Privacy Policy.

Effective date: 28 September 2026

1. Scope of this notice

This privacy notice applies to personal information collected through unocode.ai (the “site”), through the scheduling tools linked from the site, and through email or other correspondence between you and Unocode in the course of enquiries, scoping calls, proposals and client engagements. It does not apply to the personal information we process on behalf of clients under a services agreement. That processing is governed by the applicable agreement and is carried out on the client’s instructions.

By using the site or providing personal information to us, you acknowledge that you have read this notice. Where applicable law requires a specific legal basis or your consent for a particular processing activity, we rely on that basis or obtain that consent as described below.

2. Who we are

The site is operated by Unocode (“Unocode”, “we”, “us” or “our”). For the purposes of applicable data protection law, Unocode is the controller of the personal information described in this notice. Questions, requests and complaints relating to this notice may be directed to anurag@unocode.ai.

3. Information we collect

3.1 Information you provide to us

We collect personal information that you choose to provide when you:

• Book a scoping call. Bookings are made through Calendly, a third-party scheduling service. Depending on the questions presented at the time of booking, this may include your name, email address, company website or LinkedIn profile, role, engineering team size, a description of the work you would like us to own, your expected start timing, an indicative budget range, your time zone and, optionally, a telephone number used for meeting reminders.
• Submit a scoping request through the site. Where a request form is offered, this may include your name, work email address, telephone number, company, website, role, and a title and description of the work, together with optional details such as company size, the stage of your systems, your preferred engagement shape, timeline and technology stack.
• Correspond with us. When you email us or otherwise communicate with us, we collect your contact details, the content of your messages and any attachments you choose to share.
• Engage our services. If you or your organisation becomes a client, we collect the business contact details of the individuals involved in the engagement and the information reasonably necessary to deliver, administer and invoice the services.

3.2 Information we collect automatically

When you visit the site, we and our service providers collect certain information automatically from your device and browser. This includes:

• Usage and device data, such as the pages you view, the links you follow, the date, time and duration of your visit, the referring site or campaign, approximate location derived from your IP address, browser type and version, operating system, screen size and language settings.
• Cookies and similar technologies, as described under Cookies and similar technologies below. Analytics and advertising cookies are set only after you acknowledge the cookie notice shown on your first visit. Before that point, the Google tag operates in a cookieless mode that transmits aggregated, non-identifying signals only.
• Server and security logs, including your IP address, user agent and the time of each request, which we retain for a limited period to operate, secure and troubleshoot the site. Submissions to public endpoints are also recorded with the submitting IP address and user agent in order to detect automated abuse and enforce rate limits.
• Booking confirmation details. After you book a call, Calendly may redirect you to a confirmation page on the site and pass your first name in the page address so that the page can greet you. This value is used only to render the page and is not stored by us.

3.3 Information from third parties

We may receive personal information about you from third parties, including scheduling and conferencing providers (such as Calendly and Google Meet) in connection with calls you book, LinkedIn in the form of aggregated campaign and audience reporting, and publicly available professional sources such as your organisation’s website or your public LinkedIn profile, which we may consult to prepare for a call or to verify the information you have provided.

4. How we use information

We use the personal information we collect for the following purposes:

• Responding to enquiries and scheduling calls. To respond to your questions, arrange and conduct scoping calls, and follow up on the matters you raise with us.
• Preparing and delivering our services. To assess fit, prepare proposals and fixed quotes, negotiate and perform agreements, manage engagements and provide client support.
• Marketing and relationship management. To send you communications about our services, insights, publications and events that we believe may be of interest to you, subject to the choices described under Marketing communications below.
• Analytics and improvement. To understand how the site is used, measure the effectiveness of our content and campaigns, and improve the site, our services and the experience we offer.
• Security and integrity. To protect the site and our systems, detect and prevent automated abuse, fraud and other unlawful activity, and enforce rate limits on public endpoints.
• Legal and compliance. To comply with applicable laws and regulatory obligations, respond to lawful requests from public authorities, establish, exercise or defend legal claims, and maintain appropriate business records.

We may also aggregate or de-identify personal information so that it no longer identifies you, and use such information for any lawful purpose, including analysing site performance and developing our services.

5. Marketing communications

Where permitted by applicable law, we may use the contact details you provide to us, whether through a booking, a scoping request, correspondence or a client engagement, to send you communications about Unocode’s services, insights, publications, events and other offerings that we believe may be of interest to you or your organisation. Where applicable law requires your prior consent for such communications, we will obtain it before sending them.

You may opt out of receiving marketing communications from us at any time by following the unsubscribe link included in each such message, or by contacting us at anurag@unocode.ai. We will action opt-out requests promptly and in any event within the period required by applicable law. Please note that opting out of marketing communications does not affect communications that are necessary for the administration of an enquiry, booking or engagement, such as call confirmations, proposals, invoices and service notices, which we may continue to send as appropriate.

We do not sell personal information, and we do not share personal information with third parties for their own direct marketing purposes.

6. Legal bases for processing

Where the General Data Protection Regulation, the UK GDPR or similar legislation applies to our processing of your personal information, we rely on one or more of the following legal bases:

• Performance of a contract. Where processing is necessary to take steps at your request before entering into an agreement, or to perform an agreement to which you or your organisation is a party.
• Legitimate interests. Where processing is necessary for our legitimate business interests, including operating and securing the site, understanding our audience, developing our services, and maintaining relationships with prospective and existing clients, provided those interests are not overridden by your rights and interests.
• Consent. Where you have given consent to a specific processing activity, such as the setting of analytics and advertising cookies or, where required by law, the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal obligation. Where processing is necessary to comply with a legal or regulatory obligation to which we are subject.

7. Cookies and similar technologies

Cookies are small text files placed on your device by a website. Similar technologies include pixels, tags, scripts and browser storage. The site uses the following technologies, which are provided by third parties except where indicated:

The Google tag on the site implements Google Consent Mode. Analytics and advertising storage are set to denied by default and are granted only when you acknowledge the cookie notice. Google and LinkedIn process the information collected through their technologies as independent controllers in accordance with their own privacy policies, and may combine it with other information they hold about you. The LinkedIn Insight Tag enables LinkedIn to provide us with aggregated reporting about the professional characteristics of site visitors and the performance of our campaigns. We do not receive information that identifies individual visitors from either provider.

You can manage cookies through your browser settings, including by deleting existing cookies and blocking future ones, although doing so may affect the functioning of some websites. You can also opt out of Google Analytics through the Google Analytics opt-out browser add-on, and manage LinkedIn advertising preferences through the settings of your LinkedIn account or LinkedIn’s opt-out page. Clearing the local storage entry listed above will cause the cookie notice to be shown again, at which point consent is reset to denied until you acknowledge it.

8. How we share information

We share personal information only as described in this notice, and only with recipients who are subject to appropriate confidentiality and data protection obligations. Recipients may include:

• Service providers. Providers that perform services on our behalf and under our instructions, including scheduling (Calendly), web analytics (Google), campaign measurement (LinkedIn), email delivery, cloud hosting and infrastructure, and productivity and collaboration tools. These providers are permitted to process personal information only as necessary to provide their services to us.
• Professional advisers. Lawyers, accountants, auditors, insurers and other advisers, where reasonably necessary for them to provide their professional services to us.
• Legal, regulatory and safety. Courts, regulators, law enforcement and other public authorities where we are required to do so by law, where we believe disclosure is necessary to comply with a legal process, or where it is necessary to protect the rights, property or safety of Unocode, our clients or others.
• Business transactions. A prospective or actual purchaser, investor or successor in connection with a merger, acquisition, financing, reorganisation or sale of all or part of our business, in which case personal information may be transferred as part of that transaction subject to customary confidentiality arrangements.

9. International data transfers

Unocode operates internationally, and the service providers listed above may store and process personal information in countries other than the one in which you are located, including countries that may not provide the same level of data protection as your home jurisdiction. Where we transfer personal information originating from the European Economic Area, the United Kingdom or Switzerland to a country that has not been recognised as providing adequate protection, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or the recipient’s certification under an approved transfer framework, as applicable. You may request further information about the safeguards in place by contacting us.

10. Data retention

We retain personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, regulatory or reporting requirements, to resolve disputes and to enforce our agreements. In general:

• Enquiry, booking and scoping request records are retained for the duration of our discussions and, where no engagement results, for a reasonable period thereafter so that we can respond to follow-up questions and maintain an accurate record of our interactions.
• Records relating to client engagements are retained for the term of the engagement and for the period required by applicable limitation, tax and record-keeping rules.
• Contact details used for marketing communications are retained until you opt out, after which we keep the minimum information necessary to honour your preference.
• Server and security logs are retained for a short, rolling period. Analytics data is retained in accordance with the retention settings of the relevant provider.

When personal information is no longer required, we delete or de-identify it in accordance with our internal procedures. Where you ask us to delete the personal information we hold about you, we aim to complete the request within five working days, subject to any legal basis on which we are required or permitted to retain it.

11. Security

We implement technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include encryption of data in transit, access controls based on the principle of least privilege, authenticated administrative access, protection of public endpoints against automated abuse, and the selection of service providers that maintain recognised security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at anurag@unocode.ai.

12. Your rights and choices

Depending on your location and subject to applicable law, you may have some or all of the following rights in relation to your personal information:

• Access. to request confirmation of whether we process your personal information and to receive a copy of it.
• Rectification. to request that inaccurate or incomplete personal information be corrected.
• Erasure. to request the deletion of your personal information in certain circumstances.
• Restriction. to request that we limit the processing of your personal information in certain circumstances.
• Portability. to receive the personal information you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
• Objection. to object to processing based on our legitimate interests, and at any time to processing for direct marketing purposes.
• Withdrawal of consent. to withdraw any consent you have given, at any time and without affecting the lawfulness of prior processing.
• Complaint. to lodge a complaint with the data protection supervisory authority in the country of your residence, place of work or where an alleged infringement occurred.

To exercise any of these rights, contact us at anurag@unocode.ai. We may need to verify your identity before responding to a request, and we will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights. If we decline a request in whole or in part, we will explain the reasons where the law permits us to do so.

Residents of certain jurisdictions, including some states of the United States, may have additional rights, such as the right to know the categories of personal information collected and disclosed, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. To the extent the use of advertising cookies such as the LinkedIn Insight Tag constitutes sharing for cross-context behavioural advertising under applicable law, you may opt out by declining or clearing the cookies described above.

13. Children

The site and our services are directed at businesses and professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe that a child has provided personal information to us, please contact us so that we can delete it.

14. Third-party sites and services

The site contains links to third-party websites and services, including Calendly, LinkedIn and the video conferencing service used for calls. This notice does not apply to those sites and services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site or service before providing personal information to it.

15. Changes to this notice

We may update this notice from time to time to reflect changes in our practices, technologies, legal requirements or other factors. When we do, we will revise the effective date at the top of this page and, where the changes are material, take additional steps to bring them to your attention as required by applicable law. We encourage you to review this notice periodically.

16. Contact us

If you have questions, concerns or requests relating to this notice or our handling of your personal information, please contact us at anurag@unocode.ai. We take every enquiry seriously and will respond as promptly as we can.