Privacy notice | Nocode Solutions

Who we are

This website belongs to Nocode Solutions Ltd, a company registered in England and Wales with company number 12004770. Our registered office is 128 City Road, London, EC1V 2NX, United Kingdom. In this notice, "we", "us" and "our" mean Nocode Solutions Ltd.

As the controller of the personal data described here, we decide how it is used and are responsible for it under UK data protection law: the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.

You can reach us about your data by email at hello [at] nocodesolutions.ai, or by post at our registered office. We have not appointed a data protection officer.

Data we handle for clients is not covered by this notice. When we build or run systems for a client, we may handle personal data about the client's own customers, such as the leads in their CRM. In that work we follow the client's instructions as their processor, and the client's privacy notice explains how that data is used.

What we collect and where it comes from

Visiting the site

Each time your browser asks for a page, our server receives some technical details. Our hosting provider, Railway, keeps these in request logs:

IP address
browser and device type, as your browser reports them
page or file requested, and whether the request worked
date and time

We also count page views with Cloudflare Web Analytics. For each page view it records the page address, the website that linked you to it, your browser and device type, your country and how quickly the page loaded. It stores nothing on your device, and Cloudflare drops your IP address at its nearest data centre without keeping it. We see only totals. You can turn it off on our cookies page, and we never count visits from a browser that sends Global Privacy Control or Do Not Track.

This site has no cookies, advertising pixels, session recording or other tracking. If you choose light or dark mode, your browser keeps that choice on your device; it is never sent to us.

Sending an enquiry

Enquiries by form or email include whatever you choose to tell us. Usually that is your name, your work email address, your business name, and what you say about your business, your tools and what you need. The form also records which page you sent it from, the name of the website that linked you to that page, and any campaign tags in that page's link (for example from one of our videos or adverts). None of this is stored on your device.

To stop floods of spam, the website server counts how many times the form is sent from each IP address. It holds that count in memory only and does not save it to a file or database.

Please do not send us health details or other sensitive information, or personal data about your own customers, through the form or by email. We do not need it to reply.

Working with us

Once your business becomes a client, we keep the names, job titles and work contact details of the people we deal with. We also keep our proposals, contracts, invoices, emails and project notes.

From other people

Sometimes a colleague gives us your name and work contact details, for example by copying you into an email about a project.

Giving us personal data is up to you. If you want a reply, though, we need a way to contact you.

Why we use it and our lawful basis

UK law says we need a lawful basis for each use of personal data. Here is ours.

Running the website: Request logs let us find faults, spot attacks and stop misuse. Lawful basis: our legitimate interests in a website that works and is protected.
Visitor statistics: Totals of page views, by page, referring site, browser, device type and country, tell us which pages help people and which need work. Lawful basis: our legitimate interests in improving the website. You can object at any time on the cookies page.
Stopping spam: Counting form sends by IP address stops one source flooding the form. Lawful basis: our legitimate interests in keeping the form usable.
Replying to enquiries: We use what you send to reply, answer your questions, arrange a call and follow up about that enquiry. Lawful basis: our legitimate interests in answering people who contact us about our services. If you are a sole trader or partner asking about work for yourself, it is also to take steps you asked for before a contract.
Working for clients: We use the contact details of people at a client business to plan, deliver and invoice the work. Lawful basis: our legitimate interests in dealing with the people who work there. If you personally are the client, for example as a sole trader, the basis is our contract with you.
Keeping business records: Tax and company law require us to keep accounting records. Lawful basis: legal obligation. We also keep records in case of a dispute or legal claim, which is in our legitimate interests.
Legal requests: If the police, a court, a regulator or a tax authority can legally require information from us, we give it. Lawful basis: legal obligation.

Where we rely on legitimate interests, we have weighed them against your interests and rights. You can ask us how, and you can object (see your rights).

There are also things we do not do. We do not sell personal data, use it for advertising or share it with anyone for their own marketing. We send no newsletters or marketing emails, and we make no decisions about you by automated means alone that have legal or similarly significant effects on you.

Only the service providers we need to run the business receive your personal data, and they may use it only to provide their service to us:

Railway (Railway Corporation, United States) hosts this website and our website server. Request logs and enquiry form answers pass through its systems.
Cloudflare (Cloudflare, Inc., United States) runs our domain's DNS and sits in front of the website to deliver and protect it, so every request to the site passes through its network. It also provides our visitor statistics (Web Analytics).
Our email provider runs our mailbox, where your emails and our replies are stored.
The service that runs our enquiry automations receives your form answers from our website server, records them and sends them to our mailbox.

For its own purposes, Railway also uses some technical data from its network, such as logs: to run, protect and improve its platform and to prevent abuse. For that use Railway is a controller in its own right, and Railway's privacy policy applies.

Professional advisers, such as our accountant or lawyer, may also receive personal data when they need it to advise us. Where the law requires it, we share it with the police, courts, regulators or tax authorities.

No third party collects information on this site about what you do over time or on other websites. Links to other websites, such as Companies House, take you to sites with their own privacy notices.

Transfers outside the UK

Railway is a US company, and our website server runs in its US West region, in California. Request logs and form answers therefore go to the United States. Your request may also pass through one of Railway's other regions on the way.

UK law allows transfers to US organisations that have joined the UK Extension to the EU-US Data Privacy Framework, often called the UK-US data bridge. Railway Corporation has. It is on the official Data Privacy Framework List with an active UK Extension certification, which we checked on 1 October 2026. For any transfer the Framework does not cover, Railway's data processing agreement provides the UK's International Data Transfer Addendum to the EU standard contractual clauses.

Cloudflare is also a US company, and requests pass through its data centre nearest to you.

Data held by our email provider, or by the service that runs our enquiry automations, may be kept outside the UK. If so, we use a safeguard UK law accepts: a destination the UK government has approved (this covers the European Economic Area, and US organisations in the UK Extension), or the UK's International Data Transfer Agreement or Addendum. You can ask us for details of the safeguard we rely on.

How long we keep it

Request logs: Railway keeps them for up to 30 days, then deletes them.
Visitor statistics: Totals only, kept in Cloudflare Web Analytics.
Spam counts: Held only in the website server's memory, and forgotten 10 minutes after the last form sent from that address, or sooner when the server restarts.
Enquiries: An enquiry that does not lead to work is deleted from our mailbox and our enquiry records 24 months after our last contact with you. Working copies in the enquiry automation's run history are deleted after 30 days.
Client records: 6 years after the contract ends, because of tax and company law and the time limit for legal claims. Then we delete them.
Privacy requests and complaints: 2 years after we close them, so we can show how we handled them.

Anything we keep longer than this is kept only because the law requires it or we need it for a legal claim. We delete it once that need ends.

Your rights

Under UK data protection law you can ask us to:

give you a copy of the personal data we hold about you
correct data that is wrong or incomplete
delete your data
limit how we use your data
stop using your data on the basis of our legitimate interests (you can object at any time)
give you data you provided in a format you can reuse, where our basis is a contract with you and we process it by automated means

Some rights have limits. For example, tax law may require us to keep an invoice you would like deleted. If we cannot do what you ask, we will tell you why.

To make a request, email hello [at] nocodesolutions.ai. We do not charge for this. We may ask you to confirm who you are before we act. We reply within one month. A complex request can take up to two months more, and if yours will, we tell you within the first month.

People in the United States

Wherever you live, you can ask us in the same way to see, correct or delete the personal data we hold about you. We handle requests from the US on the same terms.

Some browsers send a "Do Not Track" or Global Privacy Control signal. We do not track you across other websites, and we do not sell or share personal data for advertising, so there is nothing for these signals to switch off. The site works the same way whether or not your browser sends one.

Complaints

Please tell us first if you are unhappy with how we have handled your personal data. You can email hello [at] nocodesolutions.ai or write to our registered office. We will confirm that we have received your complaint within 30 days, look into it, and tell you the outcome as soon as we can.

You can also complain to the Information Commission, the UK's data protection regulator. It took over from the Information Commissioner's Office (ICO) on 30 September 2026 and uses the same website.

Online: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Post: Information Commission's Office, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester, M1 7BL

Children

The site and our services are for businesses. They are not aimed at children, and we do not knowingly collect personal data from anyone under 18. If you think a child has sent us their details, email us and we will delete them.

Changes to this notice

This notice changes when our services, our tools or the law change. The date at the top shows when it last changed, and this version applies from that date.

For an important change, such as a new use of your data or a new service provider that receives it, we will say what changed at the top of this page. If you are a client, or we are in touch about an enquiry, we will also tell you by email.

Contact

Email: hello [at] nocodesolutions.ai
Post: Nocode Solutions Ltd, 128 City Road, London, EC1V 2NX, United Kingdom