Legal
DEVSBYTE LTD, trading as DevsByte, is responsible for the personal information described in this policy where we decide why and how it is used. We are a company registered in England and Wales, company number 17321803.
Registered office: 235 Wright Rd, Saltley, Birmingham B8 1PB, United Kingdom.
Privacy contact: hello@devsbyte.com. Telephone: +44 (0) 7904 534315. Website: https://devsbyte.com.
You can contact us to ask about this policy, exercise your rights or raise a privacy concern. Please use “Privacy enquiry” in the email subject if convenient.
This policy explains how we handle personal information when you visit devsbyte.com, submit an enquiry through our website, email or social media, interact with our business social accounts, become a business contact or client, or receive marketing from us.
We apply relevant UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended. Other privacy laws may apply depending on your location and our activities.
Where we handle customer or staff information on behalf of a client, that client usually decides how the information is used. We handle it under agreed instructions and data processing terms. Please refer to the client’s privacy notice for that processing. We will help the client respond to requests as required.
Recruitment, employee data and any separately provided product with different data practices may be covered by additional notices supplied at the relevant time.
Information you provide: your name, business name, email address, telephone number, service interests, indicative budget, project requirements and the content of your messages. For social media enquiries and interactions, this may also include your username, display name, relevant public profile information, comments, direct messages and any attachments you send us. We use only the information needed to handle the interaction or agreed services. If you become a client, we may also hold contact roles, contract correspondence, invoice details and payment status needed to manage the engagement.
Technical information: our website and its infrastructure may generate connection and security records, such as IP addresses, request times, browser or device information, requested pages and error logs. The exact information depends on the hosting and security services used.
Marketing preferences: records of subscriptions, consent where applicable, the wording and time of consent, the channel and collection source, objections, opt-outs and the limited details needed to prevent unwanted future contact.
Information from others: a colleague, authorised representative or referral contact may provide your business contact details. Where relevant, we may obtain professional contact information from your organisation’s website or other publicly available business sources for lawful business communication. We will explain the source when required or on request.
Please do not include unnecessary sensitive information, passwords, payment card details or confidential third-party customer records in a general enquiry. If a project requires sensitive data, we will agree a suitable secure process first.
Responding to enquiries and preparing proposals: we use contact details and project information to understand your request, answer questions and discuss a possible engagement. Where you personally seek to enter a contract, our basis is taking steps at your request before that contract. When you represent a company, our basis is legitimate interests in responding to business enquiries and communicating with prospective clients.
Delivering and administering services: we use contact and engagement information to provide agreed work, arrange meetings, manage support and communicate about delivery. Our basis is performance of a contract where you are personally a contracting party, or legitimate interests in managing the client relationship where you represent an organisation.
Billing and records: we use relevant engagement and financial information to issue invoices, record payments and meet tax, accounting and other legal duties. Our bases are applicable legal obligations and, for routine administration not required by law, legitimate interests in running the business.
Website operation and security: we use necessary technical information to serve the website, diagnose faults, prevent abuse and protect systems. Our basis is legitimate interests in maintaining a secure and functioning website. Any applicable PECR requirements also apply.
Promotional communications: where consent is required, we rely on your consent. Where UK law permits relevant marketing without consent, such as a qualifying products and services soft opt-in or appropriate corporate subscriber communication, we may rely on legitimate interests in promoting our own services, subject to the safeguards in section 5.
Preferences, complaints and legal matters: we use information to honour opt-outs, respond to rights requests and complaints, and establish, exercise or defend legal claims. Our bases are relevant legal obligations and legitimate interests in respecting preferences and resolving disputes.
When relying on legitimate interests, we consider whether the use is necessary and balance our interests against your rights, interests and reasonable expectations. We do not rely on legitimate interests to bypass a requirement for marketing consent.
Submitting an enquiry through our website, email or social media does not automatically subscribe you to promotional emails. Following our social media account, liking a post, commenting or sending a direct message does not by itself give us consent to send promotional emails or direct messages. We may contact you about your enquiry, proposal or existing services without treating those communications as newsletter consent.
We may send occasional information about DevsByte services, offers or updates only where the applicable marketing rules permit it. Where consent is required, it must be an optional, specific and informed choice, separate from accepting terms or submitting an enquiry.
We plan to offer a separate optional marketing checkbox on enquiry or signup forms. Where provided, the checkbox will start unticked, name DevsByte and describe the relevant marketing channel and purpose. You can submit an enquiry without choosing marketing. We will record the choice and consent wording when you opt in. Consent to promotional email does not automatically cover SMS, WhatsApp or social media direct-message marketing; any required permissions must cover the relevant channel.
Under the UK products and services soft opt-in, we may contact individuals about our own similar services only where we collected their details directly during a sale or genuine negotiation, offered a clear opportunity to opt out at collection, and provide an opt-out in every subsequent marketing message. A previous enquiry alone is insufficient.
UK rules may allow promotional emails to limited companies and other corporate subscribers without prior PECR consent. Where a contact is identifiable, we still need a lawful basis, appropriate transparency and respect for their right to object. Individuals, sole traders and certain partnerships have different protections. If the subscriber type is unclear, we apply the individual subscriber standard.
Every promotional email will identify DevsByte and provide an unsubscribe method or valid contact address. You may also stop marketing by emailing hello@devsbyte.com. We will honour withdrawals and objections and exclude you from further promotional sending.
We may retain a minimal suppression record so that we do not accidentally contact you again. Unsubscribing from promotions does not prevent necessary communications about requested or existing services.
If you are outside the UK, we will also take account of applicable local marketing requirements. A UK exception does not automatically permit marketing in another country.
We use information from direct messages, comments and other enquiries on our business social media accounts to answer your request, discuss our services and manage relevant correspondence. We may record the necessary details in our business email or enquiry records so the appropriate team member can respond. These uses follow the lawful bases in section 4.
The social media platform also processes information for its own purposes under its own privacy notice and settings. Platforms such as Instagram, Facebook and LinkedIn may determine how messages, profiles and engagement information are stored or used by their services. Our handling of information that we receive is covered by this policy; the platform’s independent handling is covered by its notice.
Please avoid posting sensitive personal information in public comments. If we need additional project details, we will suggest a suitable private or secure contact method. We do not treat a general social media enquiry as permission for unrelated promotional campaigns.
Our current website uses enquiry forms and email communication. We do not currently operate visitor analytics, advertising pixels or an AI chatbot on the website.
Hosting, security or essential functionality may use cookies, local storage or similar technologies. Details of the technologies in use, their purposes and lifetimes, and available controls are provided in our Cookie Policy and any relevant website settings.
Where optional cookies or other device access require consent, we will seek that consent before enabling them. Browser settings may allow you to block or remove cookies, although essential features may be affected.
Before introducing analytics, advertising technologies, tracking pixels, chat or other materially different tools, we will review their privacy implications, update the relevant notices and implement any required choices. Permission to receive marketing is not automatically permission for email tracking.
We share information only where necessary for the purposes described here and with appropriate safeguards. Relevant recipients may include website hosting and infrastructure providers; email delivery and storage providers; approved personnel and contractors supporting enquiries or agreed services; and professional advisers such as accountants, lawyers and insurers where needed.
Payment and banking providers may process information when you pay invoices through their services. Their independent processing is governed by their own notices. We do not request payment card details through the general website enquiry form.
We may disclose necessary information to courts, regulators, law enforcement or other authorities where required by law or otherwise lawfully necessary. A business restructuring may involve limited disclosure to advisers or a successor organisation, subject to appropriate protections and notification where required.
Providers acting as our processors must act under suitable contractual terms. Their access is limited to the data needed for their role. Contact us for information about the providers relevant to your data.
We do not sell personal information or provide client customer lists to unrelated businesses for their own promotional use.
DevsByte is based in the United Kingdom. Information may be processed outside the UK if a service provider or authorised team member operates abroad. This includes relevant remote access, not only where servers are located.
Where a transfer to a separate organisation is restricted by applicable law, we will ensure an appropriate legal route before that transfer takes place. Depending on the destination and circumstances, this may involve adequacy regulations or decisions, or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, with required assessments and additional protections.
Where EU GDPR applies, the relevant EU transfer requirements must also be met. We do not assume that sending an enquiry authorises an otherwise unlawful transfer.
You can ask us which countries and recipients are involved in your information and request details or a copy of the applicable safeguards, subject to lawful redactions.
We retain information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal requirements. We consider the nature and sensitivity of the information, our relationship with you, whether the purpose remains current and whether a dispute or legal duty requires continued retention.
Enquiries that do not become projects: we review these after the enquiry has closed and delete or anonymise them when they are no longer needed for reasonable follow-up or dispute handling. We do not keep dormant enquiries indefinitely simply because they might be useful.
Client and engagement records: we retain the information needed during delivery and support and afterwards for relevant contractual, tax, accounting and legal requirements or applicable claim periods. Unnecessary working copies and excess contact information are removed sooner.
Marketing information: we retain active contacts while we have a valid marketing route and a current purpose, reviewing inactivity and permissions. Withdrawal or objection ends promotional use. Limited consent evidence and suppression records may remain where necessary to demonstrate and honour your preferences.
Technical records: these are retained for the period needed for fault investigation, security and abuse prevention, taking account of provider retention settings and any identified incident.
Backups and legal holds may require limited continued retention. Such information remains protected and is not reused for unrelated marketing. Contact us for the retention period relevant to your information.
We use appropriate technical and organisational measures to protect information against unauthorised access, loss, alteration or disclosure, taking account of the processing risks.
Access is limited to people who need it for their work, and relevant personnel and providers are subject to appropriate confidentiality and security requirements.
No website, email service or transmission method can be guaranteed completely secure. If you need to send sensitive project information, contact us to arrange a suitable method.
Depending on the applicable law, our lawful basis and the circumstances, you may have rights to obtain information about our processing; access your personal information; correct inaccurate or incomplete information; request deletion; restrict processing; receive certain information in a portable format; and object to certain uses.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not make processing before withdrawal unlawful. Where we rely on legitimate interests, you may object based on your particular situation. Your right to object to use of your personal information for direct marketing is absolute.
Some rights have legal conditions and exceptions. For example, information required for legal records may not be immediately deletable. We will explain any applicable restriction rather than treat all rights as unconditional.
To make a request, email hello@devsbyte.com. We may ask for proportionate information to verify your identity or clarify what you need. We normally respond to UK GDPR rights requests within one month, subject to lawful timing rules and permitted extensions, and explain any extension.
Requests are normally free of charge. Any refusal or fee will be applied only where permitted by law and explained to you. Where we act for a client as processor, we will direct or forward your request to the relevant controller.
This notice is intended to explain our practices to visitors worldwide. Applicable rights and obligations depend on where you are and how our activities relate to you.
Where the EU GDPR applies to our processing, the purposes, lawful bases and rights described above also apply subject to that law, and you may complain to the relevant supervisory authority in your country or other authority with jurisdiction.
Other jurisdictions may provide additional access, correction, deletion, appeal or opt-out rights. We will consider and fulfil requests where those laws apply. Contact us with your location and request so that we can identify the relevant requirements.
This policy does not waive mandatory local rights or restrict complaints to the UK. Where a local law requires a representative, additional disclosures or a separate notice, we will provide those details for the relevant processing.
Our website and business services are not directed at children under 18. We do not knowingly seek their personal information through general enquiries. If you believe a child has provided information, please contact us so that we can assess and appropriately address it.
We do not request special category data or criminal offence information through general website enquiries. If processing such information becomes necessary for an agreed service, appropriate legal conditions, safeguards and additional information will be established first.
Our current website enquiry process does not use an AI chatbot or make solely automated decisions about you that produce legal or similarly significant effects.
Offering AI development services does not mean that every website enquiry is sent to an AI model. Any materially different use of enquiry information for AI processing will be assessed and explained before it begins.
Client AI projects are governed by their own project terms, processing instructions and relevant privacy notices.
Our website may link to third-party sites or social media platforms. Their processing is governed by their own privacy notices. Please review those notices before providing information or using their services.
If you have concerns about our handling of your information, please contact hello@devsbyte.com or write to our registered office. We will review your concern and respond appropriately.
You also have the right to complain directly to the Information Commissioner’s Office (ICO), the UK data protection regulator: https://ico.org.uk/make-a-complaint/; telephone 0303 123 1113; postal address Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
You do not have to obtain our permission or complete our complaints process before approaching the ICO. Where another privacy regulator has jurisdiction, you may also exercise the relevant complaint rights there.
We may update this policy to reflect changes in our services, processing or legal requirements. The latest version and update date will be shown on the website. Where changes materially affect you, we will provide additional notice or obtain new consent where required.
Continuing to use the website is not consent to promotional marketing or to processing that legally requires a separate choice.
