Privacy Notice
About this document: This document reflects the current operation of Code Consulting Studio and its website. CCS actively develops its services and technology, so this information may be updated when our functionality, providers, business arrangements or applicable legal requirements change.
Who we are
Code Consulting Studio ("CCS", "we", "us") operates this website and provides software development, digital growth and mentoring services. For personal information collected directly through this website, the operator of CCS is responsible for determining how and why that information is used. Current contact details are available on the Contact page.
Where CCS processes personal information on behalf of a client as part of a contracted service, CCS may act as a processor rather than a controller. Those responsibilities are dealt with separately in the relevant client agreement and, where required, a data processing agreement.
What information we collect
We aim to collect only information that is reasonably necessary to understand your request, communicate with you and provide the services you ask us about.
| Context | Information we may collect | Purpose |
|---|---|---|
| Project enquiry | Name, email address, optional company, project stage, type of support required, optional budget range and your message | To understand your project, assess how we may be able to help and respond to your enquiry |
| Growth enquiry | Name, email address, optional company, areas of interest, preferred type of engagement and your message | To understand your marketing or growth requirements and discuss suitable services |
| Mentoring enquiry | Name, email address, learning area, experience level, goals and, where appropriate for a learner under 18, parent or guardian contact details | To understand learning needs, arrange suitable mentoring and involve a parent or guardian where appropriate |
| General contact | Contact details and any information you choose to include in your message | To respond to your question or request |
Please do not submit passwords, payment card details, health information or other sensitive personal information through our general public forms unless we specifically ask for particular information through an appropriate channel. Sending an enquiry does not automatically subscribe you to marketing communications.
How we use your information
- Respond to enquiries and communicate with you
- Understand your requirements and discuss suitable services
- Take steps requested by you before entering into an agreement
- Provide and administer services where an agreement is in place
- Maintain appropriate operational, accounting and security records
- Protect the website, our systems and our legitimate business interests
- Improve our website and services where we have an appropriate legal basis to do so
- Comply with applicable legal and regulatory obligations
Legal bases for processing
We process personal information only where we have an appropriate legal basis. The basis depends on why the information is being used.
| Purpose | Typical legal basis |
|---|---|
| Responding to enquiries and discussing potential work | Taking steps at your request before entering into a contract and, where appropriate, our legitimate interests in responding to genuine enquiries |
| Providing an agreed service | Performance of a contract or taking steps connected with that contract |
| Business, security and fraud-prevention records | Our legitimate interests in operating and protecting CCS, provided those interests are not overridden by your rights |
| Accounting, tax and other mandatory records | Compliance with a legal obligation |
| Optional analytics technologies | Consent where consent is required |
| Optional marketing communications | Consent or another lawful basis permitted by applicable data protection and electronic communications law |
Our handling of personal information is intended to comply with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018. Rules relating to cookies and similar technologies are also governed by the Privacy and Electronic Communications Regulations (PECR). Where another data protection regime applies to a particular person or service, we aim to comply with the obligations that apply in that context.
Analytics and cookies
We use Google Analytics 4 only where the relevant analytics preference permits it. Optional analytics technologies are not intended to be activated before the required consent has been given. Rejecting optional analytics does not prevent normal use of the website. You can change your choice through "Manage preferences". More information is available in our Cookie & Storage Policy.
Who we may share information with
We may use trusted service providers to operate our website and deliver our services, including hosting, infrastructure, email and analytics providers. Where a provider processes personal information on our behalf, we aim to provide only the information necessary for the relevant purpose and to use appropriate contractual and security safeguards.
We may also disclose information where required by law, to professional advisers where reasonably necessary, or where necessary to establish, exercise or defend legal rights. We do not sell personal information.
International data transfers
Some technology or service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we aim to use a transfer mechanism and safeguards required by applicable data protection law. The exact arrangements depend on the provider and service in use at the relevant time.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable contractual, accounting, tax, security or legal requirements. Enquiries that do not lead to an ongoing relationship are retained only for an appropriate period to allow us to respond and manage reasonable follow-up. Records connected with an actual service or client relationship may need to be retained for longer.
Where no fixed retention period is stated, we consider the purpose of the information, whether it remains necessary, the sensitivity of the information and any legal or contractual record-keeping requirements.
Children and mentoring
Some mentoring enquiries may relate to learners under 18. Where appropriate, CCS may require the involvement and contact details of a parent or guardian before arranging a service. We aim to collect only the information necessary for the enquiry, communication and safe delivery of the mentoring service.
Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No website or internet transmission can be guaranteed to be completely secure, so please avoid sending sensitive information through general contact forms unless specifically requested.
Your data protection rights
Depending on the circumstances and the legal basis used, you may have rights including:
- Access to personal information we hold about you
- Correction of inaccurate or incomplete information
- Deletion of personal information in circumstances where the right to erasure applies
- Restriction of processing in circumstances where that right applies
- Objection to certain processing, including processing based on legitimate interests
- Data portability where the relevant legal conditions are met
- Withdrawal of consent at any time where processing relies on consent
These rights are not absolute and do not all apply in every situation. Withdrawing consent does not affect processing that was lawful before consent was withdrawn.
Your right to object
Where we rely on legitimate interests to process your personal information, you may have the right to object to that processing. If you object, we will consider your circumstances and whether there are compelling legitimate grounds for the processing to continue.
Complaints
If you are concerned about how we handle your personal information, please contact us first so that we can review the issue. You also have the right to raise a complaint with the UK Information Commissioner's Office (ICO) where UK data protection law applies.
Automated decision-making
We do not currently use information submitted through the public CCS enquiry forms to make solely automated decisions that produce legal or similarly significant effects about you.
Changes to this notice
We may update this Privacy Notice when our services, technology, providers, processing activities or legal obligations change. The latest version will be published on this page with an updated date and version number.
Contact
If you have questions about this Privacy Notice, want to exercise a data protection right or have concerns about how your information is handled, please contact Code Consulting Studio using the details provided on the Contact page.