Privacy Policy

Last updated: 25 July 2026

Who we are

CodeRock is the trading name of Mark McNally t/a CodeRock, a software consultancy registered in Jersey, Channel Islands. We build AI and automation systems for businesses, including hosted reporting products such as the CodeRock Media Dashboard. You can contact us about anything in this policy at hello@coderock.je.

What this policy covers

This policy explains how we handle personal data on this website (coderock.je) and within the software services we build and operate for our clients.

Data we collect on this website

Contact enquiries: if you use our contact form or email us, we keep your name, contact details and message so we can reply. We keep enquiries only as long as needed to handle them and any follow-up.
Technical logs: our web server keeps standard access logs (IP address, pages requested, time of request) for security and troubleshooting, retained for a short period.

We do not run third-party advertising or tracking on this site, and we do not sell personal data. Ever.

Data we process in our client services

Products such as the CodeRock Media Dashboard process advertising performance data (for example campaign spend, impressions, clicks, conversion metrics and ad text) from platforms including Google Ads and Meta Ads. In these services:

We access platform data read-only, and only where the account owner has granted that access.
Data is used solely to provide the contracted reporting service to that client — performance dashboards, anomaly alerts and reports reviewed by humans.
Each client's data is stored separately and shown only to that client's authorised users.
We do not sell, rent, syndicate or publicly display this data, and we do not use it to train machine-learning models.
Data is retained only for the duration of the service agreement, after which it is deleted.

Google API Services. CodeRock's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is accessed read-only, used only to provide the reporting features described above, never sold, never used for advertising, and never used to train AI or machine-learning models.

How we protect data

Data is encrypted in transit.
Access credentials are stored in restricted server-side configuration, never in source code, and are never shared with third parties.
Systems run on access-controlled infrastructure operated by CodeRock.

Your rights

Under the Data Protection (Jersey) Law 2018 (and, where applicable, the UK and EU GDPR), you have rights over your personal data, including the right to access, correct or delete it, and the right to complain to the Jersey Office of the Information Commissioner. To exercise any of these rights, email hello@coderock.je.

Changes to this policy

If we change this policy we will update this page and the date at the top. Significant changes affecting client services will be communicated to affected clients directly.