Privacy policy

Data controller

The data controller is the operator of the Codexway brand. Full details must be provided from the administration before production release.

Data collected

• Contact form: name, email address, phone (optional), company (optional), type of need, indicative budget (optional), desired timeframe (optional), message, consent.
• Quote form: the same information, plus project type, services concerned, objectives and existing technical stack.
• Technical data: pseudonymised IP address (hash), user agent, timestamp. The IP address is never stored in clear text.

Purposes

• Answering a contact or quote request.
• Ensuring service security (abuse detection, rate limiting, audit log).
• Producing aggregated usage statistics, without advertising profiling.

Legal basis

Processing relies on the explicit consent of the data subject (Article 6.1.a GDPR) for forms, and on legitimate interest (Article 6.1.f) for service security.

Retention periods

• Contact and quote requests: 36 months from the last exchange.
• Audit and security logs: 12 months.
• Session tokens: token lifetime, then automatic deletion.

Recipients

Data is never sold, transferred or shared for advertising purposes. It may be processed by the technical subcontractors strictly required for hosting and operating the service.

Transfers outside the European Union

No transfer outside the European Union is carried out without appropriate safeguards.

Your rights

You have the right to access, rectify, erase, restrict, object and port your data. These rights are exercised through the contact form. A reply is provided within one month at most.

Complaint

In case of disagreement, you may contact the competent supervisory authority (in France, the CNIL).

Warning: this text is a template to be reviewed by a lawyer before production release.