Legal

Privacy Policy

Last updated: 2 July 2026 · Coddexa Media Ltd, 66 Paul Street, London EC2A 4NA, UK

This Privacy Policy explains how Coddexa Media Ltd (“Coddexa”, “we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit coddexa.media, contact us, or engage our services.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Coddexa Media Ltd acts as the data controller for the personal data described in this policy. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

1. Who we are

Coddexa Media Ltd
66 Paul Street, London EC2A 4NA, United Kingdom
Email: hello@coddexa.media

2. What data we collect

Contact form submissions

When you submit our contact form, we collect: your name, email address, company name (if provided), message content, and the page you submitted from. We also collect UTM parameters to understand how you found us.

Leads and enquiries

If you enquire about our services, we collect business contact information (name, email, phone, website, business name, location) for the purpose of responding to and fulfilling your enquiry.

Analytics

We currently use no analytics or tracking of any kind on this website — no analytics scripts, no tracking cookies, and no third-party marketing pixels. If we introduce analytics in the future, this policy will be updated before any such tracking begins.

Cookies

This site uses only functional cookies strictly necessary for site operation. We do not use advertising, tracking, or third-party marketing cookies. You can disable cookies in your browser settings without affecting site functionality.

3. How we use your data

We process your personal data for the following purposes and legal bases:

  • Responding to enquiries — Legitimate interest (Article 6(1)(f) UK GDPR): to respond to your contact form submission or service enquiry.
  • Delivering services — Performance of a contract (Article 6(1)(b)): where you become a client, to deliver the agreed services, send invoices, and manage the project.
  • Legal compliance — Legal obligation (Article 6(1)(c)): to comply with accounting, tax, and regulatory requirements.
  • Marketing communications — Legitimate interest or consent: only where you have explicitly opted in or where you are an existing client and the content is relevant to services you have purchased. You may opt out at any time.

4. Third parties we share data with

We do not sell your personal data. We share data only with the following categories of trusted third-party processors:

  • Stripe, Inc. — Payment processing for paid services. Stripe's privacy policy applies to payment data. We do not store card details.
  • Hosting & infrastructure providers — Server hosting for this website and client sites (data processed within the UK/EEA).
  • Email service providers — To send transactional emails (project updates, invoices). Data is not used for marketing by the provider.
  • n8n workflow automation — Used to route contact form submissions to our internal project management tools. Data is not shared further.

All third-party processors are required to process data only on our instructions and in accordance with UK GDPR.

5. Data retention

We retain personal data only as long as necessary:

  • Enquiries that do not result in a contract: up to 12 months.
  • Client project data and communications: 7 years (required for accounting/tax purposes under UK law).
  • Contact form submissions: 12 months from submission unless a contract is formed.

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure (“right to be forgotten”) where we have no legitimate grounds to retain it.
  • Restriction of processing in certain circumstances.
  • Object to processing based on legitimate interests.
  • Data portability (where processing is based on consent or contract and carried out automatically).
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at hello@coddexa.media. We will respond within 30 days.

7. Transfers outside the UK

Where data is transferred outside the UK (for example, to US-based cloud providers), we ensure adequate safeguards are in place, including reliance on Standard Contractual Clauses or the UK International Data Transfer Agreement (IDTA).

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted via TLS/HTTPS. Access to personal data is restricted to personnel who require it to perform their duties.

9. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

We would ask that you contact us first at hello@coddexa.media so we can try to resolve the matter directly.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by updating the “Last updated” date at the top of this page. Continued use of our services after any changes constitutes acceptance of the updated policy.

See also our Terms & Conditions and Refund Policy.