Who is responsible
The Code Bureau Ltd (trading as Cracking) is the data controller for this site. Company number 14474967. Registered office: 29a Drummond Walk, Melton Mowbray, United Kingdom, LE13 1JH. Contact us at hello@cracking.solutions.
What we collect
When you book a scoping call, send a brief, or use the contact form, we collect:
- name, email address, and phone number
- company name, address, and package preference, if you give them
- your project brief, message, and how you want to take the call
- the call time you pick
- payment records (amount, status, Stripe identifiers) — not your full card number
Card payments are handled by Stripe. We do not see or store your full card details.
Why we use it
We use this information to reply to enquiries, take payment, confirm the call, prepare for it, send you practical emails about the booking, and (if we go ahead) to quote and build. The legal basis is performing a contract with you, or taking steps before a contract, and our legitimate interest in running the studio and keeping records of paid bookings and enquiries.
We do not sell your data. We do not add you to a marketing list from checkout or the contact form.
Who processes it
- Stripe, for payment
- Supabase, for storing leads (hosted in the EU)
- Vercel, for hosting this site and the booking APIs
- Google, for Analytics (how the site is used)
- Meta, for the advertising pixel (page views, checkout, and completed scoping-call bookings)
- Microsoft Clarity, for heatmaps and session recordings that help us see where the site is confusing
- Resend, for emailing us when someone pays, picks a slot, or sends a contact-form message (when that is switched on)
Those companies only get what they need to provide that service.
How long we keep it
We keep booking and payment records for as long as we need them for the work, tax, and to handle disputes — typically up to six years for financial records. If you paid and then went no further, we still keep enough to show the payment and the call arrangement.
Cookies and similar
Theme preference is stored in your browser (local storage), not as a cookie. We use Google Analytics (gtag) to understand how the site is used — that may set cookies and send usage data to Google. We use Microsoft Clarity for heatmaps and anonymised session recordings; form fields such as name, email and address are masked so the recording does not show what you typed. We use the Meta Pixel so we can measure ads and see when someone views a page, starts checkout, or completes a scoping-call booking — that may set cookies and send usage data to Meta. We also use Vercel Web Analytics, which is designed not to use cookies or collect personal data.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct it, delete it, restrict it, or object to certain uses, and you can ask for data portability where that applies. Email hello@cracking.solutions. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Changes
If we change how we handle data in a material way, we will update this page.