Legal
Privacy notice
How personal data sent through this site is used, kept and protected. Written in plain English against the UK GDPR and the Data Protection Act 2018; the rights described are the ones those laws give you.
Draft — to be reviewed before launch
Who we are
The controller for personal data collected through this site is the business trading as DevAgency. Its registered details are set out below where they have been configured; a blank line means the detail has not yet been confirmed for publication, not that it does not exist.
- Trading as
- DevAgency
- Controller
- Wild Web Ventures LLC, a limited liability company
- Registration
- Registered in the State of New Mexico, United States no. 0008126487
- Registered address
- 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States
- Data protection contact
- privacy@devagency.co.uk
What we collect
- Enquiries and quote requests. Your name, email address, optional telephone number and business name, your answers in the quote wizard (including any files you attach) and any message you send through the contact form.
- Partnership enquiries. Your name, business name, website, email address and your answers about the collaboration you are proposing.
- Client accounts. Login details, your organisation's membership and roles, proposals, acceptances, invoices, payments, project records and messages exchanged with the team.
- Technical records. Security logs (login attempts, IP address, a hash of the browser identifier), audit records of actions taken in the client and team panels, and a record of each consent you give or withdraw.
- Analytics, only with your consent. Page path, page type, the referring site's domain and a coarse device class. No name, email, IP address or full browser identifier is stored in analytics, and no persistent visitor identifier is used.
Why we use it and the lawful basis
- Answering your enquiry and preparing a proposal — steps taken at your request before entering into a contract.
- Delivering a project, invoicing and support — performance of the contract with your organisation.
- Keeping accounting, tax and audit records — our legal obligations.
- Security, fraud prevention and audit trails — our legitimate interest in running the service safely, balanced against your interests.
- Occasional service updates by email — only with your separate, recorded consent, which you can withdraw at any time. Consent is never inferred from an enquiry.
- First-party analytics — your consent, given through the cookie banner and changeable on the cookies page.
Operational emails about an enquiry, proposal, invoice or project are part of providing the service and are not marketing.
Who we share it with
Processors acting on our instructions only: hosting and email delivery providers, and a payment provider when you pay an invoice online (your card details go to the payment provider directly and never reach our systems). Where a provider is outside the UK, transfers rely on UK adequacy regulations or the UK International Data Transfer Agreement. We do not sell personal data and we do not share it with advertisers.
If you are introduced by a partner agency, we share only what the partnership agreement with that agency requires, which is agreed in writing before any introduction.
How long we keep it
- Unsubmitted quote drafts: deleted 14 days after the last activity.
- Enquiries that do not become projects: kept for the configured enquiry retention period, then pseudonymised.
- Contracts, invoices, payments and the audit trail: kept for the period UK accounting and tax law requires.
- Client accounts: pseudonymised after the configured period of inactivity following closure.
- Analytics events: deleted after 400 days.
How we protect it
Encrypted connections, hashed passwords, multi-factor authentication for the team, organisation-level data isolation in the client panel, private file storage behind signed and expiring links, and an audit log of team actions. Access is limited to the people who need it for the purposes above.
Your rights
Under the UK GDPR you can ask for access to your personal data, correction, erasure, restriction, portability of the data you provided, and you can object to processing based on legitimate interests. Where processing relies on consent you can withdraw it at any time without affecting what happened before. To exercise a right, use the contact details above; we respond within the time the law allows.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. We would welcome the chance to address a concern first.
Cookies and analytics
The cookies page lists every cookie and item of browser storage this site uses, with its purpose. Strictly necessary items work without consent; analytics runs only after you choose "Accept analytics" and stops when you choose "Reject analytics".
Changes to this notice
This notice is versioned. If a change affects a consent you have given, the cookie banner or the relevant form asks again rather than assuming the earlier answer still stands.