Where we got your details, and how to make it stop.
Short version: you run a business with a public website, we looked at the website, we found something worth telling you about, and we wrote to you at the business to say so. Your name and role came from your own website, or, if you are connected to Mark on LinkedIn, from that connection. That is the whole of it.
You were not added to a list. We will not write again unless you reply. One word back and we delete what we hold.
- Everything we know about you is on your own website, your LinkedIn profile or the public Companies House register
- One message, no chasing, no list
- Reply with the word no and that is the end of it

The detail, in plain English
The law says we have to tell you this the first time we contact you. It is short, so here it is in full.
What we hold about you
Your name, your role in the business, the business name and website, and the address we wrote to. If we found you on LinkedIn, the link to your profile. If you are connected to Mark there, your name, company and job title as LinkedIn shows them to him. Nothing else: no personal email, no mobile, no home address.
Where it came from
Your business website, usually the about, team or contact page. The public Companies House register, which we check so that we only email limited companies. If you are connected to Mark on LinkedIn, the list of connections LinkedIn lets him download from his own account; we do not use the email address in it. And the ordinary responses your website sends to any visitor, plus Google's public PageSpeed Insights test of your homepage, which is where the thing we wrote to you about came from.
Why we are allowed to
Legitimate interests, under UK GDPR Article 6(1)(f). We are a small business telling another business something true and useful about its own website. We have written down why we think that is fair, and you can ask to see it. Emails, and LinkedIn messages to people Mark is connected to, only go to limited companies, which is what the electronic marketing rules require.
What we did to your website
Nothing that your own browser does not do. We loaded your homepage and contact page the way a visitor would, read what came back, and checked a short list of well-known public addresses. We may also have run Google's free PageSpeed Insights test on your homepage, which anyone can do. We did not log in, submit any form, scan, or try anything. If you would like the list of exactly what was requested, ask and we will send it.
Who else sees it
Nobody. What we found on your site is between us and you. We do not publish it, use it as an example, mention it to another business, or pass your details to anyone.
How long we keep it
Six months from our last contact, then it is deleted. If you say no, we keep only your address on a do-not-contact list so that we cannot write to you again by mistake.
Questions people ask
If yours is not here, reply to the message or email info@codo.digital.
No. Everything we saw is what your site shows to any visitor. Most of what we write about is visible in a normal browser if you know where to look. We never try to get past a login, never submit forms, and never run scanning tools against anyone.
Because your website says you are the person who runs it. We use the general business address wherever there is one; if we used a named address, it is because that is the only one the business publishes.
Yes, for businesses. UK rules allow one-off marketing to limited companies as long as we say who we are and make it easy to say no, which we do. We do not email sole traders or partnerships, because for them the rules are different, and we check Companies House before writing to anyone.
Reply with the word no, or email info@codo.digital. It is immediate and permanent, and it covers email and LinkedIn together. You do not have to give a reason.
Yes. Email info@codo.digital and we will send it, and delete it if you ask.
Codo Digital Ltd, company number 12307247, registered office Duke House, Duke Street, Skipton, BD23 2HQ (visits by appointment only). We are registered with the Information Commissioner's Office, registration number ZC259284.
Tell us first and we will try to sort it. If that does not work, you can complain to the Information Commissioner at ico.org.uk.
