Last updated: 20 October 2026
Who is responsible
Core & Code is operated by Victoria Barton in Portugal. Victoria Barton is the data controller for information collected through this website.
Email: hello@coreandcode.ai
What I collect
- Workshop registration: your first name, email address and, if you choose to provide them, your studio name and location.
- Free website check: your name or studio name, town, website address, email address and the answers or results needed to run the check.
- Messages and enquiries: the details you include when you email me or book a call.
- Technical and security information: limited server logs, such as an IP address, device information and request time, used to keep the website secure and stop abuse.
- Payment information: if a paid service is offered, Stripe handles the card details. I receive payment and order information, but I do not receive your full card number.
Why I use it
- To register you for the workshop, send the joining link and reminders, and run the session you asked to attend.
- To run a requested website check and send the result.
- To reply to questions and discuss work you have asked about.
- To send useful marketing emails only when you actively choose that option. You can unsubscribe at any time.
- To protect the website, prevent misuse and meet legal or accounting duties.
The legal basis is usually providing a service you requested, taking steps before a contract, your consent for optional marketing, a legal obligation, or my legitimate interest in keeping the website secure.
Your AI assessment
The AI assessment uses the business description, task, tools, time estimate and goals you enter, plus readable content from the public website page you optionally provide. These are sent to Anthropic to generate your requested report. Do not include confidential material or personal client details. The assessment does not connect to your inbox, booking software or other accounts.
The report is temporarily stored on Netlify behind a private access token so this browser can retrieve it. Access expires after 24 hours, and an hourly cleanup removes expired reports. Limited request counters used for abuse protection are removed after two days. Local development previews keep these records only in server memory. If you request an emailed PDF, your email address is saved as a contact in Brevo and Brevo processes the report attachment to deliver it. Victoria can see that contact record. Your email is not sent to Anthropic. Requesting the PDF does not subscribe you to marketing: you are added to our existing mailing list only if you separately tick the optional updates box. Existing unsubscribe preferences are preserved. Contact records remain in Brevo until you request deletion or they are removed during routine housekeeping. Contact hello@coreandcode.ai to request access or deletion. Email delivery records are also processed by Brevo.
Who helps me process it
I use trusted service providers only where needed: Netlify for website hosting and server functions; Brevo for contact records and email delivery; Stripe for payments; Google services for meeting, calendar and local business information; Cloudflare for abuse protection when enabled; and AI or search providers, including Anthropic and Google, when a requested check needs them.
Some providers may process information outside the European Economic Area. Where that happens, I rely on the provider's lawful transfer safeguards, such as an adequacy decision or approved contractual clauses.
How long I keep it
I keep information only for as long as it is needed for the purpose collected. Workshop details are kept for the event and reasonable follow-up. Check and enquiry information is kept while the request is being handled and for a reasonable period afterwards. Marketing details are kept until you unsubscribe or ask me to delete them. Payment and business records may be kept for the period required by Portuguese tax and accounting law.
Your rights
You can ask for access to your information, correction, deletion, restriction, portability, or object to certain uses. You can withdraw consent at any time. Email hello@coreandcode.ai and tell me what you need.
You can also complain to Portugal's data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
Cookies
This website does not currently use advertising or analytics cookies. Read the cookie notice for the full explanation.
Changes
I will update this page when the website, services or providers change. The date at the top shows the latest version.