1. Who we are
Codoki Studio is a trading name of Codoki AI Ltd. Codoki AI Ltd is the controller of the personal information described in this notice.
Codoki AI Ltd is registered in England and Wales under company number 16543240. Our registered office is 66 Paul Street, London, England, EC2A 4NA. You can contact us at hello@codokistudio.com.
2. Information we collect
We may collect:
- your name, email address, telephone number, company and job title;
- information you include in an enquiry, email, brief or other communication;
- project, contract, billing and payment records if you become a client; and
- limited technical information recorded for hosting, security and fault diagnosis, such as IP address, browser details, requested pages, timestamps and error information.
Please do not send sensitive personal information unless we specifically ask for it and it is necessary.
3. How and why we use it
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries and preparing proposals | Legitimate interests and steps taken at your request before a contract |
| Delivering projects and client support | Performance of a contract and legitimate interests |
| Billing, accounting and legal compliance | Legal obligation and legitimate interests |
| Protecting and troubleshooting our website | Legitimate interests in security and reliable operation |
| Establishing or defending legal claims | Legitimate interests and legal obligation where applicable |
We do not sell personal information. We do not currently use it for automated decision-making or profiling that produces legal or similarly significant effects.
4. Who receives your information
We disclose information only where needed to operate our business and deliver services. Recipients may include our website hosting and infrastructure providers, email and collaboration providers, professional advisers, payment and accounting providers, and contractors working under appropriate confidentiality obligations. We may also disclose information where required by law or to protect legal rights.
Each provider receives only the information reasonably necessary for its role and must handle it securely.
5. International transfers
Some service providers may process information outside the UK. Where UK data protection law requires safeguards, we use an adequacy regulation or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You may contact us for more information about relevant safeguards.
6. How long we keep information
We keep information only as long as reasonably needed for the purpose for which it was collected. We normally retain unsuccessful enquiry records for up to 24 months after our last meaningful contact. Client contracts, project correspondence and financial records may generally be retained for up to six years after the relevant relationship or transaction, or longer where law or an active legal claim requires it. Technical logs are normally kept for shorter operational periods determined by our providers.
7. Security
We use proportionate technical and organisational measures designed to protect personal information. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
8. Cookies and similar technologies
Cookies and similar technologies are small files, browser storage entries, pixels or other tools that can store or access information on your device. We use browser storage to remember your privacy preferences. Our site or hosting platform may also use technologies that are strictly necessary for security, network management and core operation.
| Category | Purpose and current use | Choice |
|---|---|---|
| Essential | Security, core operation and remembering your cookie preference. | Always active where necessary |
| Analytics | Understanding website usage. No analytics service is currently active. | Optional |
| Marketing | Advertising or campaign measurement. No marketing tracker is currently active. | Optional |
Optional technologies will not be activated unless you consent. Rejecting optional technologies does not prevent you from using the website. You can accept, reject or customise them through the privacy panel and change your decision at any time using “Manage cookie preferences” in the footer. If our use of technology changes, we will update this notice and the privacy panel before activating any newly introduced non-essential technology.
9. Your rights
Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; receive certain information in a portable form; and withdraw consent where processing relies on consent. These rights can be limited by law.
To exercise a right, email hello@codokistudio.com. We may need to verify your identity. You can also complain to the Information Commissioner’s Office (ICO). We would appreciate the opportunity to address your concern first.
10. Other websites
Links to third-party websites are provided for convenience. Their own privacy notices apply when you use those services.
11. Changes to this notice
We may update this policy as our services, suppliers or legal duties change. We will publish the revised version here and change the date above.