Privacy policy

Who we are

Kodie is a trading name operated from Bristol, UK. For privacy enquiries contact john@kodie.co.uk.

What we collect

• Enquiry data — when you email us, we hold your name, email address, message content, and any context you provide for as long as is needed to respond and follow up.
• Project data — for active client engagements, we process whatever data you share with us to deliver the work. Specifics are agreed in writing per engagement.
• Site usage data — this site does not currently use analytics cookies or third-party tracking. Server logs hold IP, user-agent and timestamps for 30 days for security/abuse-prevention purposes.

Why we hold it

Legitimate interest (responding to enquiries; running the site securely) and contract performance (delivering agreed work). We do not process personal data for marketing without explicit opt-in.

Who we share it with

Only sub-processors strictly necessary to deliver an engagement — listed in the relevant project paperwork. We never sell or rent personal data.

Where data lives

Primary infrastructure is UK / EU-hosted. Some sub-processors (e.g. specific LLM providers) operate from other jurisdictions; this is disclosed per engagement before any data is sent.

How long we keep it

• Enquiry email threads: 24 months unless ongoing
• Active project data: duration of engagement plus any contractually agreed retention
• Server logs: 30 days
• Invoices and statutory accounting data: 7 years (HMRC requirement)

Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data; restrict or object to its processing; and request data portability. Email john@kodie.co.uk. We respond within 30 days.

Complaints

If you're unhappy with how we handle your data, the UK regulator is the Information Commissioner's Office (ico.org.uk).

Changes

We'll update this page when our practices change and bump the year at the top. No retroactive surprises.