Hire us →

Legal

Privacy Policy

1. Introduction

Welcome to Codebrit Digital (“Codebrit Digital”, “we”, “our”, or “us”).

We are committed to protecting the privacy and security of the personal information entrusted to us by our clients, website visitors, suppliers, and business partners. This Privacy Policy explains how we collect, use, store, disclose, and safeguard personal information when you visit our website, contact us, enquire about our services, or engage us to deliver digital solutions.

This Privacy Policy has been prepared in accordance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable privacy and data protection laws within the United States. Codebrit Digital is committed to handling personal information responsibly and in accordance with the legal requirements applicable to the jurisdictions in which we operate and provide our services.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

For the purposes of applicable data protection legislation, Codebrit Digital may act as either a Data Controller or a Data Processor, depending on the nature of the services being provided.

3. Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

Business Contact Information

  • Full name
  • Company name
  • Job title
  • Email address
  • Telephone number
  • Business address (where applicable)
  • Company website

    • Project Information

    Where you engage our services, we may receive information necessary to perform the agreed work, including:

  • Project requirements
  • Design assets
  • Images
  • Videos
  • Brand guidelines
  • Logos
  • Documents
  • Databases
  • Website content
  • Software files
  • API documentation
  • Development resources
  • User feedback

    • Technical Information

    When visiting our website we may automatically collect:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Referring pages
  • Website usage statistics
  • Cookie identifiers
  • Session information

    • Communications

    We maintain records of communications including:

  • Emails
  • Contact forms
  • Telephone conversations
  • Meeting notes
  • Project discussions
  • Support requests

    • 4. How We Collect Information

    Information may be collected when you:

  • Visit our website
  • Complete a contact form
  • Request a quotation
  • Book a consultation
  • Engage our services
  • Subscribe to updates
  • Contact us by telephone or email
  • Share project materials with us
  • Communicate throughout a project

    • We also collect certain technical information automatically through cookies and analytics technologies.

    5. How We Use Your Information

    We use personal information only where necessary for legitimate business purposes, including:

  • Responding to enquiries
  • Preparing quotations and proposals
  • Delivering contracted services
  • Managing projects
  • Providing customer support
  • Communicating project updates
  • Requesting required information
  • Improving our services
  • Maintaining website security
  • Preventing fraud or abuse
  • Complying with legal obligations
  • Maintaining business records
  • Sending service-related communications

    • Where you have provided consent, we may also send occasional marketing communications regarding our services. You may unsubscribe at any time.

    6. Legal Basis for Processing

    Where UK GDPR applies, we process personal information under one or more of the following lawful bases:

  • Performance of a contract
  • Legitimate business interests
  • Legal obligations
  • Consent (where required)

    • Our legitimate interests include operating our business, communicating with clients, improving our services, preventing fraud, and ensuring the security of our systems.

    7. Client Project Files and Assets

    To deliver our services, clients may provide project-related materials including:

  • Source code
  • Design files
  • Branding assets
  • Login credentials
  • API keys
  • Application files

    • These materials are stored securely using trusted cloud service providers, including Google Workspace, solely for the purpose of delivering the agreed services.

    Project materials are accessible only to authorised personnel or approved contractors directly involved in the project.

    Upon project completion and successful handover, clients are responsible for securely retaining copies of their deliverables.

    Unless otherwise agreed in writing or required by law, Codebrit Digital may permanently delete project files, credentials, backups, and related assets from its active systems approximately forty-five (45) working days after project completion or handover.

    8. Login Credentials

    Clients may provide usernames, passwords, API credentials, hosting access, cloud access, and other authentication information required to perform services.

    Such credentials are used solely for authorised project activities and are stored using appropriate security measures. Credentials may be removed from our systems once they are no longer required.

    9. Marketing Communications

    Where permitted by law, we may contact you regarding:

  • Requested services
  • Project updates
  • Business communications
  • Service announcements
  • Relevant company news

    • Marketing communications will only be sent where appropriate consent has been obtained or another lawful basis applies.

    You may opt out at any time by following the unsubscribe instructions or contacting us directly.

    10. Cookies and Similar Technologies

    Our website uses cookies and similar technologies to enhance functionality, improve website performance, analyse visitor behaviour, protect our services, and provide a better user experience.

    Cookies are small text files stored on your device when you visit our website. Some cookies are essential for the operation of the website, while others help us understand how visitors interact with our website and improve our services.

    We currently use technologies including:

    Essential Cookies

    These cookies are necessary for the operation, functionality, and security of our website. This may include services provided by:

  • Google reCAPTCHA
  • Cloudflare

    • These cookies cannot normally be disabled without affecting the operation or security of the website.

    Analytics Cookies

    With your consent where required, we use analytics technologies to understand how visitors use our website. These services may include:

  • Google Analytics 4
  • Google Search Console
  • Microsoft Clarity

    • Information collected may include IP address (which may be anonymised where applicable), browser type, device information, operating system, pages visited, time spent on pages, referring websites, and general interaction with our website. This information helps us improve website usability, content, security, and overall user experience.

    Where required by applicable law, non-essential cookies will only be placed after you have provided your consent through our cookie banner or preference centre. You may manage or withdraw your cookie preferences at any time through your browser settings or our Cookie Policy .

    11. Third-Party Services We Use

    To operate our business and deliver our services, we currently use trusted third-party providers, including but not limited to:

  • Google Workspace (email, cloud storage, and collaboration)
  • Google Analytics
  • Hosting providers
  • Domain registrars
  • Communication platforms
  • Cloud storage providers

    • These providers may process personal information on our behalf in accordance with their own privacy policies and applicable data protection laws. We take reasonable steps to ensure that providers handling personal information maintain appropriate security and privacy safeguards.

    12. International Data Transfers

    As part of our business operations, personal information may be processed or stored outside the United Kingdom.

    Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable data protection legislation.

    13. Data Security

    We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, or destruction. These measures include, where appropriate:

  • SSL/TLS encryption
  • Secure cloud infrastructure
  • Password protection
  • Restricted staff access
  • Multi-factor authentication where available
  • Regular software updates
  • Access controls
  • Secure backup procedures

    • While we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

    14. Data Retention

    We retain personal information only for as long as reasonably necessary. Typical retention periods include:

  • General enquiries: as reasonably required for business purposes.
  • Client communications: for the duration of the business relationship and any applicable legal retention requirements.
  • Project files and assets: may be retained for approximately 45 working days following project completion or handover before being securely deleted from our active systems, unless otherwise agreed or required by law.

    • Certain financial or contractual records may be retained for longer where required to comply with legal, tax, accounting, or regulatory obligations.

    15. Your Privacy Rights

    Depending on your location and applicable law, you may have the right to:

  • Request access to your personal information.
  • Request correction of inaccurate information.
  • Request deletion of personal information.
  • Request restriction of processing.
  • Object to certain processing activities.
  • Request transfer of your information where applicable.
  • Withdraw consent where processing relies on consent.
  • Lodge a complaint with the relevant supervisory authority.

    • United Kingdom residents may contact the Information Commissioner’s Office (ICO) if they believe their information has been processed unlawfully.

    16. Children’s Privacy

    Our services are intended for businesses and individuals aged 18 years or older.

    We do not knowingly collect personal information from children under the age of 13 (or any higher minimum age required by applicable law). If we become aware that such information has been collected unintentionally, we will take reasonable steps to delete it.

    17. Third-Party Websites

    Our website may contain links to external websites operated by third parties.

    We are not responsible for the privacy practices, content, or security of external websites. We encourage users to review the privacy policies of any third-party websites they visit.

    18. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technology. The latest version will always be published on our website with the updated revision date.

    19. Contact Us

    If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact: