Privacy policy
Last updated: October 7, 2026
Devife is responsible for the personal data described in this policy when operating devife.com and handling its own enquiries, client relationships and newsletters. Our address is Hermesweg 4A, 3741 GP Baarn, the Netherlands. Contact: info@devife.com, +31 30 304 5206.
Information we process and why
| Information | Purpose | Legal basis under the GDPR |
|---|---|---|
| Name, email, optional telephone number and website, selected services or plan, language and correspondence | Answer enquiries, prepare proposals and communicate about a project | Steps requested before a contract or performance of a contract; legitimate interest in handling business contacts where the contact represents an organisation |
| Client contact details, agreements and billing records | Deliver services, manage the relationship and maintain required records | Performance of a contract, legitimate interest in business administration and legal obligations |
| Newsletter email address, optional name, language and requested resource | Send subscribed newsletters and requested resources | Consent for newsletters; fulfilment of the resource request for delivery |
| Appointment details and information provided when booking | Arrange and conduct calls | Steps requested before a contract; legitimate interest in business communication |
| IP address, browser/device information, request logs and anti-bot verification data | Deliver the website, prevent abuse and diagnose technical problems | Legitimate interest in operating a secure and reliable website |
| Page visits, interactions, device/browser information and analytics identifiers | Understand website usage and improve the website | Consent for optional PostHog analytics |
We receive information directly from you, from your browser and from the service providers involved in your request. Please avoid including sensitive personal data in forms or appointment notes. The website is intended for business enquiries, rather than services directed at children.
Service providers and other recipients
Access is limited to people and providers who need the information for their work. The website implementation uses the following services:
- Cloudflare for hosting/delivery and website security.
- hCaptcha for anti-bot verification on contact, quote and newsletter forms. It processes technical data associated with the verification.
- Resend to send enquiry notifications and confirmation emails.
- Twenty CRM, accessed through Devife's CRM, to organise enquiries, contact details and project opportunities.
- MailerLite to manage newsletter subscribers, requested resources and email sequences.
- Cal.com software, served from calendar.devife.com, for appointment scheduling.
- PostHog, through e.devife.com with its EU service endpoint, for optional usage analytics. Analytics may include page views, clicks, performance measurements and form success/failure events. Rejecting analytics stops this optional capture.
- Senja to retrieve and display review information; loading review features can expose technical connection data to the provider.
Providers process data according to their role and applicable contractual arrangements. We may also disclose information where legally required or necessary to establish, exercise or defend legal claims. External links, such as social profiles, take you to services with their own privacy practices.
Cookies and your choices
See our cookie policy for cookie names, purposes, storage periods and controls. Optional analytics requires your choice in the cookie banner. You can withdraw that choice through Cookie settings in the footer. Browsing this website is not consent to analytics or newsletters. Newsletter emails provide an unsubscribe option; you can also contact us.
International processing
Providers may process information outside the European Economic Area. Where a transfer is subject to GDPR transfer rules, an applicable adequacy decision or appropriate safeguards, such as European Commission standard contractual clauses with any necessary supplementary measures, are required. A European endpoint alone does not establish that all processing remains within Europe. Contact us for information about safeguards relevant to your data.
Retention
Retention depends on the purpose and applicable obligations. Enquiry and appointment data is kept while needed to handle the request and reasonable follow-up; client records while needed for the engagement, administration and potential claims; and billing records for the legally required period. Newsletter data is kept while the subscription remains active, with limited suppression information where needed to respect an unsubscribe. Technical logs and analytics are kept for the period needed for security or analysis, rather than indefinitely. Cookie lifetimes are listed separately in the cookie policy. Contact us for the retention period or criteria applicable to a particular record.
Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data. You can object to processing based on legitimate interests and to direct marketing. You can withdraw consent at any time without affecting processing lawfully carried out before withdrawal.
Email info@devife.com. We may request proportionate information to verify your identity. We normally respond within one month; if a permitted extension is necessary, we explain it within that month. You may complain to the Autoriteit Persoonsgegevens or your competent supervisory authority.
Providing contact details is necessary to respond to your enquiry; without the required information we may be unable to handle it. Optional details are voluntary. We do not use the website's enquiry or analytics features to make solely automated decisions that produce legal or similarly significant effects.
Security, client data and updates
We use technical and organisational safeguards appropriate to the risks. No online system can guarantee absolute security. If Devife processes personal data on a client's instructions while delivering a project, that processing belongs in a separate data processing agreement, rather than this policy alone.
We may update this policy when practices or requirements change. The date above identifies this version; material changes will be communicated where required.