Privacy notice

Who is responsible

Controller

Cuko Ltd

Registered no.

14989953 — England and Wales

Office

58 Twyford Avenue, W3 9QB, London, United Kingdom

ICO registration

C1919036 — UK Information Commissioner's Office register

Contact

[email protected]

Data collected through this site

Directly from the site

cuko.uk is a static site. It does not include analytics, advertising trackers, embedded social widgets, or fingerprinting code. No personal data is collected client-side beyond what is strictly necessary to render the page you have requested.

Through hosting

The site is served by GitHub Pages (operated by GitHub, Inc., a subsidiary of Microsoft). GitHub processes connection metadata — including IP addresses, user-agent strings, and request URLs — for security, abuse-prevention, and infrastructure operation purposes. GitHub is the data controller for those server-side logs. See GitHub's privacy statement.

Through correspondence

If you email Cuko Ltd at the addresses linked from this site, we receive your email address, the content of your message, any attachments, and standard email-protocol metadata. Email is hosted by an established UK or EU mail provider; routing transits the public internet under TLS where supported.

Through local storage

One key is written to your browser's localStorage: cuko-theme. It records your preferred theme (auto, light, or dark). The value never leaves your device and contains no personal data. You can clear it at any time via your browser's site-data controls.

Why we hold what we hold

Email correspondence

To respond to enquiries and operate engagements. Lawful basis: legitimate interests (Article 6(1)(f) UK and EU GDPR) and, for active engagements, performance of a contract (Article 6(1)(b)).

Hosting logs

Service security and abuse prevention. Lawful basis: legitimate interests (Article 6(1)(f)). Controller: GitHub.

Theme preference

Strictly necessary to honour your accessibility choice between visits. Stored locally; not personal data; PECR exemption applies.

How long data is kept

Email correspondence

Active enquiry threads kept for the duration of the conversation plus six years where a contract followed (UK statutory limitation). Cold or unsolicited messages deleted within twelve months.

Hosting logs

Retained by GitHub per its own retention schedule. Cuko Ltd does not access these logs in the ordinary course.

Theme preference

Persists on your device until you clear it.

Who else sees the data

Personal data is not sold, rented, or otherwise shared for marketing. Limited disclosure may occur in three circumstances:

Service providers acting under contract — currently the email provider, the cloud-hosting provider for the company's working files, and accountants. Each operates as a processor under written terms aligned with Article 28 UK and EU GDPR.

Legal obligation — if disclosure is required by law, court order, or competent regulator (HMRC, ICO, FCA, or equivalent EU authorities under MiCA / DORA where applicable).

Corporate transactions — in the event of a sale, merger, or restructuring of Cuko Ltd, data may transfer to a successor entity subject to equivalent protections.

Data leaving the UK or EEA

Some processors operate from the United States. Transfers rely on the UK International Data Transfer Addendum and EU Standard Contractual Clauses (2021/914), supplemented by the UK Extension and supplementary measures where the processor's home jurisdiction lacks an adequacy decision. The transfer mechanism is reviewed at engagement start.

Rights under UK and EU GDPR

• AccessConfirm whether we hold personal data about you and obtain a copy.
• RectificationCorrect inaccurate or incomplete personal data.
• ErasureHave your personal data deleted where the legal grounds for processing are no longer met.
• RestrictionPause processing while a dispute about accuracy or grounds is resolved.
• PortabilityReceive personal data in a structured, commonly used, machine-readable format.
• ObjectionObject to processing based on legitimate interests, including direct marketing (we do none, but the right stands).
• ComplainLodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your national supervisory authority in the EU.

Requests are answered within thirty days, free of charge, unless manifestly unfounded or excessive.

Updates to this notice

Last updated

2026-04-26

Cadence

Reviewed at every release of cuko.uk and at least annually

Material changes will be flagged at the top of this page for sixty days following the change.