Privacy Policy

Who we are

SmartCodex is a website design and web development studio operated by the business named below, which acts as the data controller for personal data collected through this website.

If you have any question about this policy or about how your data is handled, contact us using the details above.

What data we collect

We only collect data that you provide or that is technically necessary to operate the website.

Information you send us

• Your name and email address, when you submit the contact form or email us.
• Your company or business name, when you choose to provide it.
• The project type and estimated project needs or budget you select.
• The content of your message and any details you include in it.

Information collected automatically

• Standard server log data recorded by our hosting provider, such as IP address, browser type, requested page, date and time. These logs are used for security, error diagnosis and abuse prevention.
• A local preference stored in your browser (sc-theme) that remembers whether you chose the light or dark version of the site. This stays on your device and is not sent to us.

We do not knowingly collect data from children, and we do not ask for special categories of personal data such as health, biometric or political information.

Why we use your data and on what legal basis

• To reply to your enquiry and discuss your project — on the basis of steps taken at your request prior to entering into a contract, and your consent given when submitting the form.
• To provide agreed services — on the basis of performance of a contract, once a project is agreed.
• To keep the website secure and working — on the basis of our legitimate interest in protecting the site against abuse and in diagnosing technical problems.
• To meet legal and accounting obligations — where applicable law requires records to be kept.

We do not use your contact details to send marketing emails unless you have specifically asked us to, and we do not sell or rent personal data to anyone.

Cookies and similar technologies

This website does not use advertising cookies, tracking pixels or third-party analytics profiling by default.

• Local storage: a single entry stores your light or dark theme preference. It is not a tracking identifier and can be cleared at any time in your browser settings.
• Web fonts: typefaces are loaded from Google Fonts. When a page loads, your browser requests the font files from Google servers, which means your IP address is transmitted to Google for that request. See the Google Privacy Policy for details of how Google processes such data.

If analytics or additional third-party services are added to this website in the future, this policy will be updated and, where legally required, consent will be requested before those services are loaded.

Who your data is shared with

Your data is not sold or shared for advertising. It may be processed by the service providers we rely on to operate the business:

• Our web hosting provider, which stores the website files, form submissions in transit and server logs.
• Our email provider, which delivers and stores the messages sent through the contact form and any correspondence that follows.
• Professional advisers or authorities, where we are legally required to disclose information.

These providers process data on our behalf and are expected to apply appropriate security measures. Where data is transferred outside the European Economic Area, it must be covered by an appropriate legal transfer mechanism.

How long we keep your data

• Enquiries that do not lead to a project: kept for up to 24 months, then deleted, so we can follow up on earlier conversations.
• Client project records: kept for the duration of the project and afterwards for the period required by applicable accounting and legal obligations.
• Server logs: kept for the limited period applied by our hosting provider for security and diagnostics.

You can ask us to delete your enquiry sooner at any time, unless we are legally required to keep it.

How your data is protected

The website is served over an encrypted HTTPS connection. Access to the mailbox and hosting account is restricted and protected by authentication. The contact form includes basic anti-spam measures and validates submitted data before processing it.

No method of transmission or storage is completely secure. We apply reasonable technical and organisational measures, but we cannot guarantee absolute security. Please do not send passwords, payment card details or other sensitive information through the contact form.

Your rights

Under the General Data Protection Regulation (GDPR) and French data protection law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, where there is no legal reason for us to keep it.
• Request restriction of processing, or object to processing based on legitimate interests.
• Request portability of the data you provided to us.
• Withdraw consent at any time, without affecting processing carried out before the withdrawal.

To exercise any of these rights, email contact@smartcodex.site. We will respond within the period required by law. If you believe your data has been handled incorrectly, you also have the right to lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).

Links to other websites

This website may contain links to external websites, for example project references or third-party tools. We are not responsible for the content or privacy practices of those websites. We recommend reading their own privacy policies before providing them with personal data.

Changes to this policy

This policy may be updated when our services, tools or legal obligations change. The date at the top of this page always shows when it was last revised. Significant changes will be reflected on this page, so it is worth reviewing it occasionally.

Questions about this policy can be sent to contact@smartcodex.site.