Privacy Policy

Codika is operated by Codika SRL, a Belgian private limited company.

• Registered office: Clos des Sept Bonniers 4, 1390 Grez-Doiceau, Belgium
• VAT / company number: BE 1036.759.556
• Contact: hello@codika.io

We act as the data controller for the information described below, unless we process data on your behalf as part of a client engagement (in which case a separate Data Processing Agreement applies).

When you contact us by email or through our site

We keep your email address, name, company, and the content of your message, so we can reply and follow up.

When you book a call

Bookings are handled by Lemcal (lemcal.com). Lemcal receives your name, email, and scheduling preferences to manage the appointment. We receive the same information via Lemcal.

When you visit our website

We use Vercel (our hosting provider) to serve the site. Vercel keeps basic access logs (IP address, timestamps, user agent) for security and performance. We do not run third-party analytics or advertising trackers.

When we work together as a client

During a project, we may process business data that you share with us. Those processing activities are governed by the project contract and a Data Processing Agreement (DPA) signed with you.

Depending on the activity, we rely on one or more of the following:

• Our legitimate interest in operating and communicating about our business
• Your consent, where applicable
• Performance of a contract with you
• Compliance with legal obligations (e.g. invoicing, accounting)

• Email exchanges and contact data: up to 3 years after our last interaction, unless we’re still in an active discussion or contract.
• Call booking data: managed by Lemcal. We keep a summary of the meeting for as long as the project or relationship requires.
• Client project data: as specified in the project DPA, typically returned or deleted at the end of the engagement.
• Legal and accounting records: kept for the duration required by Belgian law (typically 7 years for invoices).

We share data only with the subprocessors needed to run our operations:

• Hosting: Vercel (United States, with EU-appropriate safeguards)
• Email: Google Workspace (Google Ireland Limited)
• Call scheduling: Lemcal (Poland)
• AI services used during client engagements: only where specified in the project DPA, never with personal data of our website visitors

All providers are bound by written agreements and GDPR-appropriate safeguards.

Some of our providers are based outside the EU (e.g. Vercel in the US). Where that’s the case, we rely on Standard Contractual Clauses or equivalent safeguards as required by GDPR.

Under the GDPR, you can:

• Request access to your data
• Ask for correction or deletion
• Ask for a copy in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time

To exercise any of these, email us at hello@codika.io. We respond within 30 days.

You also have the right to file a complaint with the Belgian Data Protection Authority (Autorité de Protection des Données, autoriteprotectiondonnees.be).

We don’t set tracking cookies. Our site may use a session cookie strictly required to remember your language preference. No analytics or marketing cookies are used.

If we update this policy materially, we’ll update the “last updated” date above and, where appropriate, contact you directly.

Questions, requests, or complaints: hello@codika.io