Privacy Policy

CodePeople ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit https://codepeople.io or contact us via our website forms.

Please read this policy carefully. By using our website or submitting a contact form, you agree to the practices described below.

We collect the following categories of personal data:

• Contact Information: First name, last name, email address, phone number, and company name — provided when you submit a contact form.
• Communication Content: The content of your message and the service you are enquiring about.
• Technical Data: IP address, browser type, operating system, referring URL, and pages visited — collected automatically via Google Analytics.
• Cookie Data: Analytics cookies placed by Google Analytics (see Section 6).

We do not collect sensitive personal data (e.g., health information, financial data, or government IDs) through this website.

We use the data collected for the following purposes:

• To respond to your enquiries and provide the services you request.
• To send you information relevant to your enquiry (e.g., follow-up emails).
• To improve our website and understand how visitors interact with it (analytics).
• To comply with legal obligations.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible reason.

We process your personal data under the following legal bases (as applicable under GDPR and UK GDPR):

• Consent: When you tick the consent checkbox on our contact form, you explicitly consent to us processing your data to respond to your enquiry.
• Legitimate Interests: For website analytics, where we have a legitimate interest in understanding visitor behaviour to improve our site.
• Legal Obligation: Where processing is necessary to comply with applicable law.

We share your personal data with the following trusted third parties, each of whom processes data on our behalf:

• HubSpot, Inc.: Our CRM provider. Contact form submissions are forwarded to HubSpot to manage follow-up communications. HubSpot is GDPR-compliant. Their privacy policy is available at legal.hubspot.com/privacy-policy.
• Google LLC (Google Analytics): We use Google Analytics 4 to collect anonymous usage data. IP addresses are anonymised. Google's privacy policy is available at policies.google.com/privacy.
• Google Cloud Platform: Our website and database are hosted on GCP infrastructure within the EU.

We do not sell, trade, or otherwise transfer your personal data to third parties for marketing purposes.

Our website uses the following types of cookies:

• Analytics Cookies (Google Analytics 4): Our default Google Analytics setup collects the following anonymous data: the number of users, session statistics, approximate geolocation (country/city level), and browser and device information. IP addresses are anonymised and no personally identifiable information is stored. You can opt out via Google's opt-out tool.

A cookie consent notice is displayed on your first visit to this website. You may accept or decline analytics cookies at that point. You can also control cookies at any time through your browser settings. Please note that disabling certain cookies may affect website functionality.

We retain contact form submissions and associated personal data for a maximum of 3 years from the date of submission, unless a longer retention period is required by law or necessary to fulfil an ongoing business relationship.

Analytics data is retained in accordance with Google Analytics default retention settings (14 months).

Under GDPR/UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data ("right to be forgotten").
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Withdraw Consent: Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right to Object: Object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted database storage, HTTPS transmission, and access controls.

No method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect any changes. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: