Privacy Policy

1. Who we are

Code & Wander Ltd is a UK-registered company. This policy explains how we collect, use, and protect your personal data when you visit our website, contact us, or work with us.

‍

2. What information we collect

We only collect the information we need to do our job:

• Information you share with us
  • Name, email, company details, job title (via contact forms, newsletter signups, or direct communication).
  • Project information, brand assets, or files you send us during a collaboration.
  • Business information needed for contracts, billing, and payments.
  • Questions you type into our AI assistant, and whether you rated its answer useful (see section 4).
• Information we collect automatically
  • Technical details like IP address, browser type, and device (via analytics tools).
  • Cookies to understand how people use our site and improve performance.

‍

3. How we use your information

We use your data to:

• Respond to enquiries and manage client relationships.
• Deliver our services (design, development, consulting).
• Send occasional updates, case studies, or news (if you’ve opted in).
• Improve our website and marketing through analytics.

We’ll never sell your data.

‍

4. Ask Code & Wander (our AI assistant)

Parts of our site let you ask a question and get an answer built for you as a page. Here's what happens to what you type.

Your question goes to Anthropic. The assistant is powered by Claude, made by Anthropic, and your question is processed on Anthropic's servers in the United States in order to generate an answer. Anthropic does not use it to train their models.

Please don't type anything private into it. It's a question box on a marketing site, not a support channel or a secure form. If you need to tell us something confidential, email us at hello@codeandwander.com instead.

We keep the questions for 90 days. We read back what people have asked so we can see whether the assistant is answering well and what our site is missing. Questions are stored on their own — no name, no email address, no IP address, no cookie and no account is stored alongside them, so we cannot tell who asked what.

Answers are cached for up to 7 days. A page the assistant builds is kept briefly so the same question can be answered instantly next time, and so a link to it keeps working. After that it's deleted.

If you rate an answer, we store that rating against that page so we know which answers are landing. It isn't connected to you.

We count how the assistant is used — that a question was asked, that an answer was shown or failed, how it was rated — in Google Analytics, under the same cookie and consent controls as the rest of our site. The text of your question is never sent to Google Analytics.

We count requests per IP address for up to 48 hours to stop the assistant being abused. Those counters hold a number and nothing else.

Our lawful basis for the above is legitimate interest: running and improving our own website. If you'd rather we didn't, email hello@codeandwander.com.

‍

5. Our GDPR commitment

We follow the principles set out in the UK GDPR and Data Protection Act, which require that personal data is:

• Processed fairly, lawfully, and transparently.
• Collected for specified purposes and not used in incompatible ways.
• Limited to what is necessary.
• Accurate and kept up to date.
• Retained only as long as necessary.
• Protected with appropriate security.

We also operate with a “privacy by design” approach — meaning we think about privacy and security from the start when creating systems, processes, or services.

Depending on the situation, we may act as:

• A data controller (when we collect information directly, e.g. enquiries).
• A data processor (when handling personal data on behalf of clients).

‍

6. Lawful bases for processing

We rely on the following lawful bases:

• Consent — e.g. for marketing emails.
• Contract — e.g. to provide services you’ve asked for.
• Legitimate interest — e.g. to maintain client relationships, run analytics, or improve our services.

‍

7. Sharing your data

We only share your data when necessary:

• With trusted third-party tools (e.g. Google Analytics, HubSpot, MailerLite, Instantly, Clay, Webflow forms, Anthropic [which powers our AI assistant], Cloudflare [which hosts it]).
• With subcontractors or freelancers directly involved in your project.
• If required by law.

We make sure partners handle your data responsibly and securely.

‍

8. Data storage & security

• Data is stored on secure cloud services.
• Enquiry emails are kept for up to 3 years.
• Client project data is retained only as long as needed for the contract (or as agreed).
• Access is restricted to our team and trusted collaborators.
• Questions asked of our AI assistant are kept for 90 days; the pages it generates are cached for 7 days.

‍

9. International transfers

Some of our providers are based outside the UK/EU (for example, US-based SaaS tools). Where that’s the case, we rely on recognised safeguards such as Standard Contractual Clauses.

‍

10. Your rights

Under GDPR, you have the right to:

• Be informed about how your data is used.
• Access, correct, or delete your data.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent (e.g. unsubscribe from marketing emails).

To exercise these rights, email hello@codeandwander.com. We’ll respond within the statutory timeframe.

‍

11. Data breaches

If a personal data breach occurs, we:

• Escalate and investigate it immediately.
• Notify affected clients within 24 hours of confirmation.
• Support clients with reporting to the ICO (within 72 hours where required).
• Take corrective action to prevent recurrence.

‍

12. Cookies

Our website uses cookies to:

• Make the site function properly.
• Analyse traffic and performance.
• Support marketing campaigns.

You can adjust or disable cookies in your browser at any time.

Our AI assistant doesn't set cookies of its own. It uses your browser's session storage to remember which answers you've already rated, which clears when you close the tab.

‍

13. Updates to this policy

We may update this policy occasionally. When we do, we’ll post the new version here and update the date above.

‍

14. Contact us

For privacy-related questions, contact us at:

Code & Wander Ltd
Email: hello@codeandwander.com