Privacy Policy

1. Who we are

The Dev Drift ("we", "us", "our") is a technology studio providing software engineering, design, and AI automation services. Our website is thedevdrift.com. For privacy matters, contact us at hello@thedevdrift.com.

2. What data we collect

We collect only what we need to operate this website and respond to enquiries:

• Contact form submissions — name, email address, company name, project type, budget range, and message content.
• Newsletter subscriptions — email address and optional first name.
• Usage data — anonymised page visit data (no personally identifiable information) collected via our own analytics system when you consent to cookies.
• Technical data — IP address (stored anonymised), browser type, and referring URL, collected for security and performance monitoring.

3. How we use your data

• To respond to your project enquiry or contact request.
• To send you the newsletter you subscribed to (you can unsubscribe at any time via the link in every email).
• To improve the website experience using anonymised analytics.
• To comply with legal obligations.

We do not sell, rent, or trade your personal data with any third party.

4. Legal basis for processing (GDPR)

For visitors in the European Economic Area or United Kingdom, our legal bases are:

• Legitimate interest — responding to your enquiry.
• Consent — newsletter subscriptions and non-essential cookies.
• Legal obligation — where required by law.

5. Cookies

We use a cookie consent banner. If you accept, we store a first-party analytics cookie to understand aggregate site usage (page views, referral sources). No cross-site tracking cookies are used. You can change your preferences at any time via the Cookie Preferences link in the footer.

6. Data retention

Contact form submissions are retained for up to 2 years to support ongoing project relationships, then deleted. Newsletter subscriber data is retained until you unsubscribe, after which it is deleted within 30 days. Anonymised analytics data may be retained indefinitely.

7. Your rights

Under GDPR and UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing.
• Data portability.

To exercise any of these rights, email hello@thedevdrift.com. We will respond within 30 days.

8. Third-party services

We use the following third-party services which may process data on our behalf:

• MongoDB Atlas — database hosting (EU region).
• SendGrid / SMTP provider — transactional email delivery for contact form notifications.

All processors are contractually bound to process data only on our instructions and in accordance with GDPR.

9. Changes to this policy

We may update this policy occasionally. The "last updated" date at the top reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email hello@thedevdrift.com.