Privacy policy
This policy covers this website. It does not cover the platforms we build and run for individual charities — each of those has its own policy, written for that charity, and the charity is the controller of the data in it.
Last updated 29 September 2026.
Who we are
Kode by Kraft Ltd, registered in England and Wales, company number 16798677. We are the data controller for personal data collected through this website. For anything in this policy, email hello@kodebykraft.com.
What we collect, and why
- Enquiry form — your name, email address, phone number if you give one, and the subject and content of your message. We use it to answer you and to carry on the conversation about work. Lawful basis: legitimate interests, in responding to someone who has approached us about our services.
- Booking a call — your name, email address, role and charity name, plus anything you add in the notes. Bookings are taken through Cal.com, which adds the call to our Google Calendar and creates the Google Meet link. We use it to hold the call and follow up on it. Lawful basis: legitimate interests, in responding to someone who has asked to speak to us.
- Newsletter — your email address, and which page you signed up from. We use it to send you what you subscribed to and nothing else. Lawful basis: consent, which you can withdraw at any time using the unsubscribe link in any email or by emailing us.
- Server logs — our hosting provider records IP addresses and request details to keep the site available and secure. Lawful basis: legitimate interests, in operating a site that stays up and is not abused.
Who else sees it
Our hosting and database providers, who process it on our instructions under contract; Cal.com and Google, which handle call bookings, calendars and video links; and our email provider when we reply to you. We do not sell personal data, and we do not share it with anyone for their own marketing.
Where it is held, and for how long
Data is held on servers in the UK or the European Economic Area. Where a provider processes data outside the UK, we rely on the UK International Data Transfer Addendum or an adequacy decision.
Enquiries are kept for two years from our last contact with you, so we can pick up a conversation that restarts. Newsletter subscriptions are kept until you unsubscribe. Server logs are kept for 90 days.
Your rights
Under UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it or delete it, object to us processing it, or ask us to restrict what we do with it. Email hello@kodebykraft.com and we will respond within one month.
If you are not satisfied with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If we change this policy we will update the date at the top. Material changes that affect how we use data you have already given us will be notified to you directly.