Privacy Policy

CodEva Technologies Ltd is the data controller for personal data collected through this website. CodEva is a UK software engineering consultancy. It is registered in England and Wales.

• Company number: 16444839
• Registered office: 86-90 Paul Street, London EC2A 4NE, England
• VAT number: 498112764
• Website: www.codevatech.com
• Privacy contact: privacy@codevatech.com
• General contact: contact@codevatech.com

Privacy requests should be sent to the privacy address above. This notice does not name a data protection officer. Whether one must be appointed is a decision for legal review.

This notice explains how CodEva handles personal data collected through this website. It covers the enquiry form, later correspondence about an enquiry, and the technical data involved in hosting the site and measuring its use.

It does not describe a client contract, a support portal, or an online account. Those arrangements, when they exist, are agreed separately. CodEva does not sell goods, subscriptions, or software through this website.

Visitors can submit an enquiry through the form on the contact page. The website checks the submission on its server and transmits it with Resend to CodEva’s business email inbox at info@codevatech.com. CodEva uses the information to review the enquiry and reply. The website does not store enquiry submissions in a separate application database, and it does not send an automatic confirmation email to the visitor.

The form collects:

• Full name
• Email address
• Company, if provided
• Role, if provided
• The services selected, if any
• The message describing the enquiry

CodEva may then keep the correspondence that follows, including replies by email. Please do not include special-category data, such as health information, in an enquiry. The form does not ask for it.

CodEva uses an enquiry to:

• Read and reply to the enquiry
• Decide whether CodEva can undertake the work
• Keep a record of the conversation
• Meet a legal duty where one applies to that record

The expected lawful bases under UK GDPR are steps taken at the request of the enquirer before a possible contract, and CodEva’s legitimate interest in responding to a business enquiry that the person chose to send. Where a record must be kept by law, the basis is legal obligation.

A written legitimate-interests assessment has not yet been completed. That assessment, and confirmation of these bases, is required before public launch.

This website is hosted by Vercel. Delivering the site may involve technical data such as an IP address, the browser, and the pages requested. CodEva uses that information only so the site can be served and protected. The period for which Vercel keeps server logs has not been confirmed for this draft.

On a production build, the site loads Vercel Web Analytics. That tool records a page view. In the copy of the analytics package used by this website, the script does not set a cookie and does not use the browser’s local or session storage. A check of the current review site found no cookie and no stored data after a page view. The exact fields Vercel stores, and how long it keeps them, still need to be confirmed from Vercel’s current terms before launch.

CodEva has not installed Google Analytics, Meta Pixel, advertising tags, or any other third-party analytics script. Fonts are served from this website, not from a Google font request in the browser.

CodEva has not listed Vercel’s subprocessors in this notice and has not recorded a data-processing agreement or a transfer safeguard here. Those documents need to be checked before launch.

Fixed retention periods have not been set.

Once enquiries are received, CodEva’s intention is to keep each enquiry and the correspondence that follows only for as long as it is needed to deal with the enquiry, any resulting work, or a legal duty. The number of months or years has not been decided. It will be added to this notice before the public launch.

Analytics and hosting-log retention also remain to be confirmed with the provider.

CodEva is established in the United Kingdom and may correspond with people in other countries. The current hosting project is configured in a United States region. Where personal data is processed outside the UK, UK GDPR requires an appropriate safeguard. The safeguard CodEva will rely on for Vercel, or for email, has not yet been confirmed in this draft. No adequacy decision, standard contractual clause, or other mechanism is stated here until that confirmation exists.

Under UK data protection law, you can ask CodEva to:

• Confirm whether it holds personal data about you, and for a copy of it
• Correct inaccurate data
• Delete data, in the circumstances where the right applies
• Restrict or object to certain processing, including processing based on legitimate interests
• Receive data you provided, in a portable form, where the right applies

The form is not based on consent. If CodEva later relies on consent for any processing, you will be able to withdraw that consent. Withdrawal does not affect processing that has already taken place lawfully.

These rights are not absolute. CodEva may need to keep certain information where the law requires it, or where a request cannot be met for a reason the law allows.

Write to privacy@codevatech.com. Please say which right you want to use and how CodEva can identify the relevant enquiry. CodEva may need enough detail to find the record and to be satisfied about the identity of the requester.

CodEva aims to respond within one month. That period can be extended where the law allows, and CodEva will explain the extension if it uses one.

You can complain to the UK Information Commissioner’s Office. The ICO’s complaint information is at ico.org.uk/make-a-complaint. CodEva would prefer to hear from you first, so that it can try to resolve the concern.

CodEva uses measures appropriate to the nature of the enquiry data. This notice does not claim a certification, an audit result, or a particular security standard. No such certification is stated because none has been provided for publication.

CodEva will update this page when its practices change, including when retention periods are set, and when the transfer safeguard is confirmed. The draft date at the top of the page will be replaced with the date of the reviewed version.