Privacy notice

From Code to Lead (fromcodetolead.com) is operated by Iyan Barry (sole trader), Australia (“we”, “us”). This notice explains what personal information we collect and how we handle it, consistent with the Australian Privacy Principles.

What we collect

• Account details: your first name, email address, role type and a securely hashed password (we never store your password itself).
• Your activity: scenario answers, private notes, first-30-days progress and feedback you send.
• Consent records: when you accepted the terms and whether you opted in to update emails.
• Technical data: a session cookie that keeps you logged in, and short-lived IP-based rate-limit counters used to prevent abuse. We do not use advertising or analytics cookies.

Why we use it

To provide your account and membership features, save your progress, respond to feedback and protect the service from abuse. If you opt in, we use your email address to tell you about new scenarios. We will not send marketing email without your consent.

Where it is stored

Data is stored with Cloudflare, Inc., our hosting and database provider. Cloudflare may process data outside Australia, including in the United States. We do not sell or rent your personal information and do not share it with advertisers.

How long we keep it

We keep your data while your account is active. When you delete your account, your account and associated records are deleted immediately from the live database. Rate-limit counters are overwritten within hours.

Your choices and rights

• Download your data or delete your account at any time from your account page.
• Change your email preference at any time.
• Ask for access to or correction of your information by emailing hello@fromcodetolead.com.

Complaints

Please contact us first at hello@fromcodetolead.com. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

Security

We use HTTPS, hashed passwords, secure HttpOnly cookies, cross-site request protections and rate limiting. No system is perfectly secure; if we become aware of an eligible data breach we will notify affected people as required by law.