Contact us now

Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains what personal data Deviart (“we”, “us”) collects when you visit deviart.agency or contact us, why we collect it, who we share it with and what rights you have. We are a white label WordPress development agency. Most people who contact us are agencies and businesses looking for a development partner, so we try to collect as little personal data as we can.

Who is responsible for your data

Deviart is the controller of the personal data described in this policy. If you have any questions about it, or want to use any of your rights, email us at [email protected] or use the contact form.

What data we collect

Data you send us through the contact form

When you send a request through our contact form, we receive the details you enter: your name, email address, company or agency name, website, the type of client and project, your budget range, your message and whether you want us to send you an NDA. Only the name, email and message are required.

Data collected automatically

  • Analytics. We use Google Analytics and Ahrefs Web Analytics to understand how visitors find and use the site: pages viewed, time on page, referring site, approximate location (country or city), device and browser type. We use this data in aggregate to improve the site, not to identify you.
  • Security and performance. Our site runs behind Cloudflare, which processes your IP address and request data to protect the site from attacks and deliver it faster. Our hosting provider keeps standard server logs (IP address, date and time, page requested, browser) for security and troubleshooting.
  • Spam protection. Our contact form uses Google reCAPTCHA to tell people from bots. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis.

Data from client projects

If you become a client, we may get access to your or your clients’ websites, hosting and content to do the work. That data is covered by our service agreement and NDA, not by this policy. We use it only to deliver the agreed work and never share it with third parties without your permission.

How and why we use your data

We use your data only for these purposes:

  • To answer your request and prepare an estimate or proposal. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in replying to business enquiries.
  • To deliver services and manage our working relationship, if you become a client. Legal basis: performance of a contract.
  • To analyze and improve the website. Legal basis: your consent where it is required, otherwise our legitimate interest in running a useful website.
  • To keep the website and contact form secure and free of spam. Legal basis: our legitimate interest in protecting our site and systems.
  • To meet legal, tax and accounting obligations. Legal basis: legal obligation.

We do not sell your personal data, we do not use it for automated decision-making, and we do not add you to a mailing list unless you ask us to.

Who we share your data with

We share personal data only with service providers that help us run the website and our business, and only as much as they need:

  • Google (Google Analytics, reCAPTCHA, Google Workspace email and Google Fonts)
  • Ahrefs (website analytics)
  • Cloudflare (security and content delivery)
  • Our hosting provider (website and database hosting)

These providers process data on our behalf or under their own privacy policies. We may also disclose data if the law requires it or to protect our legal rights.

The site links to our LinkedIn page and to websites we have built. Those sites have their own privacy policies, and we are not responsible for how they handle your data.

International transfers

Some of our providers, such as Google and Cloudflare, process data outside the European Economic Area and the United Kingdom, including in the United States. When this happens, the transfer is protected by safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Cookies

We use a small number of cookies and similar technologies:

  • Analytics cookies set by Google Analytics (for example _ga and _ga_*) to tell visits apart and measure how the site is used.
  • Security cookies set by Cloudflare (for example __cf_bm) to filter out bots.
  • reCAPTCHA cookies set by Google when the contact form is loaded, to protect it from spam.

Ahrefs Web Analytics does not use cookies. You can block or delete cookies in your browser settings. Blocking analytics cookies will not stop the site from working. You can also opt out of Google Analytics with the Google Analytics opt-out browser add-on.

How long we keep your data

  • Contact form requests and related emails: up to 24 months after our last contact, unless you become a client.
  • Client records: for as long as we work together, and afterwards for as long as tax and accounting law requires.
  • Analytics data: for the retention period set in Google Analytics, after which it is deleted automatically.
  • Server and security logs: for a short period, usually no longer than a few weeks.

Your rights

Depending on where you live, including the EU, the UK and some US states, you have the right to:

  • access the personal data we hold about you and get a copy of it;
  • correct data that is wrong or incomplete;
  • ask us to delete your data;
  • restrict or object to how we use your data, including for analytics;
  • receive your data in a portable format;
  • withdraw your consent at any time, where we rely on consent.

To use any of these rights, email us at [email protected]. We will reply within one month. You also have the right to complain to your local data protection authority.

How we protect your data

The site is served only over HTTPS. Access to form submissions and client systems is limited to the people who need it, and we use strong passwords and two-factor authentication wherever it is available. No system is completely secure, but we take reasonable steps to protect your data from loss, misuse and unauthorized access.

Children

Our services are for businesses. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy when our services, tools or legal requirements change. The date at the top of the page shows when it was last updated.

Contact

Questions about this policy or your data: [email protected] or our contact form.