Privacy policy.

When you interact with our website, we may collect:

• Contact form data — your name, email, business type, budget range, optional website URL, and the message you send us.
• WhatsApp messages — if you message us on WhatsApp, we see your phone number, your WhatsApp name, and what you send.
• Website grader checks — the web address you ask us to check, the result, and a one-way hashed version of your IP address used only for rate-limiting.
• Grader report emails — if you ask us to email you a report, the email address you give us, stored with that report.
• Technical metadata — your IP address and basic browser info, used briefly for rate-limiting and spam protection.

We use Google Analytics to understand which pages people visit and which forms get used. We don't use advertising pixels or marketing trackers, and if that ever changes we'll update this page first.

• To reply to your inquiry and follow up on potential work.
• To send the auto-reply confirming your message was received.
• If you ask for your grader report by email, to send it and one follow-up a few days later. We skip the follow-up if you've already replied, and reply “stop” to any email and we won't write again.
• To verify you're not a spam bot (honeypot + rate-limiting).
• We do not sell, rent, or share your data with advertisers or third-party marketers.

The only third parties that touch your data are:

• Hostinger — our email infrastructure provider. They process inbound and outbound email when you contact us.
• Vercel — hosts this website and the database that stores form submissions and grader results.
• Google — Google Analytics for visit statistics, and Google Sheets, where we keep a working copy of enquiries.
• WhatsApp — handles any conversation you start with us there, under its own privacy policy.
• Legal authority — if required by law (rare, but possible). We'd push back on overreach where reasonable.

• Contact form messages stay in our inbox unless you ask us to delete them.
• Rate-limit logs live in our server's memory for 10 minutes, then disappear.
• WhatsApp conversations stay in our WhatsApp unless you ask us to delete them.
• Website grader results are kept so repeat checks load instantly and so we can publish anonymous statistics about med spa websites. The hashed IP address can't be turned back into your IP.
• Grader report emails are kept like contact form messages: until you ask us to delete them.

You can ask us at any time to:

• Show you what personal data we have on you
• Correct or update it
• Delete it from our systems
• Stop processing it (object to use)

Email hello@codurasolutions.com with your request. We respond within 14 days.

Google Analytics sets its own cookies to count visits and sessions. We don't use advertising or marketing cookies. If you message us on WhatsApp, that conversation is handled by WhatsApp under its own privacy policy.

Our services are not directed at people under 18. We don't knowingly collect personal data from minors.

If we update this policy, the “Last updated” date above will change. For significant changes, we'll add a brief notice on the homepage so you don't miss it.