Privacy Policy

Last updated: September 2026

1. Who We Are

The DevLab ("we", "us") runs this website.

We are the data controller for the personal data described in this policy, which means we decide how and why it is used.

2. What We Collect

We only collect what we need:

  • Contact form — your name, email address, project type, budget range, subject, and message.
  • Emails you send us — your email address and anything you choose to include.
  • Analytics (only with your consent) — the pages you visit, how long you stay, your approximate location (country or city), and device and browser details, collected by Google Analytics.
  • Technical data — our hosting provider may log your IP address and browser details to keep the site secure and running.

3. How We Use It and Our Lawful Basis

Under UK and EU data protection law (GDPR), we need a lawful basis for using your data. Ours are:

  • Replying to your enquiry and preparing a quote — taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
  • Delivering a project if you become a client — performing our contract with you.
  • Analytics — your consent, which you can withdraw at any time (see section 8).
  • Keeping the site secure — our legitimate interest in protecting our website and its visitors.

We will never use your details for marketing unless you ask us to, and we do not make decisions about you by automated means.

4. Who We Share It With

We use a small number of trusted providers to run our website. They process data on our behalf and only as we instruct:

  • Netlify — hosts our website and receives contact form submissions.
  • Sanity — stores our website content and serves images.
  • Google — Google Analytics (only if you accept analytics cookies).

We do not sell your data or share it with anyone for their own marketing.

5. International Transfers

Some of these providers are based in, or store data in, the United States. Where your data is transferred outside the UK or the European Economic Area, it is protected by appropriate safeguards, such as the UK–US Data Bridge, the EU–US Data Privacy Framework, or standard contractual clauses.

6. How Long We Keep It

We keep personal data only for as long as we need it, then securely delete it:

  • Enquiries that do not lead to a project — up to 12 months after our last contact.
  • Client project records — for the duration of the project, then up to 6 years for legal and accounting purposes.
  • Analytics data — up to 14 months, after which Google deletes it automatically.

7. Your Rights

You have the right to:

  • Access a copy of the personal data we hold about you
  • Ask us to correct data that is inaccurate or incomplete
  • Ask us to delete your data
  • Ask us to restrict or object to how we use your data
  • Receive your data in a portable format
  • Withdraw your consent at any time, where we rely on it

To exercise any of these rights, email us at the address below. We will respond within one month, free of charge.

8. Cookies

Cookies are small pieces of data saved in your browser. We use:

  • Essential — cookies that remember your cookie choice and your chosen language, each for 12 months. These are needed for the site to work as you asked, so they do not require consent.
  • Analytics (optional) — Google Analytics cookies (_ga and _ga_*, kept for up to 2 years) that help us understand how visitors use the site. They are only set if you choose "Accept all".
  • No advertising cookies — we do not use cookies for advertising or to track you across other websites.

You can change your choice at any time using the button below, or the Cookie settings link at the bottom of every page. If you withdraw consent, analytics cookies are removed and the page reloads without Google Analytics.

9. How to Complain

If you have concerns about how we use your data, please contact us first and we will do our best to help. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113). If you live in the EU, you can also complain to your local data protection authority — for example, the Commission for Personal Data Protection in Bulgaria or the Hellenic Data Protection Authority in Greece.

10. Changes to This Policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.

11. Contact Us

For any privacy questions or requests, email us at contact@the-devlab.com.