Privacy Policy — How Devintek Handles Your Data

This Devintek privacy policy describes how we collect, use, store, share and protect personal data in the course of providing our digital agency services. We have written this policy in plain English because legal language should not be a barrier to understanding how a service provider handles your data. We collect personal data in a small number of well-defined contexts: information you provide via our contact forms and discovery calls; technical data collected automatically via cookies, analytics scripts and server logs; project data shared during the course of an engagement; and limited HR data for our employees and contractors. We retain personal data only for as long as it is needed to deliver our services or meet legal obligations. Marketing data is retained for 24 months from your last engagement with us; project data is retained for the duration of the contract plus 7 years for accounting and legal purposes. We share data only with named sub-processors essential to our operations — hosting providers, analytics platforms, CRM systems and accounting tools — and we list these in our Data Processing Addendum. We never sell personal data to advertisers or third parties. We act as a GDPR data processor or controller depending on the engagement, and we provide signed Data Processing Addenda on request. You have the right to access, correct, port and delete personal data we hold about you. Email our team to exercise these rights or to ask any question about how your data is handled.