Privacy Notice & Cookie Policy
Last updated: November 3rd, 2025
1. INTRODUCTION
We respect your privacy and are committed to protecting your personal data. This Privacy Notice explains how CodeHaven LTD (“we”, “us”, “our”) collects and uses your personal data when you:
We comply with EU General Data Protection Regulation (EU GDPR) in the processing of personal data.
- visit our website at codehaven.ltd; or
- submit an enquiry via our online contact form.
We comply with EU General Data Protection Regulation (EU GDPR) in the processing of personal data.
2. KEY TERMS
TERM | MEANING |
Data Controller | The party responsible for determining the purposes and means of processing your personal data – this is us. |
Data Subject | You - The individual whose data is processed |
Personal Data | Any information relating to an identified or identifiable individual |
Processing | Any operation performed on personal data (collection, storage, use, etc.). |
3. DATA CONTROLLER
CodeHaven LTD
Address: Trust Company Complex, Ajeltake Road, Ajeltake Island, MH96960, Majuro, Marshall Islands
Email: info@codehaven.ltd
We do not currently appoint a Data Protection Officer. Please contact us directly with any privacy-related questions.
Address: Trust Company Complex, Ajeltake Road, Ajeltake Island, MH96960, Majuro, Marshall Islands
Email: info@codehaven.ltd
We do not currently appoint a Data Protection Officer. Please contact us directly with any privacy-related questions.
4. PERSONAL DATA WE COLLECT ABOUT YOU
We are committed to collecting and processing only the personal data that is necessary and relevant for the purposes for which it is collected. We strive to ensure that the data we hold is adequate, limited to what is required, and kept up to date, in accordance with the principle of data minimization.
The categories of personal data that we collect and process are the following:
(А) Contact-form data (name, e-mail, phone number, message content, IP address and timestamp).
(B) Server access logs
(i) IP address,
(ii) date/time,
(iii) user-agent string,
(iv) URL accessed
(C) Cookies
At the moment we do not use any non-essential cookies. The cookies we use (if any) are necessary for us to deliver to you with the website content and establish the security measures. The legal bases for our use of these cookies is legitimate interest.
The categories of personal data that we collect and process are the following:
(А) Contact-form data (name, e-mail, phone number, message content, IP address and timestamp).
(B) Server access logs
(i) IP address,
(ii) date/time,
(iii) user-agent string,
(iv) URL accessed
(C) Cookies
At the moment we do not use any non-essential cookies. The cookies we use (if any) are necessary for us to deliver to you with the website content and establish the security measures. The legal bases for our use of these cookies is legitimate interest.
5. DO YOU HAVE TO PROVIDE YOUR DATA?
Question | Our answer |
Is it required by law? | No. We are not under any statutory obligation to collect your personal data. |
Is it required to enter (or prepare) a contract? | Yes, partly. To respond to your enquiry we must have the Contact-Form Data |
Optional data | Phone number – helps us contact you faster but not mandatory. Analytics consent – purely optional; the site works without it. Marketing-email checkbox – optional; unticked by default. |
What happens if you don’t provide the required fields? | We will be unable to process or reply to your enquiry. You will still be able to browse the public content of the website. Refusing analytics or marketing consent has no negative consequences. |
We will always make it clear on the form which fields are required (marked with an asterisk *) and which are optional.
6. HOW YOUR PERSONAL DATA IS COLLECTED
We collect most of this personal data directly from you via our website or through Contact/enquiry form.
Your device/browser provides technical and usage data when visiting our Website.
Your device/browser provides technical and usage data when visiting our Website.
7. WHY WE PROCESS YOUR PERSONAL DATA AND RETENTION PERIOD
The table below explains what we use your personal data for and why.
We keep your personal data only for as long as necessary to fulfil the purposes described in this notice or to comply with legal obligations.
We keep your personal data only for as long as necessary to fulfil the purposes described in this notice or to comply with legal obligations.
Data Categories
Purpose
Processing operation
Lawful basis
Retention Period
Contact Form Data
Communications with you (not related to marketing)
inform about changes in relation to this Privacy Notice (- GDPR)
Compliance with a legal obligation to which we are subject (Art. 6(1)(c))
7 months, then deleted
Contact Form Data
Responding to your enquiry
Legitimate interest (Art. 6(1)(f))
7 months, then deleted
Server access logs
Ensuring website security/diagnostic purposes and availability
Establishing server-to-user communication
Legitimate interest (Art. 6(1)(f))
Up to 5 weeks
We do not use your data for profiling or automated decision‑making.
8. SPECIAL CATEGORY PERSONAL DATA
We do not knowingly collect, process, or transmit any special categories of personal data, including but not limited to: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for identification, health information, or data relating to a person’s sex life or sexual orientation.
In the event that we become aware that such special category data has been collected inadvertently or without proper authorization, we will take prompt measures to delete or restrict access to this data, without prior notice to the individual concerned, to ensure compliance with applicable data protection laws.
In the event that we become aware that such special category data has been collected inadvertently or without proper authorization, we will take prompt measures to delete or restrict access to this data, without prior notice to the individual concerned, to ensure compliance with applicable data protection laws.
9. WHERE YOUR PERSONAL DATA IS HELD
Your personal data are held EU.
10. YOUR DATA PROTECTION RIGHTS
You have the following rights, which you can exercise free of charge at any time:
1. Access: The right to be provided with a copy of your personal data
2. Rectification: The right to require the correction of any inaccurate or incomplete data
3. Erasure: The right to require the deletion of your personal data—in certain situations
4. Restriction of processing: The right to require the restriction of processing of your personal data in certain circumstances, eg if you contest the accuracy of the data
5. Data portability: The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
6. To object: The right to object:
7. Not to be subject to automated individual decision making: The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you
8. The right to withdraw consent: If you have provided us with a consent to use your personal data you have a right to withdraw that consent easily at any time. Withdrawing consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn
For more information on each of those rights, including the circumstances in which they apply, please contact us (see ‘How to contact us’ below).
If you would like to exercise any of those rights, please:
1. Access: The right to be provided with a copy of your personal data
2. Rectification: The right to require the correction of any inaccurate or incomplete data
3. Erasure: The right to require the deletion of your personal data—in certain situations
4. Restriction of processing: The right to require the restriction of processing of your personal data in certain circumstances, eg if you contest the accuracy of the data
5. Data portability: The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
6. To object: The right to object:
- at any time to your personal data being processed for direct marketing (including profiling);
- in certain other situations to our continued processing of your personal data, eg processing carried out for the purpose of our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims
7. Not to be subject to automated individual decision making: The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you
8. The right to withdraw consent: If you have provided us with a consent to use your personal data you have a right to withdraw that consent easily at any time. Withdrawing consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn
For more information on each of those rights, including the circumstances in which they apply, please contact us (see ‘How to contact us’ below).
If you would like to exercise any of those rights, please:
- email, call or write to us—see below: ‘How to contact us’ and provide enough information to identify yourself (eg your full name, address and customer or matter reference number) and any additional identity information we may reasonably request from you; and
- let us know what right you want to exercise and the information to which your request relates.
11. KEEPING YOUR PERSONAL DATA SECURE
We have appropriate security measures to prevent personal data from being lost accidentally, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
We also have procedures to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
12. HOW TO COMPLAIN
Please contact us if you have any queries or concerns about our use of your personal data (see below ‘How to contact us’). We hope we will be able to resolve any issues you may have.
You also have the right to lodge a complaint with Data Protection Regulator.
Please contact us if you would like further information.
You also have the right to lodge a complaint with Data Protection Regulator.
Please contact us if you would like further information.
13. CHANGES TO THIS PRIVACY NOTICE
We may revise this Privacy Notice from time to time to reflect.
- changes in the law or regulatory guidance;
- updates to our website functionality or analytics tools; or
- new purposes for which we process your personal data.
14. HOW TO CONTACT US
You can contact us by email or telephone specified in the Clause 3 hereinabove if you have any questions about this privacy notice or the information we hold about you, to exercise a right under data protection law or to make a complaint.
