The detail, in plain English

The law says we have to tell you this the first time we contact you. It is short, so here it is in full.

What we hold about you

Your name, your role in the business, the business name and website, and the address we wrote to. If we found you on LinkedIn, the link to your profile. If you are connected to Mark there, your name, company and job title as LinkedIn shows them to him. Nothing else: no personal email, no mobile, no home address.

Where it came from

Your business website, usually the about, team or contact page. The public Companies House register, which we check so that we only email limited companies. If you are connected to Mark on LinkedIn, the list of connections LinkedIn lets him download from his own account; we do not use the email address in it. And the ordinary responses your website sends to any visitor, plus Google's public PageSpeed Insights test of your homepage, which is where the thing we wrote to you about came from.

Why we are allowed to

Legitimate interests, under UK GDPR Article 6(1)(f). We are a small business telling another business something true and useful about its own website. We have written down why we think that is fair, and you can ask to see it. Emails, and LinkedIn messages to people Mark is connected to, only go to limited companies, which is what the electronic marketing rules require.

What we did to your website

Nothing that your own browser does not do. We loaded your homepage and contact page the way a visitor would, read what came back, and checked a short list of well-known public addresses. We may also have run Google's free PageSpeed Insights test on your homepage, which anyone can do. We did not log in, submit any form, scan, or try anything. If you would like the list of exactly what was requested, ask and we will send it.

Who else sees it

Nobody. What we found on your site is between us and you. We do not publish it, use it as an example, mention it to another business, or pass your details to anyone.

How long we keep it

Six months from our last contact, then it is deleted. If you say no, we keep only your address on a do-not-contact list so that we cannot write to you again by mistake.

Questions people ask

If yours is not here, reply to the message or email info@codo.digital.