Privacy notice

Codedevza AI Ltd, company number 16485057, is the controller for the personal data described here. We are registered with the Information Commissioner’s Office as a data controller under ZB905842, and you can verify that entry on the ICO’s public register.

What we collect, and why

If you ask for a document, we collect your name, work email address and company. If you book a demo or contact us, we collect what you type into that form. In both cases we also store the exact consent wording you were shown at the moment you were shown it, so that we can demonstrate what you agreed to rather than assert it.

If you agree to analytics, our measurement tool records how pages are used and stores identifiers on your device. If you decline, or ignore the question, none of that happens and nothing is loaded.

Our web host keeps standard server logs, which include IP addresses, for security and diagnosis. That is ordinary operation of a web server rather than a tracking activity.

Our lawful basis

For responding to an enquiry and sending a document you asked for: legitimate interests, being the mutual interest of a business contacting a supplier it approached. You can object at any time.

For analytics: your consent, and nothing loads before you give it.

For keeping records of consent and of enquiries: legal obligation and legitimate interests, because being able to show what happened is the point of holding it.

Who else processes it

Our hosting, storage, bot protection, email delivery and analytics providers process data on our behalf. Each one is named, with its purpose and location, on the sub-processors page. We do not sell personal data and we do not share it for advertising.

Where it is held

The application and its database run in the European Union. Object storage is in Amsterdam. Where a provider processes data outside the EEA or the UK, that transfer relies on standard contractual clauses.

How long we keep it

Enquiry and document-request records are kept while there is an active commercial conversation and for a reasonable period afterwards, then deleted. Analytics identifiers expire within a year, and the session identifier within a day. Your consent choice is kept until you change it.

Your rights

You can ask for a copy of what we hold, ask for it to be corrected or deleted, object to how we use it, or ask us to restrict it. Lead records are held in a single typed collection carrying the source, the consent evidence and the lawful basis, which is a deliberate design decision: it means an access or erasure request is one query rather than an archaeology exercise.

Write to support@sustainifyai.co.uk and a person will answer. If you are not satisfied with how we handle a request, you can complain to the Information Commissioner’s Office.

Changes

If this notice changes materially we will update the effective date above, and where the change concerns analytics we will ask for consent again rather than assume the previous answer still stands.