DevShopVault

This Privacy Policy explains how DevShopVault (“we”, “us”, or “our”) collects, uses, and protects personal data when you visit https://www.devshopvault.com (the “site”). We are an independent publication, and we are the data controller responsible for the personal data described here within the meaning of the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Who is the data controller

DevShopVault is the data controller for personal data processed through this site. If you have any question about this policy or about how we handle your data, you can reach us through our contact form. We do not publish a direct email address; the contact form routes your message to the team responsible for privacy requests.

What data we collect

Contact form data. When you submit our contact form we collect the name, email address, and any other details you choose to provide (such as company name, country, phone, reason for contact, and your message). We also record the time of submission and a hashed, non-reversible representation of your IP address for spam prevention.
Newsletter data. If you subscribe to our newsletter we collect the email address you provide.
Usage and analytics data. With your consent, we collect aggregate usage information such as pages viewed, approximate (city or country level) location derived from your IP address, device and browser type, and referring source. This is collected through Google Analytics 4.
Cookies and similar technologies. We use a small number of cookies and local storage entries, described in our Cookie Policy.

How and why we use your data

We process personal data for the following purposes, each with a lawful basis under the GDPR:

To respond to your enquiries submitted through the contact form. Lawful basis: our legitimate interest in answering people who contact us, and the steps taken at your request before any potential engagement.
To send the newsletter you asked for. Lawful basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
To measure and improve the site through analytics. Lawful basis: your consent, captured through our cookie banner. If you decline, no analytics cookies are set and no analytics data is collected.
To protect the site from spam, abuse, and security threats. Lawful basis: our legitimate interest in keeping the service secure.

Who we share data with

We do not sell your personal data. We share it only with the service providers (processors) that help us operate the site, each bound by a data processing agreement:

Vercel Inc. provides application hosting and serves the site infrastructure.
Cloudflare, Inc. provides content delivery, edge caching, and security protection.
Google LLC provides Google Analytics 4, used only after you consent.

We may also disclose data where required by law, regulation, or a valid legal request, or to protect our rights and the safety of our users.

International transfers

Some of our processors are based outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and equivalent UK transfer mechanisms.

How long we keep data

Contact form submissions: up to 24 months after our last contact with you, then deleted or anonymised.
Newsletter subscriptions: until you unsubscribe, after which your address is removed from the active list.
Analytics data: retained by Google Analytics for up to 14 months, then automatically deleted.

Your rights

Under the GDPR and UK GDPR you have the right to:

access the personal data we hold about you;
request correction of inaccurate or incomplete data;
request erasure of your data (the right to be forgotten);
object to or restrict processing based on legitimate interests;
withdraw consent at any time, where processing is based on consent;
request portability of the data you provided to us; and
lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us through our contact form. We will respond within one month, as required by law.

Children’s privacy

This site is intended for business and professional audiences and is not directed at children under 16. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The “Updated” date at the top of this page reflects the latest revision. Material changes will be highlighted on the site where appropriate.

Contact us

Questions about this policy or a request about your data? Reach us through the contact form.