PAPER & CODE
Privacy Policy
Last updated: 11 October 2026
1. Introduction
At Paper & Code, we attach particular importance to the confidentiality and protection of the personal information of our visitors, prospects and business partners.
This policy explains how we collect, use, protect and retain personal data submitted through our website.
We are committed to complying with the data protection obligations applicable to our activities, including the European Union's General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR.
2. Data controller
The data controller is:
Paper & Code LLC
Operating as Paper & Code
Limited Liability Company (LLC)
Wyoming, United States
Address: 1309 Coffeen Avenue STE 1200
Sheridan, Wyoming 82801, United States
Email: contact@paper-and-code.com
3. Personal data collected
When you use our contact form, we may collect the following information:
- First and last name
- Business email address
- Company name
- Job title
- Requested service
- Project description
- Estimated budget and timeline, if provided
During your visit, technical data may also be processed, including your IP address, browser information, security-related data and technical logs needed to operate the website.
Please do not submit passwords, confidential information about your systems or sensitive personal data through the contact form.
4. Purposes and legal bases
The information collected is used to respond to inquiries, assess business needs, prepare commercial proposals and follow up on professional exchanges.
Depending on the circumstances, this processing is based on our legitimate interest in responding to business inquiries and developing our activities, or on taking pre-contractual steps requested by the person concerned.
Technical data required for the security and operation of the website may be processed on the basis of our legitimate interest in protecting our services.
Any marketing communications separate from handling your inquiry comply with applicable rules, including information, consent or objection requirements as appropriate.
5. Recipients and service providers
Data is accessible only to authorised people who need it to respond to inquiries and manage business relationships.
Technical service providers may assist with hosting, security, message delivery or communications management.
Cloudflare: infrastructure and security services, including Turnstile form protection, when these services are enabled.
These providers act according to their respective roles and the applicable contractual terms and data protection obligations.
We do not sell personal data collected through the website to data brokers.
6. Data retention
Prospect data may be retained for up to three years after collection or the last contact initiated by the prospect, for commercial follow-up purposes, subject to a shorter period when the data is no longer necessary.
When a contractual relationship is established, information required to perform the contract and comply with legal obligations may be retained for different periods.
Our log retention policy is as follows: A maximum of 30 days for technical logs retained under our control. In the event of a security incident, only the necessary records may be isolated and retained for the duration of its investigation or applicable proceedings.
Temporary form-protection counters expire after 60 seconds and are cleared on the next request. The website does not record inquiry content in its application logs.
Technical providers also apply their own retention periods according to the service, contract and account settings; these are not all limited to 30 days.
At the end of the applicable periods, data is deleted or anonymised unless retention is required by law.
7. International transfers
Paper & Code LLC is established in the United States. Data may be processed there and in countries where the technical providers used operate their infrastructure. Using an international service does not guarantee storage exclusively within the European Economic Area or the United Kingdom.
Before enabling a transfer subject to European, UK or Swiss rules, we must verify the destination country and the applicable mechanism: an adequacy decision covering the recipient or appropriate safeguards, including standard contractual clauses and any required adaptations, together with necessary supplementary measures.
Transfer arrangements depend on the service and contract actually used. Cloudflare describes the mechanisms it offers in its Data Processing Addendum. This reference does not certify Paper & Code LLC or confirm a mechanism for every provider.
For information about processing countries and a copy of the safeguards applicable to your inquiry, contact: contact@paper-and-code.com.
8. Information security
We implement technical and organisational measures appropriate to the risks to protect data against unauthorised access, alteration and accidental loss.
Depending on the systems used, these measures include encrypted communications, access controls and infrastructure protection mechanisms.
However, no transmission or storage system can guarantee absolute security.
9. Cookies and similar technologies
The website contains no audience analytics, advertising pixels or marketing trackers. Fonts are hosted locally. Language selection uses the page URL, without a preference cookie or local storage.
When the form is enabled, Cloudflare Turnstile helps detect automated submissions. It processes technical signals, including IP addresses and browser information. Cloudflare also uses these signals to improve bot detection as a separate controller, as explained in its Turnstile privacy notice.
Links to WhatsApp, LinkedIn and any booking services open external websites. None of their widgets loads automatically on our pages.
If non-essential trackers are added, this policy will be updated and any required consent choices will be provided before activation.
10. Your rights
Under the conditions provided by applicable regulations, you may request access to your data, its correction, erasure, restriction of processing or portability.
You may also object to processing based on legitimate interests, including the use of your data for direct marketing.
To exercise your rights, contact:
You may also lodge a complaint with the competent data protection authority, including in your country of residence where this right applies.
11. Automated decisions
Information submitted through the contact form is not subject to fully automated individual decisions producing legal effects or similarly significant consequences.
12. Changes
Paper & Code may update this policy to reflect changes to the website, its providers or regulatory obligations.
The last updated date appears at the top of this page.
13. Contact
For any questions about this policy:
Paper & Code