CODEPOLDER / REPREVI
Privacy notice
Terms version: 2026-10-26.2
Controller and contact
Codepolder / Reprevi is the controller for this site’s order, appointment and support data. Registration details and the contact address are shown below. Contact us to exercise privacy rights or raise a complaint; no paid consultation is required for that purpose.
Data and purposes
We process name, reply/billing email, website URL, project description, customer type/company, chosen service and appointment, time-zone preference when permitted, terms/early-performance declarations, Stripe payment references and operational security logs. We use these to take steps toward a contract, process payment, perform the service, provide confirmations, maintain accounts, prevent abuse and handle legal obligations. Do not submit passwords or sensitive personal records in checkout forms. We do not store full card numbers.
Legal bases and recipients
Contract and requested pre-contractual steps support order processing; legal duties support tax/financial records; legitimate interests support proportionate security and dispute handling. Optional preference storage relies on consent. Payment information is processed by Stripe under its applicable privacy terms. Hosting/network providers, authorised team members, email and Telegram providers receive the information needed for their role. Payment and order messages may include project details; minimise unnecessary personal data. Where a processor relationship applies, appropriate contractual safeguards are required.
Retention and transfers
Abandoned unpaid drafts are normally removed after 24 hours, subject to unresolved payment reconciliation. Operational notification copies are normally retained for 90 days. Contract, payment and tax records are retained for applicable statutory periods, generally at least seven years and longer where required, including certain VAT schemes. Security logs follow a proportionate operational retention period. Providers may process data outside the EEA; applicable adequacy decisions or other lawful safeguards are used where required. Contact us for relevant transfer and retention information.
GDPR rights
Subject to applicable conditions, you may request access, correction, deletion, restriction, portability or object to processing. You can withdraw optional-storage consent at any time using Cookie settings without affecting prior lawful processing or contractual payment. We verify requests proportionately and respond within applicable deadlines. You may complain to the Dutch Autoriteit Persoonsgegevens or another competent supervisory authority. We do not make solely automated decisions producing legal or similarly significant effects about you.
US privacy choices
Where applicable state law grants rights, you may request access/knowledge, correction, deletion, portability and appeal of a denied request, and use an authorised agent subject to verification. We do not sell personal data or share it for cross-context behavioural advertising and do not use sensitive data to infer characteristics. Global Privacy Control is respected as an opt-out signal for any applicable sale/sharing or targeted-advertising processing. Exercising applicable privacy rights does not result in unlawful discrimination. Not every state law applies to every business; this notice does not claim otherwise.
Cookies and local storage
Essential storage remembers your privacy decision for up to 180 days and supports requested security/payment functions. Optional storage remembers your selected time zone only after approval. Analytics and advertising trackers are not deployed. Approve, Disapprove and Change are available in the banner, and Cookie settings remains in the footer. Rejecting optional storage does not prevent a purchase. Stripe may use its own security/payment cookies on its hosted checkout; see Stripe’s privacy and cookie notices.
Your project’s data
Service delivery may involve separate customer-system access, processing instructions and security requirements. These are agreed before access. You remain responsible for the lawfulness and accuracy of supplied data and for minimising it. This notice covers our site and commercial relationship; it does not replace an agreed processing contract for your production data.