Privacy Policy

Introduction

Made in Code ("we", "us", "our") respects your privacy and handles your personal data with care. This privacy policy explains what data we collect, why, on what legal basis, how long we retain it, and what rights you have under the General Data Protection Regulation (GDPR / UK GDPR equivalents).

Data controller

Made in Code is the data controller for personal data collected through this website. For privacy questions, contact privacy@madeincode.dev.

What we collect

We only collect data you actively provide via our forms (contact form, booking form): name, email address, optional phone and company name, your message and an optional preferred date/time slot. We also process your IP address temporarily for abuse prevention (rate limiting) and a CAPTCHA token from Cloudflare Turnstile to block automated submissions. Analytics cookies are only loaded after your explicit consent.

Purpose and legal basis

For handling contact and booking requests, we process your data on the basis of Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). For analytics and marketing, we rely on Art. 6(1)(a) GDPR (consent), which you can withdraw at any time via the cookie settings.

Retention periods

We apply the following retention periods, in line with our retention policy:

- Leads (contact form): 24 months from submission, for sales follow-up.

- Bookings: 36 months, for project history and financial record-keeping.

Submissions reach us by email and are kept in our mailbox; after the retention window expires they are deleted.

Sub-processors

To operate this site we use the following processors. We have a Data Processing Agreement (DPA) with each:

- Forward Email (mailbox and transactional email)

- netcup (server hosting, EU)

- Sentry (error monitoring, IP anonymisation enabled)

- Cloudflare Turnstile (CAPTCHA, privacy-friendly reCAPTCHA alternative)

International transfers

We aim to process personal data exclusively within the European Economic Area. Where a processor processes data outside the EEA, this is done on the basis of the European Commission's Standard Contractual Clauses (SCCs).

Cookies

We only set strictly necessary cookies required for the site to function (such as your language preference and your cookie consent). Analytics and marketing cookies are loaded only after your explicit consent via the cookie banner. See the Cookie Policy for the full inventory.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing. You can withdraw your cookie and marketing consent at any time. Send requests to privacy@madeincode.dev. We respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Changes

We may amend this privacy policy from time to time. The last updated date appears at the top of this page. For material changes we will request your cookie consent again.