Privacy Policy

1. Who we are

Coti is a web development and digital solutions agency. When we refer to "we", "us", or "Coti" in this policy, we mean the Coti team. If you have any questions about this policy, you can contact us via the contact form on our website.

2. What information we collect

We only collect information you actively provide to us, including:

• Your name and email address when you submit an enquiry through our contact form
• Your username and password (hashed) if you have a client account
• Project details, comments, and files you share with us through the client portal

When enabled, we use Replit-hosted analytics to understand page visits and interactions, such as enquiry submissions and use of project galleries. Custom events do not include names, email addresses, or message contents.

3. How we use your information

We use the information you provide solely to:

• Respond to your project enquiries
• Manage your client account and projects
• Communicate with you about your project
• Send invoices and project updates

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. How we store your information

Your data is stored securely in our database. Passwords are always stored in hashed form and are never readable by us. We retain your data for as long as your client relationship is active, or as required by law.

5. Your rights

Under GDPR, you have the right to access, correct, or delete your personal data at any time. To exercise any of these rights, please contact us through our website and we will respond within 30 days.

6. Cookies

We only use a single strictly necessary session cookie to keep you logged into your client account. This cookie expires after 24 hours and does not track you or collect personal data.

7. Changes to this policy

We may update this policy from time to time. Any changes will be reflected on this page with an updated date at the top.