Who we are
This site is run by Cofiato (“we”, “us”), a product development studio. We are the controller of the personal data described here. For any privacy question or request, email hello@cofiato.com.
What we collect
When you contact us
If you send the project form, we collect what you enter: your name, email, company, what you need, budget range, timeline and message. Alongside it we record the page you sent it from, the website that referred you, any campaign tags in the link you followed (UTM parameters), and your approximate country, which our hosting provider derives from your connection.
If you email us or book a call, we keep that correspondence and the booking details.
When you browse the site
We use PostHog analytics in cookieless mode. It records page views, clicks, scroll and click heatmaps, page performance, and general device and browser information. It stores nothing on your device: visitors are counted with a privacy-preserving hash calculated on PostHog's servers, and we don't use it to identify you. We also use Cloudflare Web Analytics, which measures page views and loading speed without cookies or tracking you across sites. We send no personal details from the contact form to analytics — only the type of project, budget range and timeline.
To attribute an enquiry to the page and link that brought you here, the site keeps your first referrer and campaign tags in your browser's session storage. It is deleted when you close the tab and only leaves your device if you submit the form.
Technical data
Like any website, our hosting provider processes your IP address and request details to deliver pages and protect the site against abuse.
Why we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiry | Form details, correspondence | Steps you asked us to take before a possible contract; our legitimate interest in responding to business enquiries |
| Understanding which pages help visitors | Cookieless analytics, referrer and campaign tags | Legitimate interests |
| Running and securing the site | IP address, request data | Legitimate interests |
| Working together | Contact and project details | Contract |
We don't use your data for automated decision-making, and we don't add you to a mailing list unless you ask us to.
Who we share it with
We use a small number of service providers who process data on our behalf:
- Cloudflare — hosting, database and file storage for this site, plus Cloudflare Web Analytics, which measures page views and performance without cookies.
- PostHog (EU cloud) — cookieless website analytics.
- Discord — internal notifications to our team when a new enquiry arrives, including the details you submitted.
- Cal.com — if you book a call, the booking is handled by Cal.com under its own privacy policy.
We don't sell or rent personal data. Some providers operate outside the UK and EEA; where data is transferred, we rely on safeguards such as the UK and EU standard contractual clauses or an adequacy framework.
How long we keep it
- Enquiries that don't lead to a project: up to 24 months after our last contact, then deleted.
- Client records: for the length of our work together and as long as needed afterwards for legal, tax and accounting purposes.
- Analytics: kept in aggregate and pseudonymous form according to PostHog's retention settings.
Your rights
Under UK and EU data protection law you can ask us to access, correct or delete your personal data, restrict or object to how we use it, or receive a copy in a portable format. Email hello@cofiato.com and we'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).
Cookies
Public pages of this site set no cookies. The private admin area used by our team sets a strictly necessary login cookie; it is never set for visitors.
Changes
If we change how we handle personal data, we'll update this page and the date at the top.