Privacy policy

This policy explains what personal data we collect through codebumble.net, why we collect it, and what you can ask us to do about it. It covers this website only. If you are a client, the agreement we signed with you governs the data we handle on your behalf, and it takes precedence over this policy.

Who we are

Codebumble Inc. is the data controller for this website. You can reach us at hello@codebumble.net about anything in this policy, including a request to see or delete your data.

What we collect

When you submit a form. Every form asks for your name and email address. Beyond that:

• Contact: optionally your company and a message.
• Start a project: a description of the project, and optionally your phone number, the service you need, a budget range and a timeline.
• Book a call: your phone number and the time you pick, and optionally the service the call is about and a message.

We collect exactly what you type. With each submission we also keep the IP address it was sent from, for thirty days, and Cloudflare Turnstile checks it came from a person (see below). When you book a call, we email you a confirmation, a reminder the day before, and a link to move or cancel it.

When you subscribe to our newsletter. Your email address, when you subscribed and confirmed, and the IP address you subscribed from, which we keep as a record of your consent.

When you load a page. Our hosting provider records standard server request data: IP address, browser and operating system, the page requested, and the time of the request. This is a byproduct of serving the site rather than something we set out to gather, and we use it only to keep the site running and to investigate faults. We also count page views with Cloudflare Web Analytics. It sets no cookies and does not fingerprint or follow you across sites; we see only totals, such as which pages are read, which sites link to us, and which countries and browsers visits come from.

What we do not collect. This site has no user accounts and no login. We do not run advertising or cross-site tracking, we do not build profiles of visitors, and we do not buy, sell, rent or otherwise share personal data with anyone for their own marketing purposes.

Why we collect it, and on what basis

We use form submissions to answer you, and for nothing else. If you ask about a project, we will reply about that project; we will not add you to a mailing list because you contacted us. The lawful basis is our legitimate interest in responding to an enquiry you chose to send us, and, where a project follows, the steps taken to enter into a contract at your request.

We use your newsletter address to send you the newsletter. The lawful basis is your consent, and every email carries a one-click unsubscribe link.

We check each form submission with Cloudflare Turnstile, and keep the IP address it was sent from, to keep spam and abuse out of our inbox. Turnstile looks at signals from your browser and connection while you use the form; most visitors never see it, and it is not used to follow you across sites. The lawful basis is our legitimate interest in the forms not being abused.

We use server request data to operate and secure the site. The lawful basis is our legitimate interest in the site working and not being abused.

We use page view totals to learn which pages are useful. The lawful basis is our legitimate interest in improving the site.

Cookies

We do not use advertising or analytics cookies. Our page view counts come from Cloudflare Web Analytics, which works without them.

The site stores your light or dark theme preference in your browser so the page does not flash the wrong colours on your next visit. That preference never leaves your device and is not personal data.

Our hosting provider may set a cookie strictly necessary for security and load balancing.

Who processes your data

We use a small number of service providers, and only to run the site:

• Cloudflare hosts and serves this website, counts page views, and runs Turnstile, the check on our forms.
• Hostinger hosts our dashboard, where the messages and project briefs you send us are stored.
• Titan, our email service, carries our replies, the notifications that tell us you have written, and any newsletter you have subscribed to.

Each acts on our instructions under a data processing agreement. We do not share your data with anyone else unless the law requires it.

Where your data goes

We work from Bangladesh, Canada, Cyprus and Denmark, and our providers operate globally, so your data may be processed outside the country you live in. Where data leaves the UK or the European Economic Area, we rely on the transfer mechanisms our providers put in place, such as standard contractual clauses.

How long we keep it

Messages, project briefs and booked calls are kept for as long as we are in conversation with you, and are deleted automatically two years after they last changed, so we have a record of what was discussed. The IP address each was sent from is deleted after thirty days. Newsletter subscriptions are kept until you unsubscribe, and deleted a month after you do. A subscription that is never confirmed is deleted after a week. Server request data is kept for a short period by our hosting provider and then discarded.

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it at all. You can also withdraw consent for the newsletter at any time.

Email hello@codebumble.net and we will respond within 30 days. We will not charge you, and we will not ask you to justify the request.

If you are in the UK or EEA and think we have handled your data badly, you may complain to your national data protection authority. We would rather you told us first.

Children

This site is aimed at businesses. We do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, email us and we will delete it.

Changes

If we change this policy we will update the date at the top of this page. If a change materially affects how we handle data you have already given us, we will contact you directly.