Privacy Policy
How we handle personal data for which we are the controller - our website, enquiries and billing.
This policy covers personal data we control - visitors to this website, people who enquire, and billing contacts. When we process your employees' data inside the CoDash platform, we act as a processor on our customer's behalf; that is governed by our Data Processing Agreement, and the employer is the controller.
1. Who we are
The controller is CoDash Ltd, a company registered in England and Wales (company no. 17390939) whose registered office is at 66 Paul Street, London EC2A 4NA, United Kingdom. CoDash Ltd is registered with the Information Commissioner's Office, registration ZC223521. For any privacy query, contact hello@codash.co.uk or 07337 158671.
2. The data we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Enquiry details (name, work email, company, message) | Reply to you and discuss whether CoDash suits your team | Legitimate interests (responding to your request) |
| Account & billing contacts (name, email, company, billing info) | Provide the Service, invoice and take payment | Contract; legal obligation (tax/accounting) |
| Website & server logs (IP, device/browser, pages) | Security, abuse prevention and keeping the site working | Legitimate interests (security and reliability) |
| Email correspondence and support | Support, service messages and records | Legitimate interests; contract |
| Website analytics (Google Analytics) | Understand how the marketing site is used so we can improve it | Consent (set only if you accept our cookie banner) |
We do not run advertising trackers or sell personal data. We use strictly necessary cookies and, only if you accept our cookie banner, Google Analytics - see our Cookie Policy.
3. Who we share it with
We use a small number of trusted providers who process data on our behalf under contract:
- Hosting - provided by JonesDigital, our affiliated hosting company, with servers located in the European Union.
- Email delivery - Brevo (an EU-based provider), to send platform emails such as invitations and notifications; and Google (Google Workspace) for our own correspondence.
- Payments - Stripe, to handle billing and card payments (we do not store card details).
We may also disclose data where required by law. We do not sell your data to anyone.
4. International transfers
We aim to keep personal data within the UK/EU; our hosting is in the European Union. Some providers (such as Google and Stripe) may process limited data outside the UK/EEA, in which case we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses.
5. How long we keep it
We keep enquiry data for up to 24 months after our last contact, account and billing records for as long as you are a customer and then as required for tax and legal purposes (typically 6 years), and logs for a short period. We delete or anonymise data when it is no longer needed.
6. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing, and to data portability, as applicable. To exercise any right, email hello@codash.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to help first.
If your personal data sits inside an employer's CoDash workspace, please direct requests to that employer (the controller); we will assist them as their processor under the DPA.
7. Security
We take security seriously: data is encrypted in transit, each customer runs on an isolated instance, access is role-based and logged, and privacy protections such as k-anonymity are built into the product. No system is perfectly secure, but we work to protect your data and to notify affected parties promptly if something goes wrong.
8. Changes
We may update this policy; the "last updated" date shows the current version, and we will flag material changes.
9. Contact
Email hello@codash.co.uk or call 07337 158671. See also our Terms of Service, Data Processing Agreement and Cookie Policy.