Privacy Policy

Last updated: 30th Sept 2025

‍

At Code & Wander, your privacy matters to us. We’re a London-based digital agency that designs and builds websites, products, and experiences for ambitious brands. We collect and use some personal data to run our business and deliver our services — and we want to be upfront about what, why, and how.

If you have any questions, you can reach us at hello@codeandwander.com.

‍

1. Who we are

Code & Wander Ltd is a UK-registered company. This policy explains how we collect, use, and protect your personal data when you visit our website, contact us, or work with us.

‍

2. What information we collect

We only collect the information we need to do our job:

  • Information you share with us
    • Name, email, company details, job title (via contact forms, newsletter signups, or direct communication).
    • Project information, brand assets, or files you send us during a collaboration.
    • Business information needed for contracts, billing, and payments.
  • Information we collect automatically
    • Technical details like IP address, browser type, and device (via analytics tools).
    • Cookies to understand how people use our site and improve performance.

‍

3. How we use your information

We use your data to:

  • Respond to enquiries and manage client relationships.
  • Deliver our services (design, development, consulting).
  • Send occasional updates, case studies, or news (if you’ve opted in).
  • Improve our website and marketing through analytics.

We’ll never sell your data.

‍

4. Our GDPR commitment

We follow the principles set out in the UK GDPR and Data Protection Act, which require that personal data is:

  • Processed fairly, lawfully, and transparently.
  • Collected for specified purposes and not used in incompatible ways.
  • Limited to what is necessary.
  • Accurate and kept up to date.
  • Retained only as long as necessary.
  • Protected with appropriate security.

We also operate with a “privacy by design” approach — meaning we think about privacy and security from the start when creating systems, processes, or services.

Depending on the situation, we may act as:

  • A data controller (when we collect information directly, e.g. enquiries).
  • A data processor (when handling personal data on behalf of clients).

‍

5. Lawful bases for processing

We rely on the following lawful bases:

  • Consent — e.g. for marketing emails.
  • Contract — e.g. to provide services you’ve asked for.
  • Legitimate interest — e.g. to maintain client relationships, run analytics, or improve our services.

‍

6. Sharing your data

We only share your data when necessary:

  • With trusted third-party tools (e.g. Google Analytics, HubSpot, MailerLite, Instantly, Clay, Webflow forms).
  • With subcontractors or freelancers directly involved in your project.
  • If required by law.

We make sure partners handle your data responsibly and securely.

‍

7. Data storage & security

  • Data is stored on secure cloud services.
  • Enquiry emails are kept for up to 3 years.
  • Client project data is retained only as long as needed for the contract (or as agreed).
  • Access is restricted to our team and trusted collaborators.

‍

8. International transfers

Some of our providers are based outside the UK/EU (for example, US-based SaaS tools). Where that’s the case, we rely on recognised safeguards such as Standard Contractual Clauses.

‍

9. Your rights

Under GDPR, you have the right to:

  • Be informed about how your data is used.
  • Access, correct, or delete your data.
  • Restrict or object to processing.
  • Request data portability.
  • Withdraw consent (e.g. unsubscribe from marketing emails).

To exercise these rights, email hello@codeandwander.com. We’ll respond within the statutory timeframe.

‍

10. Data breaches

If a personal data breach occurs, we:

  • Escalate and investigate it immediately.
  • Notify affected clients within 24 hours of confirmation.
  • Support clients with reporting to the ICO (within 72 hours where required).
  • Take corrective action to prevent recurrence.

‍

11. Cookies

Our website uses cookies to:

  • Make the site function properly.
  • Analyse traffic and performance.
  • Support marketing campaigns.

You can adjust or disable cookies in your browser at any time.

‍

12. Updates to this policy

We may update this policy occasionally. When we do, we’ll post the new version here and update the date above.

‍

13. Contact us

For privacy-related questions, contact us at:

Code & Wander Ltd
Email: hello@codeandwander.com

‍