Privacy Policy

2. Information we may collect

Depending on how you use MyCodeWork Access and related BritData services, we may collect or process the following categories of information:

3. How we use information

• To authenticate users and provide secure access to MyCodeWork Access and related BritData services.
• To verify whether a user is authorised to access a dashboard, customer area, Discord bot tool, or managed service.
• To maintain security, prevent fraud, detect abuse, enforce usage restrictions, and investigate suspicious activity.
• To provide support, respond to user enquiries, troubleshoot technical issues, and maintain service reliability.
• To create audit records for administrative, operational, security, and compliance purposes.
• To comply with applicable legal obligations, lawful requests, dispute handling, and enforcement of our Terms of Service.

4. OAuth scopes and third-party sign-in

If MyCodeWork Access uses OAuth or a third-party sign-in provider, the application requests only the scopes reasonably required to operate account login, identity verification, user-authorised account connection, and access control.

We do not sell OAuth data. We do not use OAuth data for unrelated advertising. We do not transfer OAuth data to unrelated third parties except where required to provide the requested service, maintain security, comply with law, or as otherwise described in this Privacy Policy.

5. Cookies, sessions, and local storage

We may use cookies, session storage, local storage, and similar technologies to keep users signed in, remember security preferences, protect against cross-site request forgery, detect misuse, and improve service stability. Users may control cookies through their browser settings, although disabling cookies may prevent authentication or protected areas from working.

6. Sharing and service providers

We may share information with trusted service providers, infrastructure providers, hosting providers, security vendors, support tools, analytics or logging tools, and contractors where necessary to operate, secure, or support the service.

These providers are expected to process information only for authorised service purposes and to apply appropriate security measures. We may also disclose information where required by law, court order, regulatory process, safety obligations, abuse investigation, dispute resolution, or enforcement of our legal rights.

7. International processing

NZ BritData is proudly owned and managed by a Kiwi Company. However, modern digital services may rely on infrastructure, cloud hosting, support systems, and security vendors located in New Zealand or other jurisdictions. Your information may therefore be processed, stored, or accessed outside your country of residence.

Where information is transferred internationally, we take reasonable steps to protect it through contractual, technical, organisational, and access-control safeguards appropriate to the nature of the service.

8. Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, account management, security monitoring, abuse prevention, audit records, legal compliance, dispute handling, and enforcement of our Terms of Service.

Security logs, audit records, and abuse-prevention records may be retained for longer periods where necessary to protect the service, investigate misuse, or comply with legal requirements.

9. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect information against unauthorised access, misuse, loss, alteration, or disclosure. These safeguards may include access controls, authentication checks, encryption where appropriate, logging, monitoring, rate limiting, and security review procedures.

No online service can guarantee absolute security. Users are responsible for keeping their own accounts, passwords, connected services, and devices secure.

10. User choices and rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, or review of certain personal information. These rights may be limited by security, legal, operational, fraud-prevention, or record-keeping requirements.

To make a privacy request, contact us using the support email listed below. We may need to verify your identity before processing a request.

11. Children and age restrictions

MyCodeWork Access is not intended for children who are not legally able to consent to use of the service in their jurisdiction. Where we become aware that information has been provided by a person who is not permitted to use the service, we may restrict, suspend, or delete the relevant account or data where appropriate.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, security, or service changes. The updated version will be posted on this page with a revised effective date. Continued use of MyCodeWork Access after changes become effective means the updated policy applies to your continued use.