Privacy policy

This privacy policy explains how AS Code (“we”, “us”, “our”) processes personal data when you visit ascodeuk.com, use our services, contact us, subscribe to updates, or interact with our IT and digital marketing offerings.

We are committed to transparency and lawful processing. This policy is designed for customers and visitors in the United Kingdom and European Economic Area, alongside other regions where we operate delivery teams.

1. Data controller

AS Code is the data controller for personal data described in this policy unless we state otherwise in a client agreement or data processing addendum.

For privacy enquiries, data subject requests, or complaints, contact us at ascodeuk@gmail.com. We will respond within one month for standard GDPR requests, or inform you if an extension is required.

2. Scope of this policy

This policy applies to our public website, contact and newsletter forms, sales and support communications, and delivery of IT, marketing, consultancy, and employment-related services where we act as controller.

When we process personal data solely on a client’s instructions (for example, as a processor on your CRM or analytics stack), our processing is governed by your contract and applicable data processing terms—not this policy alone.

3. Personal data we collect

Information you provide

• Identity and contact details (name, email, phone, company, job title).
• Enquiry and project information submitted via forms, email, or calls.
• Newsletter subscription preferences.
• Billing and contractual information where you become a client.
• Visa, relocation, or employment programme details where relevant to consultancy or placement services.

Information collected automatically

• Device and browser type, approximate location (derived from IP), pages viewed, and referral source.
• Technical logs required for security, uptime, and abuse prevention.
• Cookie and similar technology data as described in our cookie section.

Information from third parties

• Professional references, employers, or partners where you authorise us to obtain information.
• Publicly available business information used for B2B outreach where permitted by law.

4. How and why we use personal data

We use personal data for the following purposes and legal bases under UK GDPR:

• To respond to enquiries and provide quotes (contract steps / legitimate interests in running our business).
• To deliver IT, marketing, consultancy, and employment services (performance of contract).
• To send service updates and, where permitted, marketing communications (consent or legitimate interests with opt-out).
• To operate, secure, and improve our website and infrastructure (legitimate interests).
• To comply with legal, tax, and regulatory obligations (legal obligation).
• To establish, exercise, or defend legal claims (legitimate interests / legal claims).

5. Cookies and similar technologies

We use essential cookies to run the site (for example, security, load balancing, and theme preferences where stored locally).

Where we use analytics or marketing tags, we aim to configure them with privacy-preserving settings and, where required, will request consent before non-essential cookies are placed.

You can control cookies through your browser settings. Blocking essential cookies may affect site functionality.

6. Sharing and processors

We do not sell personal data. We share data only where necessary:

• Hosting, email, CRM, analytics, payment, and collaboration providers acting as processors under contract.
• Professional advisers (legal, accounting) under confidentiality duties.
• Authorities when required by law or to protect rights and safety.
• Successors in the event of a merger or asset transfer, subject to appropriate safeguards.

Sub-processors

Where we act as processor for clients, we use sub-processors only in line with agreed terms and notify clients when required.

7. International transfers

We operate with teams in the United Kingdom and Bangladesh. Where personal data is transferred outside the UK or EEA, we implement appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses, or adequacy decisions, as applicable.

You may request further information about transfer mechanisms by contacting us.

8. Data retention

We retain personal data only as long as necessary for the purposes above:

• Enquiry records: typically up to 24 months unless a client relationship continues.
• Client project and contract records: duration of contract plus statutory limitation periods.
• Newsletter data: until you unsubscribe or we retire the list.
• Security logs: limited periods aligned with operational need.

9. Your rights

Depending on applicable law, you may have the right to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing is consent-based.

You may lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or your local EU supervisory authority.

We may need to verify identity before fulfilling requests. We will not discriminate against you for exercising your rights.

10. Security

We apply administrative, technical, and organisational measures appropriate to the risk, including access controls, encryption in transit where supported, monitoring, and staff confidentiality obligations.

No method of transmission or storage is completely secure; we encourage strong passwords and prompt reporting of suspected incidents.

11. Children

Our services are directed at businesses and adults. We do not knowingly collect personal data from children under 16. Contact us if you believe we have collected such data inadvertently.

12. Changes to this policy

We may update this policy to reflect legal, technical, or business changes. The “Last updated” date at the top will change, and material updates may be highlighted on the website or communicated to active clients where appropriate.

13. Contact

Email: ascodeuk@gmail.com

Postal enquiries: use the office details published on our website contact page.