Privacy notice

Who we are

PROPCODE.TECH LTD is the data controller for the personal data described here. We are a company registered in England & Wales, company number 17354837. Our registered office address is given in our terms of use.

For anything about this notice or about your personal data, email [email protected].

What this site does not do

This is a small informational site. It sets no cookies and uses no local storage. There is no tracking pixel, no advertising tag, no chat widget and no embedded third-party content. Fonts and images are served from our own domain. There are no forms, so there is nothing on this site for you to fill in and submit. See our cookies page.

We do use analytics, configured so that nothing is stored on your device and no profile of you is built. It is described below.

If that changes, for example if we add a contact form, we will update this notice, and the cookies page, before the change goes live.

What we handle, and when

Server request logs

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare records standard request data when a page is served: your IP address, your browser user agent, the URL requested, the referring URL and a timestamp. An IP address can be personal data, so we treat it as such. This happens automatically for every visitor. We do not use it to build a profile of you, and we do not try to identify individual visitors from it.

Which pages get read

We record that a page was viewed, and that certain links were clicked, such as the one that takes you to book a call. Our analytics provider, PostHog, receives that event along with your IP address and browser user agent. We have configured it to store nothing on your device, to build no profile, and to record no session replay, so we can count what happens on the site without being able to attribute it to you or recognise you on a later visit.

Email you send us

If you email us, we handle whatever you put in the message, typically your name, your email address, your employer and what you want to talk about, so that we can reply.

Meetings you book

The meeting link on our contact page takes you to Calendly. If you choose to book there, you give your details to Calendly, and we then receive the booking: usually your name, email address, the time you picked and anything you added in the booking notes.

We do not knowingly collect data about children, and we do not ask for or want special category data (health, beliefs, biometrics and the like). Nothing here involves automated decision-making or profiling.

Why, and our lawful basis

Server request logs

To deliver the site, keep it available, and protect it against attack and abuse. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): our interest in running a secure, working website. We have considered the impact on you: the data is standard technical data, it is not used to target you or build a profile, and it is held briefly.

Analytics

To understand which pages are useful and whether people find their way to contacting us, so we can improve the site. Our lawful basis is legitimate interests: our interest in knowing whether the site works. We have weighed that against your rights, which is why it stores nothing on your device, builds no profile and cannot recognise you across visits. If you would rather not be counted at all, a browser that blocks analytics requests will stop it, and we will not work around that.

Email correspondence

To answer your enquiry and follow up on it. Our lawful basis is legitimate interests in responding to a business enquiry you chose to send. Where the exchange is about entering into a contract with you or your organisation, we also rely on taking steps at your request before entering a contract (Article 6(1)(b)).

Meeting bookings

To arrange, prepare for and attend the meeting you asked for. Our lawful basis is again legitimate interests: you asked us to meet you, and we need your details to do it.

We do not add you to a mailing list, and we do not sell or rent personal data to anyone.

Who else is involved

• Cloudflare, Inc. hosts and delivers this site and processes the request data described above. Cloudflare acts as our processor for that, under its own data processing terms.
• PostHog provides the analytics described above, as our processor. We use their EU hosting, so the event data stays in the European Union.
• Calendly LLC runs the booking page. Calendly is a separate controller for what happens on its own site under its own privacy policy. Once a booking reaches us, we are the controller for our copy of it.
• Our email and calendar provider stores the correspondence and meeting entries, as a processor, so that we can read and reply to them.

We may also disclose personal data to professional advisers, or to an authority, where the law requires it. That is the whole list; there is no advertising network or data broker in it.

Transfers outside the UK

Cloudflare and Calendly are both US-headquartered and may process data outside the UK. Where that happens, the transfer relies on the safeguards in the provider’s own data processing terms, typically the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the provider’s certification under the UK Extension to the EU–US Data Privacy Framework. We check that a provider offers one of these before we use it. You can ask us which applies to a given provider.

How long we keep it

• Server request logs. We do not run our own logging or keep our own copy. Cloudflare holds the request data for a limited period under its standard retention practice and we do not extend it.
• Analytics. We keep analytics events only while they help us compare how the site performs over time. We review that need at least once a year and delete the events when they no longer serve that purpose.
• Email. We keep correspondence for as long as the enquiry or the relationship is live, and for up to two years after our last contact, so that we have a record of what was discussed. Then we delete it.
• Bookings. Calendar entries and booking notes follow the same two-year rule as email.

Where a longer period is required for legal, tax or dispute-related reasons, we keep only what is needed for that purpose and for no longer than that.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct it if it is wrong or incomplete (rectification);
• delete it (erasure);
• pause our use of it while a question about it is resolved (restriction);
• stop using it where we rely on legitimate interests (objection). If you object, we stop unless we have compelling grounds that override your rights;
• hand it over in a portable, machine-readable form, where portability applies to that data.

To use any of these, email [email protected]. It is free. We will respond within one month, and will tell you if we need longer because the request is complex. We may ask you to confirm who you are before we release data about you.

Complaints

If you think we have handled your personal data badly, tell us first. We would like the chance to put it right. You also have the right to complain to the UK regulator, the Information Commissioner’s Office, at ico.org.uk. Complaining to us first is not a precondition.

Changes to this notice

We update this notice when what we do changes. The date at the top is when it was last reviewed. There is no archive of previous versions; if you want to know what changed, email us and ask. If we start doing something materially different with personal data, we will update this notice before we start, not after.