Privacy Policy

What personal data does Devodin collect?

Devodin collects what you type into one of its three inquiry forms (the home page form, the contact form and the quote form) and the email address you enter in the newsletter box in the footer. When you send any of these, it also records some details about your visit and your device, listed in the next section. It sets no analytics or advertising cookies and runs no third-party tracking scripts.

This policy covers devodin.com, which Devodin runs remote first for businesses in the US, the UK and Europe.

Which details do the forms ask for?

Each form sends Devodin the details you enter in it, and the fields differ from form to form: the contact form, the quote form and the short forms elsewhere on the site each ask for a different set. The list below shows every detail a form can ask for, so you can see what is collected before you send anything.

Depending on the form, you can give us:

• Your name and email address (required on every form).
• A phone number, company name and website address (optional).
• The services you are interested in, your industry and the timeline you have in mind (quote form).
• A free-text message, up to 5,000 characters.
• The page you submitted the form from, recorded automatically so we know which form you used.

When you send a form, these details are recorded with it automatically:

• Your IP address, and the approximate location Cloudflare works out from it: country, region, city, postal code, coordinates and time zone. This is the location of your network, not your exact position.
• Your browser’s user agent, and the browser, operating system and type of device it describes.
• Your screen and window size, your browser’s languages and time zone, and whether your device has a touch screen.
• How you reached the site on that visit: the first page you opened, the website that linked you there, any campaign tags in that link (such as utm_source, or a Google, Microsoft or Meta ad click ID), how many pages you viewed and how long you spent on the page with the form.

Devodin uses these details to spot spam and abuse, and to learn which pages and campaigns bring inquiries. They are stored with your inquiry, seen only by Devodin staff and kept for as long as the inquiry is.

The email box in the footer of every page is a newsletter signup.

It asks for your email address only. Devodin stores that address with the page you signed up from and the wording shown beside the box, and emails its own team to say someone signed up. The same visit and device details listed above are recorded with it. You can unsubscribe at any time by emailing the address on the contact page, and Devodin will stop sending you news and mark your address as unsubscribed.

Please do not put sensitive information, such as payment card numbers, passwords or health details, in the message box. A brief does not need them.

How is a form submission stored and who sees it?

A valid submission is written to the Devodin website database as a lead record. Only signed-in Devodin staff can read, change or delete these records. Submissions that look automated (a filled hidden field, or a form completed in under two seconds) are discarded and are not stored.

Each new submission is also emailed to the Devodin address or addresses set up in the site admin. The email is sent through an SMTP account that Devodin configures in the same admin area, so it passes through that mail provider. It names you as the sender and sets your email as the reply address, so we can answer you directly.

If auto-replies are switched on, you also receive a short confirmation email saying your message or brief arrived. It is sent only to the address you gave.

Why does Devodin use Cloudflare Turnstile?

The forms can be protected by Cloudflare Turnstile, a check that tells people from automated spam. If the check cannot be confirmed, the submission is refused. Cloudflare handles the data it receives under its own privacy policy, as described below.

When it is switched on, your browser loads a script from challenges.cloudflare.com and sends Cloudflare signals about your browser. When you submit, Devodin sends the resulting token, and your IP address as seen by the server, to Cloudflare to confirm the check passed. Cloudflare may use its own cookies or similar technology for this check.

Does the site use cookies or analytics?

Devodin does not set cookies for visitors and does not use analytics, advertising pixels or social media trackers. Fonts, scripts and images are served from devodin.com itself, not from a third party. The only exceptions are a loading-screen flag, the Cloudflare check and a staff sign-in cookie, all described below.

The site writes nothing else to your browser storage. The exceptions are the Cloudflare check described above, a sign-in cookie that exists only for Devodin staff who log in to the admin area, and the session storage described next.

While you browse, the site keeps the first page you opened, the website that linked you there, any campaign tags and a count of pages viewed in your browser’s session storage, so they can be sent with a form if you fill one in. Session storage is not a cookie. Nothing in it reaches Devodin unless you send a form, and your browser deletes it when you close the tab.

Like any web server, the servers that host the site keep standard request logs (such as IP address, time, page requested and browser type) for security and fault finding. Devodin does not use them to profile visitors.

What is the legal basis, and how long is data kept?

For visitors in the UK and the EU, Devodin processes inquiry data because you asked it to respond to you or to prepare a proposal (steps taken at your request), and for its legitimate interest in running a business and keeping its forms free of spam. The visit and device details sent with a form rely on that same legitimate interest: keeping the forms free of spam and abuse, and knowing which pages and campaigns bring inquiries.

For visitors in the UK and the EU, Devodin sends the newsletter on the basis of your consent, which you give by submitting your address in the footer box. You can withdraw it at any time. Newsletter addresses are kept until you unsubscribe, after which Devodin keeps only the fact that the address opted out so that it is not contacted again.

Devodin does not publish a fixed retention period. An inquiry is kept for as long as it is needed to answer you, to carry out any work that follows and to keep a record of it, and it is removed when you ask us to delete it or when it is no longer needed.

Does Devodin sell or share personal data?

No. Devodin does not sell your personal information and does not share it for advertising. It is disclosed only to the providers needed to run the forms: the host of the site and its database, the mail provider that delivers inquiry emails, and Cloudflare for the spam check.

What are your privacy rights in the US, UK and Europe?

If the UK GDPR or the EU GDPR applies to you, you have the right to access your data, correct it, have it erased, restrict or object to its use, receive it in a portable format, and withdraw consent where we rely on it.

You can also complain to your data protection authority, which is the Information Commissioner’s Office in the UK or your national authority in the EU.

If you live in a US state with a privacy law, such as California, you may ask what personal information we hold about you, ask us to correct or delete it, and expect not to be treated differently for asking. Devodin does not sell or share personal information, so there is nothing to opt out of.

To use any of these rights, email hello@devodin.com from the address you used on the form. Devodin replies within one business day to acknowledge the request.

Who is responsible for your data, and how do you contact them?

Devodin is the controller of the personal data described in this policy, which covers devodin.com. Privacy questions, access requests and deletion requests all go to hello@devodin.com, and you can also use the contact page.

Will this policy change?

Yes, it can. If the site starts to collect something new, such as analytics, this page is updated first and the date at the top changes, so that date always shows when the policy last changed. The rules for using the site itself are on the terms of use page.