Privacy Policy

This Privacy Policy explains how Dominic Harding t/a Code‑Flux ("we", "us", "our") collects, uses, stores and protects personal data when you visit our website, contact us, or use our services. We comply with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1. Who We Are

Trading name: Code‑Flux
Legal entity: Dominic Harding trading as ("t/a") Code‑Flux
Service address: 6th Floor - 37 Lombard Street - London - EC3V 9BQ
Email: info@code-flux.co.uk
Website: https://www.code-flux.co.uk

Depending on context, we act as a Data Controller (for our own business operations like enquiries and billing) and/or a Data Processor (when processing client data under a contract).

2. What Personal Data We Collect

  • Contact data: name, business name, email, phone number.
  • Enquiry data: information you submit through forms, email, or messages.
  • Client account/billing data: invoice details, payment status, transaction references (we do not store full card details).
  • Website usage data: IP address, device/browser data, page views, referrers, and cookie identifiers (where enabled).
  • Service delivery data: materials and data you provide to deliver services (may include customer reviews, website content, CRM exports, etc.).

3. How We Collect Data

  • Directly from you (forms, email, calls, contracts)
  • Automatically via cookies/analytics (where enabled and permitted)
  • From third parties where relevant (e.g., referrals, payment confirmations)

4. Lawful Bases

We process personal data under one or more of the following lawful bases:

  • Contract — to deliver services you request and manage the relationship.
  • Legitimate interests — to run and improve our business, maintain security, prevent fraud, and communicate with prospects.
  • Legal obligation — for accounting, tax, and compliance record‑keeping.
  • Consent — for non‑essential cookies and direct marketing where required by law.

5. How We Use Your Data

  • To respond to enquiries and provide quotes/audits
  • To deliver and support services
  • To invoice and process payments
  • To maintain website security and prevent misuse
  • To improve our website and services (analytics)
  • To send service updates or marketing (where permitted)

6. Marketing Communications

We may send business‑related updates where lawful. You can opt out at any time by using an unsubscribe link (where provided) or contacting us at info@code-flux.co.uk.

7. Cookies & Analytics

We use cookies and similar technologies for core functionality and, where enabled, analytics. Non‑essential cookies will only be used where you have provided consent (where required). See our Cookie Policy for details.

8. Who We Share Data With

We may share personal data with trusted service providers who help us operate our business and deliver services, such as:

  • Website hosting and infrastructure providers
  • Email and communications providers
  • Payments and invoicing providers
  • Analytics providers (where enabled)
  • Professional advisers (e.g., accountant) where necessary

We only share data where necessary and we require appropriate confidentiality and data protection safeguards.

9. International Transfers

Some providers may process data outside the UK. Where this happens, we use appropriate safeguards such as UK adequacy regulations or approved transfer mechanisms (e.g., the UK IDTA).

10. Data Retention

  • Enquiries: typically up to 24 months after last contact.
  • Client records: up to 6 years after the end of the engagement (to meet legal/accounting obligations).
  • Marketing: until you opt out or withdraw consent.
  • Analytics: retained according to the settings in the relevant tool (where enabled).

11. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, secure storage, and encrypted connections where feasible.

12. Your Rights

Under UK GDPR you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure (in certain circumstances)
  • Restrict or object to processing
  • Data portability (in certain circumstances)
  • Withdraw consent (where processing is based on consent)

To exercise your rights, contact info@code-flux.co.uk.

13. Complaints

If you are unhappy with how we handle personal data, please contact us first so we can resolve it. You can also complain to the UK Information Commissioner’s Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113

14. Changes to This Policy

We may update this policy from time to time. The latest version will always be published on this page.

Last updated: 11 January 2026.