—Legal

Privacy Policy

Last updated: 21 April 2026

1. Who we are

Devode is a web design and development studio registered in Amsterdam, the Netherlands.

  • Address: Nieuwe Spiegelstraat 2a1, 1017 DE Amsterdam
  • KVK number: 87621177
  • Contact: info@devode.nl

When this policy mentions “Devode,” “we,” “us” or “our,” it refers to Devode as the controller of your personal data under the General Data Protection Regulation (GDPR).

2. What data we collect

We keep data collection to a minimum. Depending on how you interact with us, we may process the following:

a. When you visit our website

  • IP address (anonymised), browser type, operating system, referral URL, pages visited and time of access — collected through server logs and, where applicable, privacy-friendly analytics.

b. When you contact us

  • Name, email address, company name, phone number and any information you include in your message or project brief.

c. When you become a client

  • Billing details (company name, address, VAT number), project correspondence, invoices and payment records.

3. Why we process your data

We process personal data for the following purposes:

  • To respond to enquiries — when you send us an email or fill in a contact form (legal basis: legitimate interest).
  • To deliver our services — project management, communication and invoicing (legal basis: performance of a contract).
  • To improve our website — understanding how visitors use the site so we can make it better (legal basis: legitimate interest).
  • To meet legal obligations — tax and bookkeeping requirements under Dutch law (legal basis: legal obligation).

4. How we store and protect your data

Your data is stored on servers within the European Economic Area (EEA). We use industry-standard security measures including encrypted connections (TLS), access controls and regular software updates. We do not store more data than necessary, and we review what we hold periodically.

5. Sharing with third parties

We do not sell your personal data. We may share data with the following categories of processors, all of which are bound by data processing agreements:

  • Hosting provider — for serving this website.
  • Email provider — for sending and receiving correspondence.
  • Accounting software — for invoicing and financial administration.
  • Analytics — privacy-friendly, anonymised website analytics (no personal profiles are created).

We will never transfer your data outside the EEA unless adequate safeguards are in place (e.g. Standard Contractual Clauses or an adequacy decision by the European Commission).

6. Cookies

This website uses only strictly necessary cookies required for the site to function. We do not use tracking cookies or third-party advertising cookies. No consent banner is needed because we do not place non-essential cookies.

7. Retention periods

  • Enquiry data: deleted within 12 months after our last communication, unless a project follows.
  • Client data: retained for the duration of the engagement plus 7 years to comply with Dutch fiscal retention requirements.
  • Analytics data: aggregated and anonymised; raw logs deleted within 90 days.

8. Your rights

Under the GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data where there is no compelling reason to continue processing it.
  • Restriction — ask us to limit how we use your data.
  • Portability — request your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interest.

To exercise any of these rights, contact us at info@devode.nl. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

9. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will update the “last updated” date at the top of this page. We encourage you to review this policy periodically.

10. Contact

Questions about this policy or how we handle your data? Reach us at info@devode.nl or write to us at Nieuwe Spiegelstraat 2a1, 1017 DE Amsterdam, the Netherlands.