Privacy.
How Developh, Lda. handles the data you give us — forms, cookies and ads. GDPR requests: legal@developh.co.
Who we are
The controller is Developh, Lda., based at Avenida 5 de Outubro 52, 1.º Esquerdo, 1050-058 Lisboa, Portugal. This site is our studio, not a SaaS product: there are no user accounts and nothing to log into.
Privacy questions and requests to access, correct or delete your data: legal@developh.co. The studio’s public email remains hello@developh.co.
What we collect
What you send
Contact form and brief: name, email, phone, company (if you add it), enquiry category and the message. Newsletter: email only.
Enquiry attribution
If you arrived from an ad or campaign, the first-touch gclid and UTM parameters travel with the enquiry so we know where it came from. This is sales context, not an advertising profile.
What the browser sends
With analytics accepted, PostHog (EU cloud) records pageviews, clicks and aggregated technical data (device, referrer, language). With marketing accepted, the Google tag measures form submits and clicks on tel: numbers. Refuse and the site still works.
Why, and on what basis
Replying to you
We process the enquiry to contact you and, if we work together, to deliver the work. Basis: pre-contractual steps at your request (GDPR art. 6(1)(b)) and our legitimate interest in running the studio.
Newsletter
Only if you subscribe. Every email has an unsubscribe link. Basis: consent.
Analytics and ads
PostHog and Google Ads (AW-18351756615) load on every visit so we can measure the site and our ads. Basis: legitimate interest (GDPR art. 6(1)(f)). You can object: turn on Do Not Track (PostHog honours it), block cookies for this domain in your browser or write to legal@developh.co.
Who we share with
We do not sell data. The processors below handle the minimum needed for the site and the studio to run:
Infrastructure
Vercel (hosting), Convex (database for enquiries and the newsletter), Resend (transactional email to the studio inbox).
Measurement
PostHog EU (analytics) and Google Ireland Limited (ads conversions), as described above.
Legal duties
We may disclose data if Portuguese law or a court order requires it. We will tell you when we are allowed to.
Retention and security
Contact enquiries: while the conversation is open, then the minimum needed for accounting and to defend our rights. Newsletter: until you unsubscribe. Analytics: whatever retention is set in PostHog EU. Client invoicing: Portuguese statutory periods.
The site runs on HTTPS. Access to inboxes and the database is limited to the team. There is no customer login on this site, so we do not store your passwords.
Your rights
Under the GDPR you can ask for access, rectification, erasure, restriction, portability and objection, and you can withdraw consent without affecting processing already done. Write to legal@developh.co. We reply within the legal time limits.
You can also lodge a complaint with the Portuguese data-protection authority, CNPD (cnpd.pt).
Transfers and children
Outside the EU
Convex, Resend and Vercel may process data in the United States. When they do, the transfer uses GDPR safeguards (the Commission’s standard contractual clauses or the vendor’s equivalent).
Children
This site is not directed at anyone under 16 and we do not knowingly collect their data. If we find that we have, we delete it.
Changes
If this policy changes in a material way, we update the date at the top of this page. The version at https://www.developh.co/privacy-policy is the one that applies.