Privacy Policy
Last revised: 4 June 2025
1. Scope, Controller & Contact
This Privacy Policy explains how Coding Brothers ("Coding Brothers," "we," "us," or "our") collects, uses, shares, and protects personal information when you:
- visit any website or sub-domain that links to this Policy (the "Site"),
- interact with our social-media pages, newsletters, or marketing emails, or
- use any software-development, consulting, or related services we provide (the "Services").
Data controller: 1113 Fence Post Way, Roseville CA 95747.
Contact: [email protected] | +1 (916) 572-6755
2. The Data We Collect
| Category | Examples | Source |
|---|---|---|
| Identifiers | name, email, phone, company, job title | you |
| Commercial & project info | project specs, budgets, statements of work | you |
| Usage data | IP address, cookie IDs, pages viewed, time on page, clicks, referring URL, device & browser | automated |
| Communications | emails, chat transcripts, meeting recordings (with notice) | you |
| Sensitive personal information | None intentionally collected. | — |
We do not intentionally collect data from children under 18. If you believe a child has provided personal data, please contact us.
3. Lawful Bases & Purposes of Processing
| Purpose | Lawful basis (GDPR art. 6) | Can you opt out? |
|---|---|---|
| Responding to inquiries, delivering Services | Contract (6 (1)(b)) | Only by not using the Services |
| Improving Site & Services (analytics) | Legitimate interest (6 (1)(f)) | Yes—see "Cookies" |
| Sending newsletters & marketing | Consent (6 (1)(a)) | Yes—unsubscribe link |
| Legal compliance & fraud prevention | Legal obligation (6 (1)(c)) | No |
4. Cookies & Similar Technologies
We use first-party cookies and Google Analytics 4 to understand traffic and improve the Site. You will see a cookie banner the first time you visit, allowing you to accept all, reject non-essential, or customise cookies. You may also use the "Cookie Settings" link in the footer at any time.
We honour Global Privacy Control (GPC) signals: if your browser sends a GPC header we treat it as an opt-out of selling or sharing personal information.
5. How We Share Information
We never sell your data. We disclose it only:
| Recipient type | Reason |
|---|---|
| Service providers (processors) (Formspree, Vercel, Google Analytics, Calendly, MailerLite, Slack, etc.) | hosting, form handling, analytics, email delivery, scheduling |
| Professional advisers | accounting, legal, or tax support |
| Authorities | when required by law, court order, or to protect rights and safety |
All processors are bound by contracts that require them to use data only on our instructions.
6. International Transfers
We store data on servers in the United States. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses and UK Addendum, supplemented by transfer-risk assessments and technical safeguards (encryption in transit and at rest, strict access controls).
7. Data Security
- TLS 1.2 + encryption for data-in-transit
- ISO-27001-certified hosting provider
- Role-based access, MFA on all admin accounts
- Annual penetration testing and vendor reviews
No internet transmission is 100% secure, so we cannot guarantee absolute security.
8. Data Retention
| Data set | Typical retention |
|---|---|
| Project files & deliverables | 7 years after project close |
| Prospect records (no engagement) | 18 months |
| Accounting records & invoices | 7 years (legal) |
| Analytics logs | 26 months (Google Analytics default) |
We anonymise or securely delete data once retention periods expire.
9. Your Rights
EEA/UK residents: access, rectification, erasure, restriction, portability, objection.
California residents (if CCPA/CPRA applies): know, delete, correct, opt-out of selling/sharing, limit use of sensitive PI (not currently collected).
Use the "Do Not Sell or Share My Information" link in the footer or email [email protected] to exercise any right. We will verify your request as required by law.
10. Changes to This Policy
We post any changes here and, if material, notify you by email or a Site banner at least 30 days before they take effect. The "Last revised" date shows the latest update.
11. Contact
Questions or concerns?