Controller and scope
CodeFusion will act as the controller for personal data submitted through this website. Full registered business details and a verified privacy contact method must be inserted before launch.
This policy is intended to cover the public website, the project-enquiry form and any measurement or advertising services activated with appropriate consent.
Data collected through the enquiry form
The form requires a full name, email address, selected service, project description and acceptance of this policy. A phone number and company name are optional.
Do not include passwords, payment-card details, health information or other sensitive personal data in the project description.
Purpose and legal basis
Enquiry data is intended to be used to review the request, reply, clarify requirements, prepare a proposal and maintain necessary records of the conversation.
The applicable legal bases — including steps requested before entering a contract, legitimate interests or consent where required — must be confirmed against the final operating setup and applicable law before launch.
Recipients, processors and international transfers
Data may be processed by providers required to host the website, deliver form messages, protect the service and, where enabled with consent, measure website activity or advertising performance.
The final policy must identify the actual providers, processing locations, safeguards and any international transfers after the production stack has been selected.
Retention and security
Personal data should be kept only for as long as needed for the enquiry, a potential engagement, legal obligations or the resolution of disputes. Exact retention periods must be defined before launch.
Reasonable technical and organisational safeguards will be applied, but no online transmission or storage method can be represented as completely risk-free.
Your rights
Depending on the applicable law, you may have rights to request access, correction, deletion, restriction, objection, data portability or withdrawal of consent, and to complain to the competent supervisory authority.
A verified channel for privacy requests and the identity of the competent authority must be added before this policy is published.
Analytics and advertising
Google Analytics 4, Google Ads conversion tracking and Meta Pixel may be used only after the final implementation and consent rules are confirmed. Optional analytics and marketing technologies should remain blocked until the required consent is given.
Names, email addresses, phone numbers and project descriptions must not be sent as analytics or advertising event data.