Legal
Privacy Policy
What we collect when you contact us, who else touches it, and how to get it removed.
Last updated: 4 August 2026
Who we are
Codenest Ltd (“Codenest”, “we”, “us”) is an advisory practice providing Fractional CTO and Fractional CFO services to UK startups. We are the data controller for the personal data described on this page.
Codenest Ltd is registered in England and Wales, company number 10909723. Registered office: Clearways Accountants, Clearways, Colley Way, Reigate RH2 9JH, United Kingdom. VAT registration number 275 3255 93.
You can reach us about anything on this page at [email protected].
What we collect, and when
We only collect personal data that you type into a form yourself. There are two places on this site where that happens.
Strategy call request form
Homepage contact section and /contact
- Your name (required)
- Email address (required)
- Company or startup name (optional)
- Which service you are interested in — Fractional CTO, Fractional CFO, both, or a co-founder partnership (optional)
- Your message (required)
Runway calculator
/tools/runway-calculator
- Email address, only if you choose to have your projection sent to you
- The figures you enter into the calculator, which are sent alongside that projection
We do not run analytics, advertising or tracking scripts on this site, and we do not set cookies of our own. There is no cookie banner because there is nothing to consent to.
Why we use it, and on what basis
We use what you send us for one purpose: to reply to you and, if it goes further, to scope and run an engagement. We do not sell personal data, and we do not add you to a marketing list on the strength of an enquiry.
Our lawful basis under UK GDPR is legitimate interests — responding to someone who has deliberately asked us to get in touch — and, where an engagement follows, performance of a contract.
Who else processes it
- EmailJS delivers both forms on this site. Everything you submit passes through EmailJS on its way to our inbox.
- Our email provider holds the resulting message, in the same way it holds any other email we receive.
- GitHub Pages hosts this site. GitHub processes standard server log data, including your IP address, when you load a page. This happens on every website you visit and is not something we collect or can see.
- Giscus and GitHub Discussions power the comment section at the bottom of blog posts. Comments are entirely optional, require a GitHub account, and are public. Anything you post there is handled by GitHub under its own privacy policy.
The contact form contains an optional email-verification step that would check an address against a third-party validation service. It is switched off, and no address is sent anywhere for verification. If we ever enable it, this page will say so before it goes live.
How long we keep it
Enquiries that do not lead to an engagement are deleted within 24 months. Records relating to an actual engagement are kept for as long as we need them to meet our legal, tax and accounting obligations — normally six years after the engagement ends.
Your rights
Under UK GDPR you can ask us to:
- Tell you what personal data we hold about you, and give you a copy
- Correct anything that is wrong
- Delete it
- Restrict or object to how we use it
- Transfer it to someone else
Email [email protected] and we will respond within one month. If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
If we change how we handle personal data, we will update this page and move the date at the top. The current version is always the one published here.