Privacy Policy

1. Introduction

Welcome to Devised IT ("we", "our", "us"). We are committed to protecting the privacy of every individual who interacts with our website, products and services. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information.

By accessing our website at devisedit.com or using any of our services, you agree to the practices described in this policy. If you do not agree with any part of this policy, please discontinue use of our services.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

2.1 Information You Provide

• Contact details — name, email address, phone number, company name when you fill out our contact form or request a quote.
• Project information — details about your requirements, timeline and budget that you share with us.
• Account data — login credentials when you register for a product or client portal.
• Communication records — emails, chat logs and call notes related to your enquiry.

2.2 Information Collected Automatically

• IP address, browser type, device type and operating system.
• Pages visited, time spent, referring URLs and clickstream data.
• Cookies and similar tracking technologies (see Section 5).

2.3 Information from Third Parties

We may receive limited data from analytics providers (e.g. Google Analytics), advertising partners, and public business directories — strictly for business intelligence purposes.

3. How We Use Your Data

We process your personal information only when we have a lawful basis to do so. The purposes include:

• Providing services — delivering proposals, contracts, software and technical support.
• Communication — responding to enquiries and sending project updates.
• Marketing — sending newsletters or product updates, which you can opt out of at any time.
• Legal compliance — meeting tax, accounting and regulatory obligations.
• Improvement — analysing site usage to improve UX, content and services.

4. Sharing & Disclosure

We do not sell or rent your personal data. We may share information only in the following cases:

• Service providers — trusted vendors such as cloud hosting (AWS, Azure), email delivery, and payment processors, all contractually bound to protect your data.
• Legal obligation — when required by law, court order or regulatory authority.
• Business transfer — in the event of a merger or acquisition, subject to continued protection under this policy.
• With your consent — any other sharing will only occur with your explicit permission.

5. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and analyse traffic. For full details, see our Cookies Policy.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

6. Data Security

We apply industry-standard security controls, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Role-based access controls and the principle of least privilege.
• Regular penetration testing and security audits.
• Employee confidentiality agreements and ongoing security training.

While we take every reasonable measure, no system is 100% secure. If you suspect a breach, contact us immediately at security@devisedit.com.

7. Data Retention

We retain personal data only for as long as necessary:

• Client project data — for the duration of the engagement plus 7 years (contract and tax purposes).
• Marketing contacts — until you unsubscribe, then up to 30 days for suppression lists.
• Website analytics — up to 26 months (Google Analytics default).
• Legal records — as required by applicable law.

8. Your Rights

Depending on your location (GDPR, CCPA, PDPA, etc.), you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — request erasure of your data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing for direct marketing or legitimate interests.
• Restriction — request that we limit processing while a dispute is resolved.
• Withdraw consent — at any time, for processing based on consent.

To exercise any of these rights, email privacy@devisedit.com. We respond within 30 days.

9. International Transfers

Devised IT operates globally. Your data may be transferred to and processed in countries outside your own. When this happens, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission and equivalent frameworks to ensure your data remains protected.

10. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent notice on our website. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

For questions, complaints or to exercise your rights, contact our Data Protection Officer:

• Email: privacy@devisedit.com
• Postal: Devised IT, Privacy Office, Global HQ — Remote-first
• Web: devisedit.com/contact