensure compliance
For billing, accounting, tax, and audit purposes
With permission and where allowed by contract (e.g., SOW/NDA), to feature non-confidential work in our portfolio

Legal bases (where applicable, e.g., GDPR/UK GDPR): contract performance, legitimate interests (operate, secure, and improve the Platform), consent (where required), and legal obligations.

Cookies & Tracking

We may use essential cookies for core functionality (e.g., session/auth).
We use analytics technologies, including third-party tools such as PostHog, to understand Site usage and improve our services.
We use marketing and conversion-measurement technologies, including Meta Pixel and Meta Conversions API, to measure ad performance and booked-call conversions.
Depending on your jurisdiction, these tools may operate based on consent, our legitimate interests, or another lawful basis.
You can block or delete cookies in your browser; essential features may be affected.

Third-Party Services

We rely on reputable third-party providers for hosting/CDN, analytics, marketing measurement, email, storage, and payments (e.g., Vercel/AWS, PostHog, Meta, Google Workspace, Stripe, Supabase). These providers process data on our behalf or receive limited event data according to their terms and privacy policies.

Data Security

We apply reasonable technical and organizational measures (e.g., access controls, encryption in transit, least-privilege access). No method of transmission or storage is 100% secure; you share information at your own risk.

Data Retention

We keep personal information only as long as necessary for the purposes above or as required by law. Typical periods (subject to change):

Sales inquiries/leads: up to 24 months from last interaction
Project records, invoices, and contracts: up to 7 years (tax/audit)
Operational logs: for short, necessary periods unless needed for security or legal reasons

International Transfers

Our Services are operated from Canada. Your information may be processed in Canada and in other countries where our service providers operate (including the United States). Where required, we use appropriate safeguards (e.g., contractual clauses) for cross-border transfers.

Your Rights

Depending on your location, you may have the right to:

Access, correct, or delete your personal information
Object to or restrict certain processing
Port your data
Withdraw consent where processing is based on consent

Regional Rights:

Canada (PIPEDA): You may request access to and correction of personal information we hold about you.
EEA/UK (GDPR/UK GDPR): You may exercise the rights listed above and have the right to lodge a complaint with a supervisory authority.
California (CCPA/CPRA, if applicable): You may have rights to know, correct, and delete, and to opt out of certain sale or sharing activities, including some analytics or advertising disclosures where applicable.

To exercise your rights, contact us at contact@codeship.net. We may need to verify your request.