Privacy notice
Version 2, 4 October 2026.
1. Who we are
Corner Coder is the trading name of Ali Jabbar, a sole trader based in Wembley, London. For data-protection law we are the controller of the personal data described in this notice.
- Address:
10 Dean Court, Wembley, Middlesex, HA0 3PX - Email for anything about your data: hello@cornercoder.com
- We do not have a data protection officer; Ali handles every request personally.
This is version 2 of this notice, dated 4 October 2026.
2. What this notice covers
It covers what we do with personal data when you visit our site, send us an enquiry, become a customer, or when we contact your business about our services. It does not cover the personal data of your customers or staff that we may handle while doing a job for you: for that you are the controller, we act on your instructions, and we agree the details with you in writing before the job starts.
3. What we collect and where it comes from
| When | What | Where from |
|---|---|---|
| You send an enquiry through the form | Your business name, your email address, what you want done, and the kind of job you pick. If you choose to give them: your first name, a phone or WhatsApp number, and a web address. The form also notes which of our leaflets, cards or pages brought you to it, if one did | You |
| You email, message or call us | What you tell us, and the contact details you use | You |
| You become a customer | Whatever the job needs: access you grant, content you supply, our emails and messages, the quote and the invoice | You |
| You pay | The payment's reference, amount and status. Your card details go to Stripe; we never see or store them | You, through Stripe |
| You visit the site | The standard server logs our hosting provider keeps (IP address, browser type, pages requested). The site sets no cookies and runs no analytics or advertising trackers | Your browser |
| We contact your business first | Business name, public address, public phone or email, website, and what you appear to do, taken only from public sources (your website, listings, the high street) and used for a visit, a card or a call. We do not send unsolicited emails, texts or messages to sole traders or partnerships: the electronic marketing rules treat you as an individual, so that needs your consent | Public sources |
We do not knowingly collect data from anyone under 18, and the site is for business customers.
What we need and what is optional. To give you a quote we need your business name, an email address and a description of the job; without those we cannot reply. Your first name, a phone number and a web address are optional. The form takes no card details and no file uploads. Please do not put personal data about other people (your customers, staff or patients) in the description; describe the job in general terms. If you do include it, Ali deals with the enquiry himself, without AI tools, and any health information is deleted.
4. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Understanding your enquiry and sending you a quote | Taking steps at your request before a contract |
| Doing the job, talking to you about it, delivering it, fixing corrections | Performing our contract with you |
| Taking payment, refunding, keeping accounts, filing tax returns | Contract; legal obligation |
| Keeping records of quotes, jobs and correspondence in case of a dispute | Legitimate interests (defending claims) |
| Contacting your business about our services | Legitimate interests for companies (telling other local businesses about a small local service), by visit, card or call; for sole traders and partnerships, your consent before any email, text or message. You can object at any time and we stop |
| Keeping the site and our systems secure | Legitimate interests (security) |
| Handling complaints and rights requests | Legal obligation |
Where we rely on legitimate interests we have weighed them against your rights. Tell us if you disagree with the balance.
5. How your quote is produced
Ali reads every enquiry himself and confirms every quote himself. He may use an AI tool to help him understand the job and draft your quote. Before he does, he removes your name, your business's name and your contact details by hand, so the tool is given only your description of the job and the kind of job you picked. If the description itself names a person or a business, he removes that too; if it includes anyone's health information, or details he cannot remove, he does not use an AI tool for that enquiry. The tools are used on accounts whose settings do not allow what is entered to be used to train the providers' models. No decision about you is made by automated means.
6. AI tools
Ali uses AI tools (from Anthropic and OpenAI) to help him draft quotes (section 5) and to build and test the work he does for customers, the way a builder uses power tools. He directs and checks everything that is delivered.
- From an enquiry, only your description of the job goes into these tools, with your name, your business's name and your contact details removed first (section 5).
- During a job, only the material the work needs goes into them, with personal data removed or reduced wherever possible.
- Personal data about your customers or staff goes into an AI tool only if you have agreed to that in writing first, and health or care information never does. We do not take jobs that would need it.
- The settings Ali uses do not allow what goes into these tools to be used to train the providers' models.
These providers are in the United States. Section 8 covers the safeguards.
7. Who we share it with
| Recipient | What and why |
|---|---|
| Netlify (our hosting provider) | Serves the site and keeps the server logs. It also receives what you type into the enquiry form, checks it for spam using Akismet (a service of Automattic), passes it to our mailbox, and holds a copy until we delete it (section 9) |
| Google (Google Workspace) | Our business email: your enquiry, your emails to us and our replies |
| Stripe | Takes payment when you pay a quote. Stripe is a controller in its own right for card data; see Stripe's privacy policy |
| Anthropic and OpenAI | Only as sections 5 and 6 describe: the description of a job with names and contact details removed, and the material a job needs while it is being done |
| Our bank and our bookkeeping software | Invoices and payments |
| Our accountant, insurer or solicitor | Only if needed to run the business or handle a claim |
| HMRC, courts and regulators | Where the law requires |
We do not sell personal data and we do not share it with anyone for their own marketing.
8. Transfers outside the UK
Some of the services above store or process data outside the UK, mostly in the United States. Where they do, we rely on the safeguards in each provider's data processing terms, such as the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it. You can ask us which safeguard applies to a particular provider.
9. How long we keep it
| Data | How long | Why |
|---|---|---|
| Enquiries that do not become a job | 12 months from our last contact, then deleted | So we can pick up where we left off if you come back |
| The copy of your enquiry held by our hosting provider | Deleted there once it is safely in our own records, and always within 30 days of our receiving it | It only needs to reach us |
| Quotes, contracts, correspondence and deliverables for a job | 6 years after the job ends | The time limit for contract claims |
| Invoices and payment records | At least 5 years after the 31 January tax-return deadline for the tax year they belong to | HMRC's record-keeping rules |
| Files and access you give us for a job | Deleted or handed back within 30 days of the job being accepted, unless we look after the result for you under a monthly plan | We do not keep your material longer than the job needs |
| Server logs | For as long as our hosting provider keeps them, which is about 30 days | Security |
| Details of businesses we have contacted first | 12 months, or removed straight away if you object | Marketing |
10. Your rights
You can ask us to: give you a copy of your data; correct it; delete it; restrict what we do with it; give it to you in a portable form; and stop using it for marketing or for anything based on legitimate interests. Where we rely on your consent you can withdraw it at any time. Email hello@cornercoder.com; we reply within one month and do not charge.
11. Complaints
If you are unhappy with how we handle your data, email hello@cornercoder.com with "Complaint" in the subject. We acknowledge every complaint within 30 days and tell you what we found. You can also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.
12. Security
Access you give us for a job is kept in a password manager, never in email or chat, and we ask for an invitation or a temporary login, never your own password. Our providers encrypt data at rest. We keep enquiries and job records in our business mailbox and on Ali's own computer, whose drives are encrypted. Ali works only on his own devices and accounts. Only the data a job needs is copied anywhere, and it is deleted when the job ends (section 9).