What we collect
Your name, email address, company, the budget range and services you select, and whatever you write in the message field. We keep it so we can reply to you and, if we work together, so we have a record of what was agreed.
Page views, referrer, approximate location by country, and device type, collected in aggregate. We do not build advertising profiles and we do not sell anything to data brokers.
Billing details, contract documents, and whatever access credentials the project requires. Credentials live in a password manager with per-project access, never in email or chat.
How we use it
To answer your enquiry, quote your project, deliver the work, invoice you for it, and meet our tax and accounting obligations. That is the whole list.
We send a newsletter only to people who explicitly asked for one, and every message has a one-click unsubscribe that works immediately rather than in five business days.
Legal basis
For enquiries and newsletters, your consent. For delivering projects and invoicing, performance of a contract. For security logging and fraud prevention, our legitimate interest in running the business safely. For accounting records, a legal obligation.
Who we share it with
Only the processors we need to operate: our email provider, our analytics provider, our accounting software, our hosting provider, and payment processors. Each is bound by a data processing agreement.
We do not sell personal data. We do not share it for advertising. If a legal request compels disclosure, we will tell you unless we are legally prevented from doing so.
How long we keep it
Enquiries that do not become projects: 24 months, then deleted. Client records: seven years after the final invoice, because tax law requires it. Newsletter subscriptions: until you unsubscribe. Analytics: 14 months, aggregated.
Cookies
The site sets no advertising or tracking cookies. Analytics are collected without cross-site identifiers, and no cookie banner is needed because there is nothing to consent to beyond what is strictly necessary to serve the page.
If you have a client login on a project we built for you, that will set a session cookie. That is functional and expires when you log out.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable format. Write to info@buddydevs.com and we will respond within 30 days, usually much sooner.
If you are in the UK or EU and you are not satisfied with our response, you have the right to complain to your national data protection authority.
Security
Encryption in transit on everything, two-factor authentication on every account that supports it, per-project credential scoping, and access removed when a project ends. If a breach affects your data we will tell you and the relevant authority within 72 hours of becoming aware of it.
Contact
BuddyDevs — questions about this policy, or a request about your data, go to info@buddydevs.com. General enquiries go to info@buddydevs.com.
We update this policy when what we do changes, not on a schedule. Material changes are announced by email to clients and newsletter subscribers.