Contents
1. Who we are
Codecraft Innovations W.L.L. ("Codecraft", "we", "us", "our") is a Bahrain-registered company (Company No. 179283), headquartered at Building 1079, Road 5525, Bloc 555, Area Budaiya, Kingdom of Bahrain. We operate this website (codecraftbase.com), the products described on it (Leadwave, Productcast, AI-Tel.Bahrain), and provide custom software, automation, and data engineering services to businesses across the GCC and India.
For the purposes of Bahrain's Personal Data Protection Law (Law No. 30 of 2018, "PDPL"), Codecraft is the data manager (data controller) for the personal data described in this policy.
2. Scope of this policy
This policy covers codecraftbase.com and everything hosted under it, including /leadwave, /product-cast/, and /ai-tel.bahrain/ (English and Arabic versions). It does not cover third-party sites we link to, or products we ship on their own domains - see section 14 for EVRST Invoice.
3. Data we collect
Most of what we hold about you is what you give us directly through the contact and demo-request forms on this site. We also run Microsoft Clarity, a behavioral analytics tool, across this site to understand how visitors use it; see section 7 and section 10 for what that collects.
| Field | Where it's collected | Required? |
|---|---|---|
| Full name | All forms (homepage, Leadwave, Productcast, AI-Tel.Bahrain) | Yes |
| Company / store name | All forms | Yes |
| Email address | All forms | Yes, unless a mobile number is given instead |
| Mobile / phone number | All forms | Yes, unless an email is given instead |
| Project type, channel of interest, or target volume | All forms (a dropdown selection) | Yes |
| Free-text project description | All forms | No, optional |
We do not knowingly collect payment card data, national ID numbers, or other sensitive personal data through this website.
4. How we collect it
Every field above is typed directly into a form by you and submitted voluntarily. We do not buy, scrape, or otherwise acquire personal data about you from third parties for marketing purposes.
5. Why we process it
We process the data you submit on the basis of:
- Your consent, given by completing and submitting a form; and
- Our legitimate interest in responding to business inquiries and operating a B2B sales process, which we've weighed against your privacy interests and consider proportionate for a form you chose to submit.
Where we go on to provide contracted services, processing is also necessary for the performance of that contract.
6. How we use it
- To respond to your inquiry and follow up (by email, phone, or WhatsApp, per your submission);
- To schedule and run demos, pilots, or discovery calls you request;
- To prepare quotes, proposals, and, where a relationship proceeds, to deliver contracted services;
- To maintain records of our business correspondence.
We do not use the data you submit for automated decision-making that produces legal or similarly significant effects on you.
7. Who we share it with
We use a small number of processors to run this site and handle form submissions. We do not sell personal data, and we do not share it with third parties for their own marketing use.
| Processor | Purpose | What they see |
|---|---|---|
| Google (Google Apps Script / Google Sheets) | Receiving and storing form submissions from every form on this site | Every field you submit on that form |
| Microsoft Clarity | Behavioral analytics: session recordings, click and scroll heatmaps, and aggregate usage patterns across every page of this site | Pages visited, clicks, scroll and mouse movement, approximate location, device and browser type, and IP address. Clarity is configured to mask sensitive form-field input by default |
| Google Fonts | Loading web fonts (Inter, JetBrains Mono) | Your IP address and browser details, per Google's own font-serving infrastructure |
| Cloudflare | Content delivery, DNS, and edge security for this site | Standard connection metadata (IP address, request headers) for every visitor, not just form submitters |
We may also disclose personal data where required by Bahraini law, court order, or a lawful request from a competent authority.
8. International transfers
Google's and Microsoft's infrastructure may process and store your data outside Bahrain, including in jurisdictions with different data protection standards. Cloudflare operates a global edge network for similar technical reasons. Where the PDPL requires it, we rely on each processor's own contractual and technical safeguards for cross-border transfer; we have not independently certified these arrangements and recommend legal review of our processor agreements as part of finalizing this policy.
9. How long we keep it
We keep form submissions and related correspondence for as long as reasonably necessary to manage the business relationship, respond to your inquiry, and meet our own record-keeping and legal obligations. If no relationship develops, we aim to keep inquiry records for no longer than is useful for that purpose, and will delete or anonymize data on request as described in section 11.
10. Cookies and local storage
This site does not use advertising cookies or third-party ad trackers. It does use Microsoft Clarity, a behavioral analytics tool, which sets its own cookies to recognize repeat visits and tie together a session's clicks, scrolls, and page views. Clarity does not link this data to your name or contact details unless you separately submitted them through a form. The AI-Tel.Bahrain product page also uses your browser's localStorage (not a cookie) to remember whether you last viewed the page in English or Arabic; that preference stays on your device and is never sent to us.
11. Your rights under Bahrain's PDPL
Under Bahrain's Personal Data Protection Law, you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Erase your data, subject to any legal obligation we have to keep it;
- Restrict or object to certain processing;
- Withdraw consent at any time, without affecting processing carried out before withdrawal;
- Lodge a complaint with Bahrain's Personal Data Protection Authority (PDPA) if you believe we have mishandled your data.
To exercise any of these rights, contact us using the details in section 16. We'll respond within a reasonable time and in line with PDPL requirements.
12. Security
This site is served entirely over HTTPS. Form submissions are transmitted over encrypted connections to our processors. We restrict access to submitted data to the people at Codecraft who need it to respond to your inquiry. No system is completely secure, and we cannot guarantee absolute security of data transmitted to us.
13. Children's privacy
This site is a B2B destination aimed at business decision-makers. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, contact us and we will delete it.
14. EVRST Invoice
EVRST Invoice is a Codecraft in-house product sold and operated on its own domain, evrst.me. Its offline-first design means invoicing data is stored locally on a customer's own hardware, not on Codecraft's servers. Data handling for EVRST Invoice is governed by the privacy policy published on evrst.me, not by this document.
15. Changes to this policy
We may update this policy as our processing activities, processors, or legal obligations change. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be reflected here before they take effect.
16. Contact us
For any question about this policy or to exercise your PDPL rights, contact:
Codecraft Innovations W.L.L.
Building 1079, Road 5525, Bloc 555, Area Budaiya, Kingdom of Bahrain
Email: [email protected]
Phone: +973 3462 5678