// Legal
Privacy Policy
Last updated: 29 June 2026
This policy explains what personal data Codalith collects, why we collect it, and the rights you have. Codalith is a software studio operated by Urban Bazaari, a sole proprietorship registered in India. In this policy, “we”, “us”, and “Codalith” mean Urban Bazaari. We follow India's Digital Personal Data Protection Act, 2023 (the DPDP Act). Where we work with clients in the UK or the EU, we also aim to meet the standards of the UK GDPR and EU GDPR.
1. Who we are
Codalith (operated by Urban Bazaari). Registered address: WP-18-B, Pitampura, Delhi, 110034. Email: hello@thecodalith.com. GSTIN: 07BQUPG5947D1ZH.
2. The data we collect
- Details you give us (name, email, phone, company, anything in an enquiry or brief).
- Booking data from Calendly (name, email, chosen time).
- Project data (files, access, information you share).
- Billing data (what we need to invoice; card and bank details are handled by our payment processor, not stored by us).
- Technical data (basic, non-identifying information your browser sends).
3. Why we use it, and our legal basis
To reply to your enquiry, schedule and hold calls, prepare quotes, deliver and support projects, raise invoices, and meet tax and legal duties. Under the DPDP Act we rely on your consent (given when you contact us or book a call) and on the need to perform our agreement with you. You can withdraw consent at any time.
4. Cookies and third-party tools
Our own site sets no advertising or tracking cookies. We load Google Fonts (to display the site) and Calendly (to book calls), which may process limited technical data under their own policies. We do not currently use analytics or advertising cookies.
5. Who we share it with
We do not sell your data. We share only with providers who help us run the business: Calendly (scheduling), our email provider, our payment processor (Razorpay, Stripe, or Wise), and government or regulators where the law requires.
6. Storing your data and transfers
Some tools may process data outside India. Where that happens we take reasonable steps to keep it protected and use providers with appropriate safeguards.
7. How long we keep it
Only as long as needed for the purpose, or as the law requires (for example tax records). After that we delete or anonymise it. If you withdraw consent and we have no legal reason to keep the data, we delete it.
8. Your rights (under the DPDP Act)
- ask for a summary of your data and how we use it;
- ask us to correct or complete it;
- ask us to erase data we no longer need;
- withdraw consent;
- nominate someone to act for you;
- raise a grievance with us and, if unresolved, complain to the Data Protection Board of India.
To use any of these, email hello@thecodalith.com and we will respond within 30 days.
9. Children
Our services are for businesses and adults. We do not knowingly collect data of anyone under 18.
10. Security
We use reasonable technical and organisational measures. No method is perfectly secure, but we work to keep your data safe and act quickly if anything goes wrong.
11. Grievance officer
Manas Goel. Email hello@thecodalith.com. Address WP-18-B, Pitampura, Delhi, 110034.
12. Changes
We may update this policy and will change the date at the top when we do.