Privacy Policy
Last updated 1 July 2026
1. Who we are
Codrison is an AI-first software development agency operating as a fully remote organisation. This policy explains what personal data we collect through this website and in the course of client engagements, and how we handle it.
2. Data we collect
From this website we collect only what you submit: your name, work email, company, optional phone number and the content of your message. We also collect aggregate analytics about page visits, which does not identify you individually.
3. How we use it
Enquiry data is used to respond to your message and, where relevant, to prepare a proposal. We do not sell personal data, and we do not use enquiry data for unrelated marketing without your explicit consent.
4. Client data during engagements
Where an engagement requires access to personal data held by a client, we act as a data processor under a written data processing agreement. Processing is limited to the documented purpose, and we work inside the client's own cloud tenancy wherever technically possible.
5. Legal basis
We process enquiry data on the basis of legitimate interest in responding to business enquiries, and client data on the basis of the contract with the relevant controller. Where consent is the basis, it may be withdrawn at any time.
6. Retention
Enquiry data is retained for 24 months from last contact unless an engagement begins, in which case contractual retention terms apply. Analytics data is retained in aggregate form only.
7. Sub-processors
We use a small number of sub-processors for email, analytics and cloud hosting. A current list is available on request, and clients are notified before any material change.
8. Your rights
You may request access to, correction of, or deletion of personal data we hold about you, and you may object to processing. Requests are actioned within 30 days of verification.
9. Security
We apply least-privilege access, encryption in transit and at rest, mandatory multi-factor authentication and annual security review across all systems we operate.
10. Contact
Privacy questions and rights requests should be sent to contact@codrison.com. We respond within 24 business hours.
This policy is a template for review by your legal counsel before publication.