Privacy Policy
Who we are
CodeLaw ("we") builds and runs software for its own small businesses, including Island Drift Detailing and Island Leads. This policy covers the website codelaw.pro and CodeLaw's internal tools, including the CodeLaw Booking Orchestrator. Contact: friends@codelaw.pro.
What the internal tools do
The CodeLaw Booking Orchestrator is used only by CodeLaw for its own businesses; it is not offered to third parties. When a customer books a service on one of our businesses' websites, it stores the booking in that business's customer records and reports the result of the advertising that brought the customer to Google Ads, so that the business pays for ads that bring real customers.
Data we handle
- Booking details the customer enters: name, email address, phone number, the service, the date and time.
- Advertising identifiers from the visit: the Google click ID (gclid, wbraid, gbraid), campaign (UTM) parameters and the landing page.
- The customer's consent choice for advertising data, with its time and the version of the business's privacy policy.
- Job outcome recorded by the business: whether the job was paid or cancelled, and the amount paid.
- On codelaw.pro itself: technical and usage data collected by our website monitoring (Datadog Real User Monitoring).
How we use it
- To record bookings and run the business.
- To report conversions to Google Ads for the business's own advertising account. Email and phone are sent only as SHA-256 hashes, and only when the customer's consent allows it.
- To read advertising reports of our own Google Ads accounts.
We do not sell personal data and do not use it for anything else.
Where it is stored and who receives it
- Supabase (database of the Booking Orchestrator) and Vercel (hosting).
- Notion (customer records of each business).
- Google Ads (conversion reports, as described above).
- Slack (internal notifications to the business owner).
- Datadog (website monitoring).
Google user data
Our use of Google APIs is limited to the Google Ads accounts of CodeLaw's own businesses. Use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How long we keep it
Booking records are kept as long as the business needs them for its customer relationship and legal obligations; advertising identifiers are only useful for 90 days after the ad click.
Your choices
Customers can refuse advertising data on each business's website (its "Privacy choices" link) and can ask for access to, correction of or deletion of their data by writing to friends@codelaw.pro or to the business directly.
Changes
We update this policy when what we do changes; the version and date above change with it.