Privacy Policy

ClubCode Technology Pvt. Ltd. (“ClubCode Technology,” “we,” “us,” or “our”) provides Zoho consulting and implementation, Salesforce services, ERPNext solutions, business-process automation, system integrations, and related technology services (the “Services”). This Privacy Policy explains what information we collect through our website, applications, and integrations, why we collect it, how long we keep it, and the choices available to you.

This policy applies to:

• Our website — clubcodetechnology.com and its subdomains
• Client portals or applications we operate for you
• Third-party integrations and OAuth connections (for example, Google, Zoho, Salesforce) used to deliver our Services
• Payment processing carried out through third-party payment providers

1. Information We Collect

1.1 Information you provide directly

• Contact details submitted through forms on our website (name, company, email, phone number, country)
• Information shared when you request a consultation, demo, or quote
• Information you provide when communicating with us by email, phone, or chat
• Login credentials you create for any client portal we operate, where applicable

1.2 Information collected automatically

When you visit our website, we automatically collect limited technical information, including:

• IP address and approximate location
• Browser type, device type, and operating system
• Pages visited, referring URLs, and time spent on the site
• Cookies and similar tracking technologies (see Section 6)

1.3 Information collected through Google OAuth and other integrations

Where our Services involve connecting to a third-party platform on your behalf (for example, authenticating with Google, Zoho, or Salesforce to configure or migrate your systems), we request access through that platform’s official OAuth authorization flow. Depending on the integration and the scopes you approve, this may include:

• Your name and account email address associated with the connected platform
• Access tokens and refresh tokens required to perform the specific integration task you have authorized
• Metadata needed to complete the configuration, migration, or automation task (for example, module names, field structures, or record counts) — not the underlying business or personal data stored in your systems, unless a specific project scope requires it and is agreed with you separately in writing

Purpose: OAuth access is requested solely to perform the implementation, integration, migration, or support service you have engaged us for. We do not use OAuth-derived data for advertising, resale, or any purpose unrelated to delivering the agreed Service.

Retention: Access tokens and OAuth credentials are retained only for as long as the related integration or engagement is active. When an engagement ends or you disconnect the integration, we revoke and delete the associated tokens and credentials from our systems within a reasonable period, consistent with our data deletion procedures (Section 7). We do not retain third-party login credentials indefinitely, and we never store your platform password itself — OAuth is designed specifically so that we never see or hold it.

Sharing: OAuth-derived data is not shared with third parties except: (a) sub-processors strictly necessary to deliver the Service (for example, secure hosting infrastructure), under confidentiality obligations; (b) where required by law; or (c) with your explicit consent.

1.4 Payment information

ClubCode Technology does not collect, process, or store your payment card details or bank credentials directly. All payments are handled by PCI-DSS-compliant third-party payment processors. When you make a payment, your payment details are transmitted directly to the processor under its own privacy policy and security controls. We receive only confirmation of payment status (for example, success/failure and an invoice or transaction reference) for our accounting records.

2. How We Use Your Information

We use the information described above to:

• Respond to enquiries and provide quotes or proposals
• Deliver, configure, and support the Zoho, Salesforce, ERP, or integration Services you have engaged us for
• Communicate with you about your project, support requests, or account
• Send you relevant updates about our Services, where you have consented to receive them
• Maintain the security, integrity, and performance of our website and systems
• Comply with legal, tax, and regulatory obligations
• Improve our website and Services based on aggregated, non-identifying usage patterns

We do not sell your personal information.

3. Legal Basis for Processing 

Where data protection law requires a legal basis (such as under the UK GDPR or EU GDPR), we rely on one or more of the following:

• Consent — for example, marketing communications or non-essential cookies
• Contract performance — to deliver the Services you have engaged us for
• Legitimate interests — to operate, secure, and improve our website and Services, provided this does not override your rights
• Legal obligation — to meet tax, accounting, or regulatory requirements

4. Sharing and Disclosure

We do not sell or rent your personal information. We may share information only with:

• Service providers and sub-processors who support our hosting, email delivery, analytics, or customer relationship management, under contractual confidentiality and data-protection obligations
• Third-party platforms you authorize us to connect to (for example, Google, Zoho, Salesforce), solely to the extent required to perform the authorized integration task
• Payment processors, to process transactions
• Legal or regulatory authorities, where required by law, court order, or to protect our legal rights
• A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections

5. Data Retention

We retain personal information only for as long as necessary to:

• Fulfil the purpose for which it was collected
• Meet legal, tax, or regulatory retention requirements
• Resolve disputes and enforce our agreements

OAuth tokens and third-party integration credentials are deleted when the related integration is disconnected or the engagement ends, as described in Section 1.3. Enquiry and contact form data not converted into an active engagement is retained for a limited period and then deleted or anonymized.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Enable core website functionality
• Understand how visitors use our site (analytics)
• Remember your preferences

You can control or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.
 

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing
• Withdraw consent in writing
• Request a copy of your data in a portable format

  To exercise any of these rights, contact us at info@clubcodetechnology.com. We will respond within the timeframe required by applicable law.

8. International Data Transfers

As we serve clients in India, the UK, the US, and other regions, information may be processed in countries other than your own. Where we transfer personal information internationally, we take reasonable steps to ensure it receives an adequate level of protection, consistent with applicable data protection law (for example, using standard contractual clauses where required for UK/EU personal data).

9. Data Security

We implement reasonable technical and organizational measures — including access controls, encryption in transit, and restricted credential handling — to protect personal information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates when it was last revised. Material changes will be reflected on this page.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

ClubCode Technology Pvt. Ltd. Email: info@clubcodetechnology.com