Who we are
The Code To is the controller of personal information collected through this website and through our early conversations with prospective clients. This means we decide why and how that information is used.
Data Protection Officer
Questions about this policy, how we use your information or a request to exercise your rights can be sent to our Data Protection Officer through the contact form.
Contact the Data Protection Officer →What we collect
We collect information that you choose to provide when you contact us, discuss a potential project or work with us.
- Contact details: your name, work email address, company and role.
- Enquiry details: the mobile platforms involved and information you provide about a codebase, delivery problem or proposed project.
- Correspondence: messages, meeting notes and records of decisions connected with an enquiry or client relationship.
- Technical information: basic device, browser, request and security information that may be processed by our hosting provider when the website is delivered.
We do not ask you to submit source code, credentials, production data or sensitive personal information through the website form. If a project needs access to technical material, we agree an appropriate secure process separately.
How and why we use it
- To respond to enquiries, understand a proposed piece of work and take steps at your request before entering into a contract.
- To plan, deliver and administer agreed services and communicate with client teams.
- To operate, protect and improve the website and our enquiry process where this supports our legitimate business interests and does not override your rights.
- To keep records required for legal, accounting, security or dispute-resolution purposes.
Lawful bases
Depending on the context, we rely on steps taken before a contract, performance of a contract, our legitimate interests in running and protecting the business, compliance with a legal obligation, or consent where we specifically ask for it. You may withdraw consent at any time where consent is the basis used.
We do not use information submitted through this website for solely automated decisions that produce legal or similarly significant effects.
Retention and security
We keep enquiry information only for as long as it is useful for the conversation, normally no longer than 24 months after the last meaningful contact. Information connected with an active or completed client project may be kept for longer where needed to deliver the agreement, maintain appropriate business records, meet legal or tax requirements, or establish and defend legal claims.
We use proportionate organisational and technical measures designed to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. No online service can promise absolute security, so please do not place confidential code or credentials in the contact form.
Cookies and similar technology
Our website does not use advertising or behavioural-tracking cookies in its own code. Our hosting and security providers may use strictly necessary technology to deliver and protect the service.
Your data protection rights
Depending on the circumstances and the lawful basis used, you may have the right to:
- be informed about how your information is used;
- ask for access to your personal information and receive a copy;
- ask us to correct incomplete or inaccurate information;
- ask us to erase information in certain circumstances;
- ask us to restrict how information is used in certain circumstances;
- receive information you provided in a portable format where the right applies;
- withdraw consent at any time where processing relies on consent; and
- complain to the Information Commissioner’s Office.
Your right to object
You may object to processing based on our legitimate interests in certain circumstances. You may also object at any time to the use of your personal information for direct marketing. We do not currently use website enquiry information for direct marketing.
These rights are not absolute and the law may allow or require us to continue processing in some situations. We may need to confirm your identity before completing a request. We will explain our response and normally respond within one month.
Questions, requests and complaints
Contact our Data Protection Officer through the form below. “Other” will be selected so your message is routed as a general or privacy enquiry.
Contact the Data Protection OfficerIf you are unhappy with how we have used your information, you can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would welcome the opportunity to address your concern first.
Changes to this policy
We review this policy when our services or use of personal information changes. The date at the top shows when it was last updated.