Legal
Privacy Policy
At Devdwell, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website or use our Webflow development services.
Jump to section
Who We Are
Devdwell is a Webflow development studio operating as a remote team, led from Pakistan and serving clients across the USA, UK, and Europe. Devdwell acts as the data controller for personal information collected through this website.
For any privacy-related questions, contact us at [email protected].
Information We Collect
- Personal Information — Name, email address, company name, and any other details you provide when you contact us or use our services.
- Technical Data — IP address, browser type, device information, and analytics data collected via cookies and similar technologies.
- Payment Information — If applicable, payment details processed through third-party payment processors. Devdwell does not directly store full payment card details.
Legal Basis for Processing
Under GDPR/UK GDPR, we rely on the following legal bases for each way we use your information:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Providing Webflow development services | Contact details, project information | Contractual necessity |
| Responding to inquiries | Contact details | Legitimate interest |
| Website analytics | Technical/cookie data | Consent |
| Marketing communications | Email address | Consent |
| Legal/tax compliance | Invoices, contracts, and tax records | Legal obligation |
How We Use Your Information
- To provide and manage our Webflow development services.
- To respond to inquiries and offer customer support.
- To improve our website and user experience through analytics.
- To comply with legal obligations.
Data Retention
We retain personal information only as long as necessary for the purposes described in this policy:
- Client and project data — for the duration of our engagement and up to 7 years afterward for tax and legal records.
- Website analytics data — up to 26 months.
- Marketing contact data — until you unsubscribe, or after 3 years of inactivity.
Information Sharing
We do not sell personal information. We may share it only:
- When required by law or legal process.
- With trusted service providers who help us deliver our services (e.g., hosting, analytics, payment processing), under contracts that limit how they may use your data.
Current providers include Netlify (website hosting), Google Analytics (site analytics), and our email and payment providers. Each is bound by contracts limiting how they may use your data.
International Data Transfers
Devdwell is based in Pakistan. If you are located in the UK or European Economic Area, your information may be transferred to and processed in a country outside the UK/EEA. Where your data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses (SCCs) as the transfer safeguard.
Your Privacy Rights
If You Are in the UK or European Economic Area (GDPR)
- Access — Request a copy of the personal data we hold about you.
- Rectification — Ask us to correct inaccurate or incomplete information.
- Erasure — Request deletion of your personal data (the “right to be forgotten”), where applicable.
- Restriction — Ask us to limit how we process your data in certain circumstances.
- Portability — Receive your data in a structured, commonly used, machine-readable format, or have it moved to another controller.
- Objection — Object to processing based on our legitimate interests, including direct marketing.
- Withdraw consent — Withdraw any consent you previously gave, at any time, without affecting processing already carried out.
- Complain — Lodge a complaint with your local supervisory authority, e.g., the ICO in the UK.
If You Are in the United States
Depending on your state of residence and Devdwell's applicable thresholds, you may have additional rights under state privacy laws (such as California's CCPA/CPRA). Devdwell does not currently meet the CCPA's applicability thresholds, but you may still contact us at [email protected] with any privacy request, and we will respond in good faith. You can opt out of marketing communications at any time using the unsubscribe link in any email, or by contacting us directly.
Data Security
We implement industry-standard technical and organizational security measures to protect your data from unauthorized access, alteration, or loss.
Children's Privacy
Our services are directed at businesses, not children. We do not knowingly collect personal information from individuals under 16. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.
Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy policies or practices.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date at the top of this page. Continued use of our services after changes take effect implies acceptance of the updated policy.
Contact Us
For any questions about this policy or to exercise your privacy rights, contact us at [email protected].