Privacy Policy

Who we are

Devespresso is a web design and development studio. We build websites for startups and small businesses. References to "we", "us", or "our" in this policy refer to Devespresso.

For data protection purposes, Devespresso is the data controller for information collected through this website.

What data we collect

We only collect data you actively provide to us:

• —Contact form submissions — your name, email address, and the message you send us.
• —Project enquiries — any information you share with us about your project via email or form.
• —Analytics data — we use Google Analytics to collect anonymous usage data such as pages visited, time on site, and general location (country/city level). This is collected via cookies and does not identify you personally.

We do not use advertising or retargeting cookies. You can opt out of Google Analytics tracking at any time via Google's opt-out tool.

Why we collect it

We use the data you provide solely to:

• —Respond to your enquiry or message
• —Discuss, scope, and deliver a project you've engaged us for
• —Send project-related communications (invoices, updates, handoff docs)

The legal basis for processing your contact data is legitimate interests (responding to your enquiry) and, where a project is agreed, performance of a contract. Analytics data is processed on the basis of legitimate interests in understanding how our website is used and improving it.

How long we keep your data

If you contact us but no project begins, we retain your message for up to 6 months and then delete it.

If a project does proceed, we retain project-related communications and documents for up to 3 years after project completion for accounting and legal compliance purposes. After that, it is deleted.

Who we share your data with

We do not sell, rent, or trade your personal data. We may share it with:

• —Email / hosting providers — purely for delivery of messages (e.g. the platform that receives contact form submissions).
• —Google Analytics — anonymous usage data is shared with Google LLC under their privacy policy. No personally identifiable information is included.
• —Accountants or legal advisors — only if required for compliance, under strict confidentiality.

No one else. Full stop.

Your rights

Under UK GDPR, you have the right to:

• —Access the personal data we hold about you
• —Request correction of inaccurate data
• —Request deletion of your data (subject to legal retention requirements)
• —Object to or restrict processing
• —Lodge a complaint with the ICO (UK Information Commissioner's Office)

To exercise any of these rights, email us at [email protected]. We'll respond within 30 days.

Changes to this policy

If we make material changes to this policy, we'll update the "last updated" date at the top. We're not in the business of sneaking in changes — if anything significant changes, we'll note it plainly.