Codon Valuation Advisors privacy & data

We are the controller of the personal data described in this policy.

We receive what you type: typically your name, work email address, company name and a description of what you need.

Financial information may include salaries where they are relevant to the valuation.

Cap tables, option ledgers and grant schedules usually contain personal data about employees, founders and investors, such as names, the number of shares or options they hold, exercise prices and vesting dates.

Hosting logs. Our hosting provider, Vercel, records standard request information such as IP address, browser type and time of access for security and reliability.

we use the Google Ads tag on this site to count how many visitors who arrived from an ad go on to request a quote, email us or use the free estimate.

These are numbers about a company's shares and finances, such as share counts, share prices, revenue, cash and debt

The tools do not ask for names, email addresses, company names or other personal information

Our hosting provider also records standard request metadata, such as IP address and time

If you email us, we keep the correspondence so we can reply and keep a record of the enquiry.

We use this data only to carry out the engagement: preparing the valuation, supporting it if it is reviewed by auditors, HMRC or the IRS, and meeting our professional record-keeping obligations.

We do not use the tag for remarketing or personalised advertising.

We sometimes email finance leads and founders at companies that may need a 409A or HMRC valuation.

We use the inputs only to calculate the result you asked for and send it back to your AI assistant.

We do not use them for marketing, profiling, advertising or training models.

Enquiry emails are kept for as long as needed to deal with the enquiry and for a reasonable period afterwards, then deleted.

We keep these details for up to two years after our last contact.

Engagement files, including the data on which a valuation was based, are kept for as long as the valuation may need to be supported or defended and for the period our professional obligations require, then deleted.

Inputs are processed in memory and discarded once the response is sent. We do not save tool inputs or results.

These logs do not include tool inputs and are kept for a short period, no longer than 30 days.

We are located in the United States.

We make these transfers under the UK International Data Transfer Addendum to the EU standard contractual clauses, which forms part of our engagement letter, and we apply the security measures described below.

We share personal data only with service providers who process it on our behalf under contract: Vercel (website hosting and analytics), Microsoft (email and file storage through Microsoft 365), Google (advertising measurement), Web3Forms (form delivery) and Anthropic (the Claude AI assistant we use to research companies, draft emails and keep our records).

To exercise any of these rights, email info@codonvaluation.com .

Under UK data protection law you have the right to ask for access to the personal data we hold about you

to have it corrected or erased

to restrict or object to how we use it

to receive a copy of it in a portable format

You have rights to access, correct, erase, restrict or object to processing of your personal data

the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority

We do not sell personal data.