Who we are
Codon Valuation Advisors LLC ("Codon", "we") is a valuation advisory firm based in the United States. We are the controller of the personal data described in this policy. You can reach us at info@codonvaluation.com.
Where UK data protection law applies, including the UK GDPR and the Data Protection Act 2018, this policy is written to meet it. If we take on clients in the EU, the EU GDPR applies in the same way.
Personal data we collect on this website
Contact and quote forms. The forms on this site do not send anything to our servers. When you submit one, it opens your own email program with the details you typed, and you choose whether to send that email to us. What we receive is what you send: typically your name, work email address, company name and a description of what you need.
Free estimate tool. The estimate calculator runs entirely in your browser. The figures you enter are not sent to us or to anyone else.
Email. If you email us, we keep the correspondence so we can reply and keep a record of the enquiry.
Analytics. We use Vercel Web Analytics to count page views. It does not use cookies, does not store IP addresses and does not identify individual visitors, so no cookie banner is needed. We do not use advertising trackers.
Hosting logs. Our hosting provider, Vercel, records standard request information such as IP address, browser type and time of access for security and reliability. These logs are kept for a short period.
Fonts. The fonts on this site are served from our own domain, so no font provider sees your visit.
Personal data we receive in valuation engagements
A 409A or EMI valuation needs information about the company and its shareholders. Cap tables, option ledgers and grant schedules usually contain personal data about employees, founders and investors, such as names, the number of shares or options they hold, exercise prices and vesting dates. Financial information may include salaries where they are relevant to the valuation.
We use this data only to carry out the engagement: preparing the valuation, supporting it if it is reviewed by auditors, HMRC or the IRS, and meeting our professional record-keeping obligations. We do not use it for marketing, we do not sell it, and we do not use it to train software or models.
Our legal bases are performance of the contract with the client and our legitimate interests in providing the service and keeping records that support it. The client remains responsible for making sure it may share its employees' data with us, which is normally covered by the client's own privacy notice to staff.
International transfers
We are located in the United States. When a UK client sends us personal data, that is an international transfer under UK data protection law. We make these transfers under the UK International Data Transfer Addendum to the EU standard contractual clauses, which forms part of our engagement letter, and we apply the security measures described below. If you would like a copy of the transfer terms, email us.
Who we share data with
We share personal data only with service providers who process it on our behalf under contract: Vercel (website hosting and analytics) and Microsoft (email and file storage through Microsoft 365). We may disclose data where the law requires it, or to professional advisers such as our lawyers or insurers where necessary. We do not sell personal data.
How long we keep it
Enquiry emails are kept for as long as needed to deal with the enquiry and for a reasonable period afterwards, then deleted. Engagement files, including the data on which a valuation was based, are kept for as long as the valuation may need to be supported or defended and for the period our professional obligations require, then deleted. Our engagement letter sets out the retention period for each engagement.
Security
Client files are stored in access-controlled, encrypted cloud storage. Access is limited to the people working on the engagement. We send and receive documents over encrypted connections and, where a client prefers, through the client's own secure data room.
Your rights
Under UK data protection law you have the right to ask for access to the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive a copy of it in a portable format. To exercise any of these rights, email info@codonvaluation.com. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve the issue first.
Children
This website and our services are for businesses and are not directed at children.
The Codon Valuation connector
Our AI assistant connector has its own, shorter privacy policy at mcp.codonvaluation.com/privacy.
Changes to this policy
If we change this policy we will update the effective date at the top of the page. Significant changes will be noted here.
Contact
Codon Valuation Advisors LLC ยท info@codonvaluation.com