Privacy Policy

Last updated 14 September 2026.

This policy explains what personal data Codeexceptional Ltd collects through this website, why, and what you can do about it. It is written to be read rather than to be legally impenetrable.

Who we are

Codeexceptional Ltd, a company registered in England and Wales, company number 07655397, based in Nuneaton, Warwickshire. We are the data controller for the information described here. Contact us through the enquiry form or on 07769 553784.

What we collect

Enquiry form data — your name, business name, email address, phone number, the service you selected, your budget and timeline indications, and your message.
Analytics data — if you accept analytics cookies, anonymised information about pages viewed, approximate location by region, device type and how you arrived at the site.
Server logs — our hosting provider records IP addresses and request details for security and reliability. We do not use these for marketing.

We do not collect special category data, and we do not ask for payment details through this website.

Why we use it, and our lawful basis

To reply to your enquiry — lawful basis: legitimate interests, and steps taken at your request prior to entering a contract.
To deliver work you have commissioned — lawful basis: performance of a contract.
To understand how the site is used — lawful basis: consent, which you give or withhold through the cookie notice and can change at any time.
To meet legal and accounting obligations — lawful basis: legal obligation.

We do not sell your data, we do not share it with advertisers, and we do not add you to a mailing list because you sent an enquiry.

Who else sees it

Microsoft Azure — hosting and the function that processes the enquiry form. Data is held in the UK or EU.
Our email provider — enquiries submitted through the form are delivered to our inbox.
Google Analytics and Microsoft Clarity — only if you accept analytics cookies.

Each of these is a processor acting on our instructions. Where a provider transfers data outside the UK, that transfer relies on the UK International Data Transfer Addendum or an adequacy decision.

How long we keep it

Enquiries that do not become work — up to 24 months, then deleted.
Client records — for the duration of the engagement, then 6 years to meet accounting and limitation requirements.
Analytics — retained on the provider's standard schedule, currently 14 months for Google Analytics.

Your rights

Under UK GDPR you have the right to:

Ask for a copy of the personal data we hold about you
Have inaccurate data corrected
Ask us to delete data where we have no continuing reason to keep it
Object to, or ask us to restrict, processing based on legitimate interests
Withdraw consent for analytics at any time
Ask for your data in a portable format

Send a request through the enquiry form or ring 07769 553784, and we will respond within one month. There is no charge. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — though we would appreciate the chance to put it right first.

Cookies

This site sets no cookies until you accept them. See the cookie policy for what each one does.

Security

The site is served over HTTPS, form submissions are encrypted in transit, and access to enquiry data is limited to people who need it — which, given the size of this business, is one person. No system is perfectly secure, but we do not store anything on this website that would be valuable to an attacker.

Changes

If this policy changes materially we will update the date at the top. Continued use of the site after a change means you accept the revised policy.