Privacy

Data controllers

Anna Maciejewicz and Sébastien Labelle (BetterNotCode), Ylikyläntie 83, 96800 Rovaniemi, Finland, act as joint controllers. Single point of contact: contact@betternotcode.com.

What data, and why

The site only collects personal data through the contact form: your name, your email address and your message. Purpose: to answer your request and, where relevant, manage the relationship that follows. Legal basis: our legitimate interest in answering the requests we receive and, where your request concerns a quote or a contract, pre-contractual steps taken at your request. You are never required to provide this data; without it, we simply cannot reply to you.

No storage, no tracking cookies

The site does not store the content of your message in any database: it reaches us directly by email. We use no tracking cookies. To protect the form, we briefly process your IP address (send-rate limiting and anti-bot filtering).

Processors

• Amazon Web Services: hosting the site and routing the email (Amazon SES), in the European Union region.
• Cloudflare Turnstile: anti-spam protection for the form. Cloudflare processes technical signals (IP address, User-Agent header, TLS fingerprint) solely to tell humans from bots; see Cloudflare’s Turnstile Privacy Addendum.

Retention period

Your messages are kept only in our mailbox, for as long as it takes to handle your request and any relationship that follows. If a collaboration materialises, contractual and accounting documents are kept for the legally required periods.

Your rights

You have the right to access, rectify, erase, object to, restrict and port your data. To exercise these rights, write to us at contact@betternotcode.com. You may also lodge a complaint with the Finnish data-protection authority (Tietosuojavaltuutetun toimisto) or with the authority of your country of residence.

Transfers

The site and email routing are hosted by AWS in a European Union region. The anti-bot check may involve processing by Cloudflare, Inc. (United States), covered by the EU-US Data Privacy Framework and, failing that, by standard contractual clauses.