Privacy Policy

Who we are

Code23 is a trading name of Twenty & Three Ltd, a company registered in England and Wales (company number 14975230). Our registered office is Spaces, Arlington Business Park, Theale, Reading, Berkshire, RG7 4SA. We are the data controller for personal data collected through this website.

Questions about this policy or your data: email hello@code23.com.

What we collect and why

Enquiry form. When you contact us we collect your name, email address, and anything you choose to include: company name, phone number, service area, your message and any files you attach. We use this to respond to your enquiry and, where it leads to a working relationship, to manage that relationship. The lawful bases are your consent (given via the checkbox when you submit the form) and our legitimate interest in responding to business enquiries.

Technical data. Our hosting provider processes IP addresses and request data in server logs for security and to deliver the site. The lawful basis is legitimate interest in running a secure website.

Analytics. With your consent, given via the cookie banner, we use Google Analytics and PostHog to understand how the site is used: pages visited, how you arrived, and general usage patterns. These tools set cookies on your device only after you accept. The lawful basis is your consent, which you can withdraw at any time using the "Cookie settings" link in the footer. If you decline, no analytics cookies are set. We don't use advertising trackers.

Who processes your data

We use a small number of service providers to run this site:

• Cloudflare hosts the website and provides security and content delivery.
• Resend delivers enquiry-form submissions to us by email, processed in the EU.
• Google Analytics provides usage analytics, with your consent.
• PostHog provides product analytics, hosted in the EU, with your consent.
• Google Fonts supplies the typefaces on this site; your browser requests font files from Google's servers, which involves disclosure of your IP address to Google.

Where processing happens outside the UK, it is covered by UK-approved safeguards such as the UK Addendum to Standard Contractual Clauses or adequacy regulations.

How long we keep it

Enquiry correspondence is kept for as long as needed to handle the enquiry and any resulting business relationship, and afterwards as part of our business records for up to six years, in line with UK limitation periods. Server logs are retained for short periods by our hosting provider.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time, where consent is the basis.

To exercise any of these, email hello@code23.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Changes

We'll update this policy when our practices change and revise the date at the top of this page.