Legal
Privacy policy
Last updated:
This policy explains what personal data we collect when you visit codewait.com, why we collect it, who we share it with, and the rights you have. We keep it short: this is a marketing site, and we collect as little as we can.
The short version
- If you use our contact form, we get your name, email, company (if you give it) and your message. We use them to reply to you.
- We only use Google Analytics if you say yes in the cookie banner. No analytics cookies are set and nothing is sent to Google before that.
- We don't run ads, we don't sell your data, and we don't share it for advertising.
- You can change your cookie choice, or ask us to see or delete your data, at any time.
Who we are
The controller responsible for your personal data on this website is:
CodeWaitEmail: hello@codewait.com
In this policy, “CodeWait”, “we” and “us” mean the team behind codewait.com. The quickest way to reach us about anything in this policy is by email.
What we collect and why
When you use the contact form
The form asks for:
- your name (required)
- your email address (required)
- your company name (optional)
- your message about the project (required)
When you press “Send message”, these details are sent to us as an email through our email delivery provider, Resend. Your email address is set as the reply-to address so we can answer you directly. The website itself does not save your message in a database.
We use this information only to read your enquiry, reply to it and, if you want to work with us, to discuss and prepare a project. We need your name, email and message to reply. If you don't want to provide them, you can email us instead, but we will still need an address to reply to.
The form also has a hidden field that people never see. It catches spam bots: if it is filled in, the message is discarded and not sent.
When you email us directly
If you write to hello@codewait.com, we receive your email address, your name if you include it, and whatever you put in the message. We use it to reply to you.
Analytics, only if you agree
If you accept analytics cookies, we use Google Analytics 4 to see which pages are visited and how people find the site. Google Analytics collects data such as pages viewed, how you arrived (for example a search engine or a link), approximate location (country or city), device and browser type, and a random identifier stored in a cookie. We use these statistics only in aggregate to improve the site. We don't try to identify you.
If you don't accept, the Google Analytics script is not loaded at all, no analytics cookies are set and nothing is sent to Google. Even when you do accept, we have switched off all advertising features: the advertising consent signals are always set to “denied”, so your visit is not used for ads or ad personalisation.
When you load any page
Like any website, our hosting provider receives technical information when your browser requests a page, such as your IP address, browser type, the page requested and the time of the request. This is needed to deliver the site and keep it secure, and may be kept briefly in server logs.
Our fonts are stored on our own server, so loading the site does not send any request to Google Fonts.
What we don't do
- There are no user accounts on this site.
- We don't use advertising or retargeting cookies.
- We don't sell or rent your personal data.
- We don't make decisions about you based solely on automated processing.
Our legal basis
Under the GDPR (Article 6), we must have a legal reason to use your personal data. These are ours:
- Contact form and emails: taking steps at your request before entering into a contract (Article 6(1)(b)) when you ask about a project, and our legitimate interest in answering the messages people send us (Article 6(1)(f)) for other enquiries.
- Google Analytics: your consent (Article 6(1)(a)). You can withdraw it at any time.
- Remembering your cookie choice (cc_cookie): our legitimate interest in respecting your choice and being able to show that we asked for consent (Article 6(1)(f)), as well as our legal obligation to do so (Article 6(1)(c)).
- Server logs and security: our legitimate interest in delivering the site and protecting it from abuse (Article 6(1)(f)).
Where we rely on legitimate interests, you have the right to object (see “Your rights” below).
Cookies
Cookies are small files a website stores in your browser. We use one necessary cookie, plus analytics cookies only if you allow them. When you first visit, a banner asks for your choice. “Accept all” and “Reject all” are equally easy, and analytics stays off unless you turn it on.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| cc_cookie | Necessary | Remembers your cookie choice (which categories you accepted, and when), so we don't ask again on every page. Set by CodeWait (this site). | 12 months |
| _ga | Analytics (only with consent) | Google Analytics: tells visits from different browsers apart. Set by Google Analytics. | 2 years |
| _ga_<id> | Analytics (only with consent) | Google Analytics: keeps track of the current session. Set by Google Analytics. | 2 years |
The cc_cookie stays in your browser. It is not sent to us or to anyone else.
Changing your choice
You can change or withdraw your consent at any time. Use the “Cookie settings” link in the footer of any page, or this button:
If you turn analytics off, we stop Google Analytics, delete the _ga cookies from your browser and reload the page. Withdrawing consent does not affect anything that happened before. You can also block or delete cookies in your browser settings, or use Google's Analytics opt-out browser add-on.
Who we share data with
We use a few trusted service providers to run the site. They act as our processors: they may only use your data on our instructions and under a data processing agreement.
- Resend (Plus Five Five, Inc., USA) delivers contact form messages to our inbox. It processes everything you type in the form. Resend privacy policy.
- Google (Google Ireland Limited, with processing by Google LLC in the USA) provides Google Analytics, only if you consent. Google privacy policy and how Google uses data from its business products.
- Our hosting provider hosts the website and processes technical request data.
- Our email provider hosts the inbox where contact form messages and your emails arrive.
We may also share data with professional advisers (such as lawyers or accountants) under confidentiality, or with authorities when the law requires it. We never sell your data.
International transfers
Some of our providers, including Resend and Google, are based in or process data in the United States. When your data leaves the European Economic Area, we make sure it stays protected:
- Where the provider is certified under the EU–US Data Privacy Framework, the transfer relies on the European Commission's adequacy decision for that framework (Article 45 GDPR).
- Otherwise, or in addition, we rely on the European Commission's Standard Contractual Clauses (Article 46 GDPR), which are part of our providers' data processing terms.
You can ask us for more information about these safeguards using the contact details below.
How long we keep data
- Contact form messages and emails: up to 24 months after our last contact if no project follows. If we start working together, we keep relevant correspondence for as long as the project needs it and as long as tax and accounting law requires.
- Copies held by Resend: Resend keeps a record of delivered emails for a limited period, as set out in its own terms, and then deletes it.
- Google Analytics data: kept in Google Analytics for up to 14 months, then deleted automatically. The _ga cookies expire after 2 years, or sooner if you withdraw consent or clear your cookies.
- cc_cookie: 12 months, after which we ask again.
- Server logs: kept for a short period set by our hosting provider, then deleted.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you and get a copy.
- Rectification: have inaccurate data corrected.
- Erasure: have your data deleted.
- Restriction: ask us to limit how we use your data.
- Portability: receive data you gave us in a common, machine-readable format, or have it sent to someone else.
- Objection: object to us using your data based on our legitimate interests.
- Withdraw consent at any time, for example through “Cookie settings”. This doesn't affect processing that happened before.
- Complain to a data protection supervisory authority, in particular in the EU country where you live, work or where you think the problem happened.
To use any of these rights, email us at hello@codewait.com. We will reply within one month. We may ask you to confirm your identity first. Using your rights is free.
You can find the data protection authority for your country on the European Data Protection Board's website. We'd appreciate the chance to sort out any concern with you first, but you don't have to contact us before you complain.
Security
The site is served only over an encrypted connection (HTTPS). Contact form messages are sent to our email provider over an encrypted connection and are not stored in a database on the site. Access to our inbox and to our provider accounts is limited to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your data.
Children
This site is meant for businesses and adults looking for software services. It is not aimed at children, and we don't knowingly collect personal data from anyone under 16. If you think a child has sent us their data, contact us and we will delete it.
Changes to this policy
We may update this policy when the site or the law changes. The “Last updated” date at the top shows when it last changed. If we start using cookies for a new purpose, we will ask for your consent again through the cookie banner.
Contact
Questions about this policy or your data? Email us at hello@codewait.com.