How we handle personal information.

Who is responsible

CodeCrafted Ltd is the controller for personal information used to provide CodeCrafted Design. CodeCrafted Ltd is registered in England and Wales under company number 17265819. Its registered office is 66 Paul Street, London, EC2A 4NA, United Kingdom. Contact privacy@codecrafted.co.uk.

Information we handle

We handle account name and email address; password and email-verification records; API-key and OAuth connection metadata; design briefs, projects, decisions and implementation reviews submitted through the service; optional product feedback; support correspondence; and security records such as request time, IP address and user agent where recorded by infrastructure logs.

Optional product measurement does not record IP addresses, user agents, prompts, tool arguments, design inputs or response bodies. It records the operation name, outcome, authentication channel, a coarse duration band and a keyed pseudonymous account identifier.

If you allow website analytics through the consent controls, Google Analytics measures visits, page views, referrers, interactions, browser and device information, language and approximate location. Secure Privacy provides those consent controls and records your preference.

Why we use it

We use account, project and authentication information to create and perform the service contract with you. We use proportionate security and reliability records for our legitimate interests in protecting accounts, preventing abuse and maintaining the service. We use optional product measurement and case-study contact permission only when you enable or provide them. We use optional Google Analytics information in line with your consent choice to understand website use and improve its content and performance. We may also process information to meet legal obligations or establish, exercise or defend legal claims.

Where information comes from

Most information comes directly from you or an agent acting with your credential. Infrastructure suppliers may generate security and delivery records when a request reaches the service. Do not submit credentials, special-category information or personal information that is not necessary for a design decision.

Service suppliers

CodeCrafted uses IONOS for server infrastructure, Cloudflare for DNS, traffic delivery and edge security, Laravel Forge for server deployment operations, Secure Privacy for consent management, Google Analytics for optional website analytics, and Google Workspace for service and support email. Those suppliers receive only the information needed for their function. We may disclose information where required by law, to protect legal rights, or during a properly controlled corporate transaction.

International transfers

Some suppliers may process limited information outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we use an applicable adequacy regulation or contractual safeguard and assess supplementary measures where appropriate. Contact us for information about the safeguard relevant to your data.

How long we keep it

• Accounts and saved design projects: while the account is open, then normally deleted within 30 days of a verified closure request.
• Revoked credential metadata: up to 30 days, excluding security records needed for an active incident.
• Optional product-measurement events: 90 days.
• Product feedback: until you delete it or withdraw it, and otherwise up to 12 months from submission.
• Routine application and security logs: normally 90 days; relevant records may be isolated for longer while investigating an incident or legal claim.
• Support correspondence: normally 24 months after the conversation closes.
• Backup copies: removed through the backup rotation, normally within 35 days after deletion from the live service.

Your choices and rights

You can disable product measurement and delete product feedback from the dashboard. You can reject optional website analytics or change your choice through the Secure Privacy controls without losing access to the service. Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or to object to processing. You may withdraw consent without affecting earlier lawful processing. Email privacy@codecrafted.co.uk; we may need to verify your identity.

You can complain to the Information Commissioner's Office. We would appreciate the opportunity to address the concern first.

Automated decisions and children

We do not use personal information to make decisions producing legal or similarly significant effects. The service is for adults acting in a business or professional capacity and is not directed to children.

Changes

We will update the effective date and explain material changes on this page. Where appropriate, account holders will also receive notice by email or in the dashboard.