Privacy policy, in plain English.

1Who we are

CodeMastery is a web design and development business run by Faysal, working remotely from Bangladesh for businesses in the UK.

For the purposes of data protection law (the UK GDPR and the Data Protection Act 2018), we are the "controller" of the personal information described in this policy. That simply means we decide how and why it is used.

You can reach us at [email protected].

2What we collect and why

We only collect information that we need. Here is what that looks like in practice.

You don't need to give us anything you're not comfortable sharing. Please don't send us passwords in a message or a screenshot. If we ever need access to something, we'll tell you how to share it safely.

3Our legal reasons

The law requires us to have a valid reason for using your information. Ours are:

• Replying to enquiries and free checks: legitimate interests (we need to respond to people who contact us, and you'd expect us to), and taking steps at your request before a contract.
• Doing work for you: to carry out a contract with you.
• Accounts and tax records: to meet our legal obligations.
• Keeping the website secure: legitimate interests.

4Who we share it with

We never sell your information, and we don't use it for advertising. We only share it where it's needed to run our business:

• Our email and hosting providers, who handle information on our behalf so that this website and our email work.
• A family member in the UK who helps us receive payments. They may see payment details such as the payer's name and the amount.
• Professional advisers, such as an accountant, where we need their help with our records.
• Authorities, if the law requires us to.

5Where it is processed

Because we work from Bangladesh, your information is accessed from outside the UK. The companies that provide our hosting and email may also store information in other countries.

We only use your information for the purposes in this policy, and we take care to keep it secure. If you have any concerns about this, please get in touch before sending us anything and we'll be happy to talk it through.

6How long we keep it

• Enquiries and free checks that don't lead to work: up to 12 months, and then we delete them.
• Client projects: for as long as the project and any ongoing support last.
• Invoices and accounting records: for as long as the law requires.

You can ask us to delete your information sooner at any time (see "Your rights" below).

7Cookies

This website doesn't use advertising or tracking cookies. It may use a small number of essential cookies that are needed for the site and its forms to work properly.

8Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong or out of date;
• ask us to delete your information;
• ask us to limit how we use your information;
• ask for your information in a format you can move elsewhere;
• object to us using your information based on our legitimate interests.

To use any of these rights, just email [email protected]. We may need to check it's really you, and we'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. We'd appreciate the chance to put things right first, so please contact us as well.

9Keeping it secure

We take sensible steps to protect your information, including using a secure (HTTPS) connection on this website, keeping our software up to date and limiting who can access it. No system is completely secure, but we take this seriously and we'll tell you if something goes wrong that affects you.

10Changes to this policy

If we change how we handle your information, we'll update this page and the date at the top. If a change is significant, we'll make that clear.