Privacy Policy

Codemediqo Ltd

Last updated: 25/05/2026

This Privacy Policy explains how Codemediqo Ltd (“we”, “us” or “our”) collects, uses and protects personal data when you visit our website [www.codemediqo.com] or interact with us. We are a digital marketing agency providing services to private healthcare practices, and we are committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Codemediqo Ltd is the “data controller” responsible for your personal data. Our details are:

• Company name: Codemediqo Ltd
• Registered company number: 16953269
• Registered address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
• Email: [info@codemediqo.co.uk]

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. The personal data we collect

We collect and process the following categories of personal data:

Information you give us

• Contact and enquiry data — when you complete a contact or enquiry form, this may include your name, email address, telephone number, business or practice name, and the content of your message.
• Marketing data — when you subscribe to our newsletter or marketing communications, we collect your name and email address and your communication preferences.
• Correspondence — records of communications between you and us, including emails and messages.

Information we collect automatically

• Technical and usage data — when you visit our website we may collect your IP address, browser type and version, device information, pages visited, time spent on pages and referral sources. We collect this through cookies and analytics tools (see Section 7).

We do not knowingly collect special category data (such as health information) about website visitors. Where we process health-related data on behalf of our clients as part of our marketing services, we do so as a data processor under a separate written agreement, and that processing is not covered by this policy.

3. How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for processing your personal data. The table below sets out how and why we use it.

Responding to enquiries

• Purpose: To respond to enquiries submitted via our contact forms and to discuss our services.
• Lawful basis: Our legitimate interests (to respond to and manage enquiries) and, where relevant, to take steps at your request before entering into a contract.

Marketing communications

• Purpose: To send newsletters, offers and updates about our services.
• Lawful basis: Your consent, which you may withdraw at any time, or our legitimate interests in marketing to existing business clients in line with the “soft opt-in” under PECR.

Website analytics

• Purpose: To understand how visitors use our website and to improve it.
• Lawful basis: Your consent, given through our cookie banner.

Providing our services and administration

• Purpose: To manage our relationship with clients, fulfil contracts, keep records and comply with our legal obligations.
• Lawful basis: Performance of a contract, our legitimate interests, and compliance with legal obligations.

4. Marketing and your choices

We will only send you marketing communications where you have consented or where we are otherwise permitted to do so by law. Every marketing email we send includes an unsubscribe link, and you can opt out at any time by clicking it or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

5. Who we share your data with

We do not sell your personal data. We may share it with trusted third parties who help us run our business, including:

• IT, hosting and website service providers;
• email marketing and CRM platforms;
• analytics providers (such as Google Analytics);
• professional advisers such as accountants and lawyers; and
• regulators or authorities where required by law.

All such providers are required to keep your data secure and to process it only on our instructions. Where a provider acts as our processor, we put a written contract in place that meets UK GDPR requirements.

6. International transfers

Some of our service providers may be located outside the UK. Where we transfer personal data outside the UK, we ensure an appropriate safeguard is in place, such as an adequacy decision or the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses).

7. Cookies and analytics

Our website uses cookies and similar technologies. Cookies are small files placed on your device that help the site function and allow us to understand how it is used.

• Strictly necessary cookies — required for the website to work and cannot be switched off.
• Analytics cookies — we use Google Analytics 4 (GA4) to measure how visitors use our site. These are only set with your consent.

When you first visit our site you will see a cookie banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time, and you can also control cookies through your browser settings. For more information about Google Analytics and how to opt out, see Google’s privacy tools.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Enquiry data is typically held for up to 24 months after our last contact unless you become a client. Marketing data is held until you unsubscribe. Client records are generally kept for up to six years after the end of our relationship to meet legal and tax obligations.

9. How we protect your data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no transmission over the internet is completely secure, and we cannot guarantee the absolute security of data sent to us.

10. Your rights

Under UK GDPR you have the following rights in relation to your personal data:

• Access — to request a copy of the data we hold about you.
• Rectification — to have inaccurate data corrected.
• Erasure — to ask us to delete your data in certain circumstances.
• Restriction — to ask us to limit how we use your data.
• Objection — to object to processing based on our legitimate interests or to direct marketing.
• Portability — to receive your data in a portable format.
• Withdraw consent — where we rely on consent, to withdraw it at any time.

To exercise any of these rights, contact us using the details in Section 1. We will respond within one month. There is normally no charge.

11. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

• Website: org.uk
• Helpline: 0303 123 1113

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review it periodically.