Privacy Policy

Last updated: 19 October 2026

This policy explains how Codeworkflow Ltd (“we”, “us”) collects and uses personal information when you visit this website, contact us, use our Website Health Score or work with us.

Who we are

The data controller is Codeworkflow Ltd, 128 City Road, London EC1V 2NX, United Kingdom. Contact us about privacy at steven@codeworkflow.co.uk.

What we collect

Enquiries: your name, email address, phone number if you give it, your budget and the details of your project.
Website Health Score: the website address you enter, your name and email address, and whether you agree to hear from us.
Health Check bookings: your name, email address and the time you choose, collected by Google Calendar when you book.
Clients: the contact, billing and project information we need to deliver and invoice our services.
Website use: technical data such as your IP address and browser in our server logs, and, only if you accept, anonymous visit statistics (Jetpack Stats).

Why we use it and our lawful basis

To reply to enquiries and prepare quotes (steps before a contract, or our legitimate interest in responding to you).
To deliver and invoice our services (performance of a contract) and keep accounting records (legal obligation).
To send you your Health Score report (your request) and, only if you tick the box, occasional useful updates (consent, which you can withdraw at any time).
To keep this website secure and understand how it is used (legitimate interests, and consent for statistics cookies).

We do not sell your personal information.

Who we share it with

Our web hosting provider, which stores this website and its database.
Google (Calendar and Meet) when you book a Health Check, and Automattic (WordPress.com / Jetpack) for visit statistics if you accept them.
Our accountant, and professional advisers where needed.
Public authorities where the law requires it.

Some of these providers may process data outside the UK. Where they do, they use safeguards recognised under UK law, such as the UK adequacy regulations or the International Data Transfer Agreement.

How long we keep it

Enquiries that don’t lead to work: up to 24 months.
Client records and invoices: 6 years after the end of the tax year they relate to, as HMRC requires.
Health Score leads: up to 24 months, or until you ask us to delete them.
Server logs: a short period for security, then deleted.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, ask for it to be transferred, and withdraw consent at any time. Email steven@codeworkflow.co.uk and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). Irish residents can also contact the Data Protection Commission (dataprotection.ie).

Cookies

See our cookie policy.

Changes

We will update this page if we change how we use personal information.