Privacy Policy
Last updated: 31 July 2026
This Privacy Policy explains how DevNack LTD collects and uses personal data when you visit devnack.com, submit an enquiry, contact us by email or choose an external service to book a call.
1. Who is responsible for your data
DevNack LTD is the controller of the personal data described in this policy. DevNack LTD is registered in Scotland under company number SC737354. Our registered address is 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN, United Kingdom.
For privacy questions or to exercise your rights, contact info@devnack.com.
2. Personal data we collect
Depending on how you interact with the website, we may collect:
- Identity and contact data: your name, business email address, telephone number, role and preferred contact method.
- Company and project data: company name, sector, team size, the service you need, project description, indicative budget, urgency and other information you choose to provide.
- Communication data: emails, call-booking details and subsequent correspondence about an enquiry or potential engagement.
- Technical and security data: IP address, request headers, timestamps, server logs, Turnstile verification tokens and security signals used to detect automated or abusive submissions.
- Preference and consent data: selected language, cookie preference, the date of that choice and analytics interaction data when you have consented.
- Analytics data, when enabled with your consent: information about pages viewed, approximate device and browser characteristics, referral source and interactions measured by tags configured through Google Tag Manager.
Please do not submit passwords, payment-card details, health information or other special-category or highly confidential personal data through the enquiry form.
3. How we obtain personal data
Most personal data comes directly from you when you complete the enquiry form, email us or arrange a call. Technical and security data is generated by your browser, our hosting infrastructure and Cloudflare Turnstile. Analytics data is generated only after you consent to analytics.
4. Why we use personal data and our lawful bases
| Purpose | Data involved | Lawful basis |
|---|---|---|
| Respond to enquiries, understand requirements, prepare estimates and arrange introductory calls | Contact, company, project and communication data | Steps requested before entering a contract; legitimate interests in managing business-to-business enquiries where the contact acts for an organisation |
| Operate, protect and troubleshoot the website and prevent spam or abuse | Technical, security and limited contact data | Legitimate interests in maintaining a secure and reliable website |
| Measure website use and improve content | Consent and analytics data | Consent, which may be withdrawn at any time |
| Keep records, comply with applicable law and establish or defend legal claims | Relevant enquiry, communication and technical data | Legal obligation and legitimate interests in protecting legal rights |
5. Required and optional information
Fields marked as required are needed to assess and answer your enquiry. If you do not provide them, we may be unable to respond through the form. Optional fields can be left blank. You may also contact us directly at info@devnack.com.
6. Who receives personal data
We disclose personal data only where reasonably necessary to:
- hosting, infrastructure and server-administration providers that operate the website;
- our email and SMTP providers, which deliver and store enquiry correspondence;
- Cloudflare, which provides Turnstile anti-abuse verification for the enquiry form;
- Google and measurement providers configured through Google Tag Manager, but only after analytics consent;
- professional advisers, insurers, courts, regulators or public authorities when required by law or necessary to protect legal rights; and
- a purchaser or successor if DevNack undergoes a genuine corporate reorganisation, subject to appropriate confidentiality safeguards.
We do not sell personal data. Links to Calendly, Upwork, client websites and project websites take you to services operated by other organisations. Their own privacy notices apply when you choose to use those services.
7. International transfers
DevNack is established in the United Kingdom and works internationally. Some service providers may process personal data in the United Kingdom, European Economic Area, United States or other countries. Where data protection law requires a transfer safeguard, we rely on an applicable adequacy regulation or decision, approved contractual clauses such as the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another lawful mechanism.
8. How long we retain data
We keep personal data only for as long as reasonably necessary for the stated purpose:
| Data | Typical retention |
|---|---|
| Enquiries and related correspondence that do not become a client engagement | Up to 24 months after the last meaningful contact |
| Records connected to a contract, invoice or legal obligation | For the engagement and normally up to 6 years afterwards, or longer where law or a dispute requires it |
| Security and web-server logs under DevNack control | Normally up to 90 days, unless required for incident investigation or legal claims |
| Analytics data under DevNack control | Up to 14 months, subject to the settings of the connected analytics product |
| Cookie-consent preference stored in your browser | Up to 6 months |
| Language preference cookie | Up to 1 year |
| Turnstile data | According to Cloudflare terms and retention rules; verification tokens expire after approximately 5 minutes |
9. Your data-protection rights
Depending on the law that applies to you, your rights may include:
- accessing the personal data we hold about you;
- correcting inaccurate or incomplete data;
- requesting erasure or restriction of processing;
- objecting to processing based on legitimate interests;
- receiving data you provided in a portable format where applicable;
- withdrawing consent at any time without affecting processing carried out before withdrawal; and
- complaining to a competent supervisory authority.
To exercise a right, email info@devnack.com. We may request proportionate information to verify your identity. Rights are subject to legal conditions and exemptions.
10. Complaints
You may complain to the UK Information Commissioner’s Office or, if you are in Italy or another EEA country, to your local supervisory authority. We would appreciate the opportunity to address your concern first.
11. Automated checks and decision-making
Cloudflare Turnstile performs an automated anti-abuse assessment when the enquiry form is used. A failed check may prevent submission through the form, but it does not produce legal or similarly significant effects. You can instead contact info@devnack.com. DevNack does not otherwise use website data for solely automated decisions with legal or similarly significant effects.
12. Security, children and policy changes
We use proportionate technical and organisational measures to protect personal data, but no internet transmission or storage method is completely secure. The website and our services are intended for businesses and are not directed to children.
We may update this policy when our services, providers or legal obligations change. The updated date at the top identifies the current version.