Privacy Policy.

Codlinx Studio Ltd ("Codlinx", "we", "us") is a private company registered in England & Wales. Our registered address is on file with Companies House. For any privacy enquiry, write to privacy@codlinx.com.

We collect only what we need to run our business:

• Contact info you give us — name, email, company, role, and the content of your enquiry, when you fill out the contact form or email us.
• Account info — email and authentication data, when you sign in to a client portal.
• Technical telemetry — IP address, browser, device, and pages viewed, via privacy-respecting analytics.

We do not knowingly collect data from children under 16. If you believe we have, contact us and we will delete it.

• To reply to your enquiry and run the engagement.
• To send transactional emails and invoices.
• To understand which pages are useful (aggregated analytics — not individual tracking).
• To meet legal and tax obligations.

We do not sell your personal data. We do not use it to train AI models.

We rely on the following lawful bases under UK GDPR / EU GDPR:

• Legitimate interest — for replying to enquiries and running our business.
• Contract — for delivering engagements.
• Consent — for any optional marketing emails or non-essential cookies.
• Legal obligation — for tax, accounting, and regulatory compliance.

We share data only with sub-processors that help us run the business: cloud hosting (AWS / Vercel), email delivery, CRM, accounting, and analytics. Each is bound by a data processing agreement. A current list is available on request.

We use a small number of cookies. Essential cookies are needed for the site to function. Analytics cookies are loaded only with your consent and are aggregated, never used to identify individuals.

You can ask us to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Delete it (subject to legal retention).
• Stop processing it for marketing.
• Export it in a portable format.

Write to privacy@codlinx.com. We respond within 30 days. You also have the right to complain to the ICO (ico.org.uk).

We keep contact-form submissions for up to 24 months. Client records for as long as the engagement is active, plus 7 years after for tax. Analytics data is aggregated and not retained at the individual level.

Some of our sub-processors are based outside the UK/EU. We rely on UK IDTA / EU SCCs and adequacy decisions where applicable.

We may update this policy from time to time. Material changes will be communicated by email to existing clients. The "Last updated" date at the top reflects the most recent revision.