Privacy Policy

Last updated: 9 June 2026

1. Who we are

SCA — Smart Code App ("SCA", "we", "us", "our") is a trading name of STANDING SLOVAKIA, s.r.o., a company registered in the Slovak Republic. We design and build websites, bespoke web applications, and AI automation agents for businesses in the United Kingdom and worldwide.

For the purposes of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (Regulation (EU) 2016/679), and the Slovak Act No. 18/2018 Coll. on the Protection of Personal Data, we are the data controller of the personal data described in this policy.

We have not appointed a statutory Data Protection Officer, as we are not required to. For any question about your data, contact us using the details above or in section 15.

2. Scope of this policy

This policy covers personal data we process through our website at smartcodeapp.com, when you contact us, request a quote, book a call, or engage us for a project. It does not cover third-party websites we link to, which have their own privacy policies.

3. What data we collect

We only collect the data we genuinely need. Depending on how you interact with us, this may include:

We do not intentionally collect special category data (such as health, race, religious, or biometric data), and we ask that you do not send us such information through our forms.

4. How and why we use your data

• To respond to your enquiry, answer questions, and provide a quote or proposal.
• To arrange and hold discovery calls and meetings.
• To deliver, manage, and support the projects and services you engage us for.
• To send you service-related communications (for example, project updates or invoices).
• To operate, secure, and improve our website.
• To keep records and comply with our legal, tax, and accounting obligations.
• To establish, exercise, or defend legal claims where necessary.

We do not sell your personal data, and we do not send marketing emails unless you have asked us to.

5. Our legal bases for processing

Under the UK GDPR and EU GDPR, we rely on the following legal bases:

• Consent (Art. 6(1)(a)) — for optional cookies/analytics and any optional marketing.
• Contract (Art. 6(1)(b)) — to take steps at your request before entering a contract (such as preparing a quote) and to perform a contract once engaged.
• Legal obligation (Art. 6(1)(c)) — to meet accounting, tax, and other legal duties.
• Legitimate interests (Art. 6(1)(f)) — to respond to enquiries, run and secure our website, and manage our business. Where we rely on legitimate interests, we have balanced them against your rights and freedoms.

6. Cookies and analytics

Our website uses a small number of cookies and similar technologies. We only set non-essential (for example, analytics) cookies if you give consent through our cookie banner. Full details — including the cookies we use, their purpose, and how to change your choice — are in our Cookie Policy.

7. Who we share your data with

We never sell your data. We share it only with trusted service providers ("processors") who help us run our business, and only to the extent needed. These may include:

• Web hosting and infrastructure providers who store our website and any submitted form data.
• Email and productivity providers used to communicate with you and manage records.
• Web3Forms (operated by Cogny Technologies), the form-processing service that receives your contact-form submission and delivers it to us by email. Data you enter into the form is transmitted through Web3Forms' servers for this purpose.
• Scheduling/booking tools if you book a call through a third-party calendar service.
• Google Fonts, which serves the website's typeface; loading it transmits your IP address to Google. See section 8.
• Professional advisers (such as accountants) and authorities, where legally required.

All processors are bound by contracts requiring them to safeguard your data and use it only on our instructions.

8. International data transfers

Some of our providers — including Google Fonts and our form provider (Web3Forms) — may process data outside the UK or the European Economic Area (EEA), for example in the United States. Where this happens, we ensure an appropriate safeguard is in place, such as the UK International Data Transfer Agreement / Addendum, the EU Standard Contractual Clauses, or an adequacy decision, so that your data receives an equivalent level of protection.

9. How long we keep your data

• Enquiries that don't become projects: typically up to 24 months, then deleted, unless you ask us to delete them sooner.
• Client and project records: for the duration of our engagement and afterwards as needed.
• Financial and tax records: for as long as the law requires (generally up to 10 years under applicable Slovak/EU rules).
• Website technical logs: for a short period for security and troubleshooting.

10. Your rights

Subject to certain conditions, you have the right to:

• Be informed about how we use your data (this policy).
• Access a copy of the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten") in certain circumstances.
• Restrict our processing in certain circumstances.
• Data portability — to receive your data in a portable format.
• Object to processing based on legitimate interests, and to direct marketing.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email info@smartcodeapp.com. We will respond within one month. Exercising your rights is free, and we will not treat you any differently for doing so.

11. How we protect your data

We use appropriate technical and organisational measures to keep your data secure — including encryption in transit (HTTPS), access controls, and working only with reputable providers. No method of transmission over the internet is completely secure, but we take all reasonable steps to protect your information and to notify you and the relevant authority of any breach where required by law.

12. Children's privacy

Our website and services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top shows when it was last revised. Material changes will be made prominent on this page.

14. Complaints

If you have a concern about how we handle your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a supervisory authority:

• United Kingdom: the Information Commissioner's Office (ICO) — ico.org.uk.
• Slovak Republic / EU: the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR) — dataprotection.gov.sk.

15. How to contact us