Skip to content

Privacy Policy

Last updated: September 2026

Who we are

Costanera Ltd is a software development and AI automation consultancy registered in England & Wales (Companies House no. 16024602), based in London, UK.

For any questions about this policy or your personal data, contact us at eduardo@costanera.uk.

What data we collect

Call request form

The call request form is the only form on this site that sends us anything. When you use it we collect your name, work email, company, role and your answers to the questions on that page. This data is processed by Web3Forms, a third-party form handling service, and delivered to us via email. We use it solely to prepare and arrange the call, and to reply to you (lawful basis: taking steps at your request before a contract, Art. 6(1)(b)). It is not sent anywhere else.

Scheduling link

After sending a call request you may choose to pick a time through TidyCal. If you do, TidyCal processes your name, email, and any information you provide there under their own privacy policy.

Analytics and tracking

We use PostHog to understand how the site is used — pages viewed, links clicked, and where visits come from. How it runs depends on the choice you make in the cookie banner:

  • If you reject cookies (or make no choice), analytics keeps running, but only at a level that cannot be tied back to you. Nothing at all is stored on your device beyond the record of your choice, and pages viewed are counted against a short-lived identifier that PostHog derives on its own servers and discards daily, so one visit cannot be linked to the next. Lawful basis: our legitimate interest in understanding and improving the site (UK GDPR Art. 6(1)(f)). You can stop this too at any time — see Your rights.
  • If you accept cookies, PostHog sets a first-party analytics cookie so it can recognise a return visit, and records how pages are used (scrolling, clicks) with everything you type masked before it leaves your browser. This also lets us see the country a visit came from. Lawful basis: your consent (Art. 6(1)(a)), which you can withdraw at any time via Cookie settings in the footer.

Analytics requests are routed through our own domain (costanera.uk/ingest) before reaching PostHog, so they are not blocked by browser extensions. If your browser sends the Global Privacy Control signal, we treat it as an objection and load no analytics at all. PostHog is hosted in the United States; the transfer is covered by the UK Extension to the EU-US Data Privacy Framework. We do not use advertising cookies, we run no advertising or social media pixels on this site, and we do not share your data with any advertising platform.

Cookies

On your first visit we ask whether you accept analytics cookies. Accepting and rejecting are equally easy, and nothing is set until you choose. You can change your mind at any time via Cookie settings in the footer of every page.

  • cos_consent — a first-party cookie that remembers the choice you made in the banner, so we do not ask again. Strictly necessary; set whichever option you pick. Expires after 12 months.
  • ph_* — a first-party cookie set by our analytics provider, PostHog: a pseudonymous visitor id and session id. Only with your consent. Expires after 12 months.

Booking a call takes you to TidyCal in a new tab; nothing from TidyCal is loaded on this site, and any cookies TidyCal sets there are governed by their own policy.

Third-party services

We use the following third-party services:

  • Web3Forms — processes contact form submissions.
  • PostHog (US-hosted) — site analytics: pages viewed, clicks, and referrer, tied to a pseudonymous identifier, never to your name or email. Cookieless unless you accept cookies in the banner.
  • TidyCal — the scheduling page we link to for booking a call.
  • Bunny Fonts (fonts.bunny.net) — serves web fonts. Bunny Fonts is a GDPR-compliant, privacy-focused alternative to Google Fonts and does not collect personal data.
  • Unsplash — some images on this site are loaded from Unsplash's CDN.

Data retention

  • Contact and call-request submissions — kept for 12 months after our last contact with you, then deleted. You can request deletion sooner at any time.
  • Analytics events — retained by PostHog for 12 months.
  • Session recordings (only with your consent) — retained for 30 days.

Your rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing of your data
  • Request portability of your data
  • Withdraw consent to analytics cookies at any time via Cookie settings in the footer
  • Object to cookieless analytics by enabling Global Privacy Control in your browser, or by emailing us

To exercise any of these rights, email us at eduardo@costanera.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Contact

Costanera Ltd
London, United Kingdom
eduardo@costanera.uk