Privacy Policy

Effective date: 27 July 2026

Code Bunnies Ltd ("we", "us", "our"), registered in Scotland under company number SC779821, is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights in relation to it.

We act as a data controller in respect of the personal data we process, and are registered with the Information Commissioner's Office (ICO) under registration reference ZC198726. If you have questions about this policy, please contact us at info@codebunnies.com.

1. What data we collect

We may collect the following types of personal data:

• Contact information: name, email address, and company name (optional), when you submit an enquiry or consultation request.
• Project information: project type, description, budget range, timeline, how you heard about us, and any files or documents you choose to attach, that you provide through our consultation form.
• Technical data: IP address, browser and operating system (from standard server access logs), and pages requested, collected automatically by our web server when you visit our website.
• Usage data: aggregated information about how the website is used (pages viewed, how you arrived, device type), collected through Google Analytics – but only if you accept analytics cookies in our cookie banner.
• Communication data: records of correspondence between us, including emails.

2. How we use your data

We use your personal data for the following purposes:

• To respond to enquiries and assess whether we can help with your project.
• To communicate with you about your project if we proceed to a working relationship.
• To keep our website secure and operating correctly.
• To understand how our website is used, so we can improve it (only where you have consented to analytics cookies).
• To comply with legal and regulatory obligations.

We rely on legitimate interests as our lawful basis for processing enquiry data, on contract performance where a formal engagement has been agreed, and on your consent for analytics – which you can withdraw at any time (see our Cookie Policy).

3. How we store, protect, and transfer your data

Your enquiry data is stored on our own server, located within the United Kingdom or European Economic Area. We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.

Our website is delivered through Cloudflare's global network, so some technical data (such as your IP address and the pages you request) may be processed on servers outside the UK and EEA, including in the United States. Where data is transferred outside the UK, it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement, Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework.

We retain enquiry data for up to 24 months unless a longer retention period is required by law or you have entered into a client relationship with us.

4. Who we share data with

We do not sell or rent your personal data to third parties. We may share data with:

• Infrastructure providers: we use Cloudflare, Inc. for website hosting, content delivery, and security (including protection against malicious and abusive traffic). Our content management system runs on our own server. These providers process data only as needed to operate our website, under contractual data-protection obligations.
• Analytics providers: if you consent to analytics cookies, Google LLC processes usage data on our behalf through Google Analytics. This data may be processed on servers outside the UK and EEA, including in the United States, protected by appropriate safeguards such as the UK Extension to the EU–US Data Privacy Framework.
• Legal obligations: where required by law, court order, or regulatory authority.

5. Cookies

We use two categories of cookie. Strictly necessary security cookies are placed by our infrastructure provider, Cloudflare, to protect the site against malicious traffic; these are exempt from consent requirements. Analytics cookies from Google Analytics are set only if you accept them in the cookie banner shown on your first visit – if you decline, no analytics cookies are set. We use no advertising cookies and do not share browsing data with advertising networks.

Full details, including how to change your choice, are in our Cookie Policy. You can also control or block cookies through your browser settings.

6. Your rights

Under UK GDPR, you have the following rights: Access, Rectification, Erasure, Restriction, Portability, Objection, and the right to lodge a complaint with the ICO at ico.org.uk.

To exercise any of these rights, contact us at info@codebunnies.com. We will respond within 30 days.

7. Third-party links

Our website may contain links to third-party websites. This privacy policy applies only to our website.

8. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this page.

9. Contact

Code Bunnies Ltd
Registered in Scotland – SC779821
ICO registration – ZC198726
info@codebunnies.com