Privacy Policy

1. Who we are

CodeLeap Ltd. is a United Kingdom-based company that designs and builds AI and automation solutions for small and medium-sized businesses. For the personal data described in this policy, CodeLeap Ltd. is the data controller. You can reach us at hello@codeleap.co.uk.

2. Information we collect

We only collect what we need to respond to you and to run the Website:

• Information you give us. When you complete our contact form or book a call, we collect details such as your name, email address, company, and the message you send.
• Usage data. Basic, mostly aggregated analytics about how visitors use the Website (for example, pages viewed and general device or browser information).
• Cookies and similar technologies. Small files used to make the Website work and to measure usage — see "Cookies" below.

We do not intentionally collect any special-category (sensitive) personal data.

3. How we use your information

• to respond to your enquiry and provide the information or services you request;
• to operate, maintain, and improve the Website;
• to understand how the Website is used so we can make it better;
• to comply with our legal obligations.

Our legal bases are typically your consent (for example, non-essential analytics cookies), our legitimate interests (responding to enquiries and improving the Website), and compliance with legal obligations. We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.

4. Third-party services

The Website relies on third-party tools to function, and some of the information above is processed by those providers on our behalf — which may include (without limitation) analytics, an embedded scheduling tool, and the service that delivers contact-form submissions to us. These providers process data under their own terms and privacy policies. We share your information with them only as needed to provide the Website and respond to you, and we do not authorise them to use it for their own unrelated purposes.

5. Cookies

We use essential cookies that are necessary for the Website to function, and we also use analytics and advertising cookies, described below. These are set when you visit the Website; we do not currently ask you to opt in first. You can opt out at any time by changing your cookie settings, and you can also control or delete cookies through your browser settings; blocking some cookies may affect how the Website works. If you opt out, we stop setting the cookies below and delete the ones we set ourselves; third-party cookies already placed switch to a consent-denied mode that stops them being used, and they expire on their own schedule.

The cookies and similar technologies we use fall into three groups:

• Essential — always on. The minimum storage the Website needs to work, including the record of the cookie choice you make here so that we do not ask again on every page. These cannot be switched off.
• Analytics — on unless you opt out. Google Analytics 4 and Microsoft Clarity, which measure how the Website is used so we can see which pages work and where visitors get stuck. Clarity also records clicks, scrolling and mouse movement, with the text you type masked. Clarity's cookies (_clck, _clsk) are set on your first visit unless you opt out. This category also covers cl_vid, our own cookie holding a randomly generated visitor identifier for up to 13 months so we can recognise a returning visitor when an enquiry comes in; it is set on your first visit and deleted if you opt out of analytics. A companion cookie, cl_visit, records your visit history across sessions for the same period (up to 13 months) and under the same control. It also covers Leadfeeder, which looks up the organisation associated with a visitor's IP address so we know which businesses are interested in us; it loads on your first visit, and it is not loaded — and its cookie (_lfa) is deleted — if you opt out.
• Advertising — on unless you opt out. Google Ads, the Meta (Facebook) Pixel, the LinkedIn Insight Tag and the OpenAI (ChatGPT Ads) measurement pixel, used to measure how our advertising performs and to show relevant ads. If you opt out, Google, Meta and OpenAI switch to a consent-denied mode that stores nothing and the LinkedIn tag is not loaded. This category also covers cl_click, our own cookie holding the advertising click identifiers and campaign tags from the link that brought you here, for up to 90 days, so that an enquiry or booking can be matched to the advert it came from; it is deleted if you opt out of advertising. When you send us the contact form, Google Ads also receives a hashed (irreversible) form of the email address and phone number you entered, to match the enquiry to an advert you clicked; it does not receive them if you have opted out of advertising.

We also keep a short-lived record of the page you arrived on, the site that referred you and any campaign or advertising parameters in your browser's session storage. It is cleared when you close the tab, and it is attached to your message if you submit the contact form, or to your booking (minus the page's query string) if you book a call.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy — for example, to handle your enquiry and for a reasonable period afterwards — unless a longer retention period is required by law. When it is no longer needed, we delete or anonymise it.

7. Your rights

Under UK data protection law you have rights over your personal data, including the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data in certain circumstances;
• object to, or ask us to restrict, certain processing;
• withdraw consent at any time where we rely on it.

To exercise any of these rights, contact us at hello@codeleap.co.uk. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Third-party links

The Website may link to external sites that we do not control. This Privacy Policy does not apply to those sites, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any site you visit.

10. Changes to this policy

We may update this Privacy Policy from time to time. The version published on this page is the one that applies. We recommend reviewing it periodically; your continued use of the Website after any change indicates your acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@codeleap.co.uk.