Privacy Policy

Last updated: 9 September 2026

1. Who we are

Codemere (codemere.org) is operated by TERFIKS LTD, 13 Hawley Crescent, Camden, London NW1 8EZ, United Kingdom, a company registered in England and Wales. We are the data controller for personal data collected through this site under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact: [email protected].

2. What we collect

• When you buy a course: your name, email address, billing country and the last four digits and brand of your card, as passed to us by Stripe. Full card details are handled by Stripe and never reach our servers.
• When you contact support: your email address and the content of your message.
• When you join the community: your Discord username, so we can grant the right roles for your tier.
• When you visit the site: standard server logs (IP address, user agent, pages requested, timestamps), kept for security and error diagnosis. We do not run analytics or advertising trackers. The only thing stored in your browser is your colour-theme preference.

3. Why we use it and on what basis

• To deliver the course you bought, grant access, and handle refunds and upgrades — performance of a contract.
• To keep accounting and tax records — legal obligation.
• To answer support requests — performance of a contract and legitimate interest.
• To protect the site against abuse and fraud — legitimate interest.
• To email you about material changes to the course or these terms — legitimate interest. We do not send marketing email.

4. Who we share it with

We use these processors, each under their own data-processing terms: Stripe (payments), Discord (community), Cloudflare (network security and content delivery), Resend (transactional email), and Google Fonts (font delivery; your IP address is sent to Google when fonts load). We do not sell personal data and do not share it with advertisers.

5. International transfers

Some processors are based in the United States. Transfers are covered by the UK International Data Transfer Addendum or an adequacy decision, as applicable.

6. How long we keep it

Purchase and refund records are kept for seven years to meet accounting obligations. Support correspondence is kept for two years. Server logs are kept for 30 days. Discord data is retained for as long as you are a member of the community.

7. Your rights

Under UK GDPR you can ask us to access, correct, delete or restrict the use of your personal data, object to processing based on legitimate interest, and receive a copy of data you gave us in a portable format. Email [email protected]; we respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

8. Security

The site is served over HTTPS only. Payment data is handled entirely by Stripe, a PCI DSS Level 1 provider. Access to purchase records is limited to the people who need it to run the course.

9. Children

The course is intended for people aged 16 or over. We do not knowingly collect data from anyone younger; if you believe we have, contact us and we will delete it.

10. Changes

We may update this policy. The date at the top shows the current version. Material changes will be announced on the site.