Privacy policy

This policy explains how we collect and use personal data when you use the BioCoda website and application, or contact us. BioCoda is a service provided by Astragrid Technologies Ltd, the data controller responsible for your personal data.

Who we are

Astragrid Technologies Ltd, 86-90 Paul Street, London, EC2A 4NE, United Kingdom. We are registered with the Information Commissioner’s Office (registration number ZB992067). For any question about this policy or your data, contact us at misi@biocoda.uk.

The data we collect

• Enquiries. When you use the “book a demo or pilot” form we collect your name, work email, organisation, role, and any message you send.
• Account holders. For licensed users we hold your name, email, organisation, and role, together with authentication data needed to sign you in. Where an ecologist records a field verification, we store the condition assessment, notes, and, if you choose to share it, the device location captured at the time.
• Technical data. Essential cookies that keep you signed in, and standard server logs (such as request times and error information) used to keep the service secure and working.

Earth observation imagery used by BioCoda (for example Copernicus Sentinel-2 data) relates to land, not people, and does not contain your personal data.

Why we use it, and our legal basis

• Responding to your enquiry and taking steps at your request before any agreement. Legal basis: our legitimate interests and, where relevant, steps prior to a contract.
• Providing the service to your organisation. Legal basis: performance of a contract with the organisation that licenses BioCoda.
• Keeping the service secure and reliable. Legal basis: our legitimate interests in protecting the service and its users.

Cookies

We use only essential cookies needed to sign you in and keep your session secure. We do not use advertising or third-party tracking cookies.

Who we share it with

We use a small number of trusted providers to run the service, who process data on our instructions:

• Vercel, for website and application hosting.
• Supabase, for the database and sign-in (authentication).
• Brevo, for sending transactional email such as invites and password resets.
• Web3Forms, for delivering enquiry-form submissions to us.

We do not sell your personal data. We may disclose data where required by law or to protect our legal rights.

International transfers

Some of our providers may process data outside the United Kingdom. Where they do, we rely on appropriate safeguards, such as a UK adequacy decision or standard contractual clauses, so your data remains protected.

How long we keep it

We keep enquiry data for as long as needed to deal with your enquiry and for a reasonable period afterwards. Account data is kept for the life of the licence and for any period we are required to retain it by law, after which it is deleted or anonymised.

Your rights

You have the right to access your personal data and to ask us to correct, erase, or restrict it, to object to processing, and to data portability. To exercise any of these, email misi@biocoda.uk. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, though we would welcome the chance to resolve any concern first.

Changes to this policy

We may update this policy from time to time. The date above shows when it was last changed.