1. Controller and contact
The controller is the KoduFix service provider identified on this page. Privacy questions and rights requests may be sent to the contact address shown below.
2. Data we process
We process only data needed to assess, arrange, perform and document the requested service.
- name, email, phone number and communication history;
- address, service, job description, requested time, quote and order status;
- photos and technical file data you voluntarily provide;
- transaction, billing, access-control and security-log data where applicable.
3. Purposes and legal bases
We use request data for steps requested before entering a contract, order data to perform the contract, accounting data to meet legal duties, and limited security data for our legitimate interest in protecting the service. Optional analytics or marketing is used only with consent where required.
4. Recipients and processors
Access is role-based and limited to business need. An assigned professional and contracted hosting, email, storage or accounting provider may process the minimum necessary data under confidentiality and data-processing terms. We do not sell personal data.
Transfers outside the EEA take place only with a valid transfer mechanism and appropriate safeguards.
5. Retention
Data is kept only as long as the purpose or law requires. Unconverted requests are normally deleted or anonymised within 24 months. Orders, claims and accounting records follow the applicable contractual and statutory periods. Security logs are retained for a limited period unless an incident or legal claim requires longer storage.
6. Security
KoduFix uses role-based access, secure sessions, rate limits, file validation, security headers, audit logs and separated database permissions. Uploaded files are stored with random names outside public web paths; privacy-sensitive metadata is removed where technically possible.
7. Your rights
Depending on the legal basis, you may request access, correction, deletion, restriction, portability, object to processing or withdraw consent. We may verify identity before disclosing data. You may complain to the Estonian Data Protection Inspectorate or a court.
8. Automation, tracking and changes
KoduFix does not make solely automated decisions with legal or similarly significant effects. Any automated estimate is a support tool reviewed by a person. Email delivery events may be processed for service reliability; optional tracking requires an appropriate legal basis and is described transparently.
We update this notice when the service, processors or legal requirements change and display the latest update date above.