Privacy policy
What information this website collects, why, who processes it, how long it is kept, and how to exercise your rights.
Last updated
Summary#
- We collect what you choose to send us through the contact form, plus basic technical logs that every website keeps for security.
- Google Analytics and advertising tags run only if you accept them in the cookie banner. You can change your choice at any time with Cookie settings at the bottom of every page.
- We never sell, rent or trade your personal information, and we do not share it for anyone else’s marketing. We use it only to reply to you and to run our business.
- Our main service provider is Google (Google Cloud, Google Workspace, Google Analytics and Google Tag Manager).
- You can ask to see, correct or delete your information at any time.
- Our responsibility is limited as far as the law allows; see Limits of our responsibility.
Who we are#
This website, webappsdev.com, is operated by WebAppsDev (“WebAppsDev”, “we”, “us”). We are the controller of the personal information described in this policy.
For any privacy question or request, contact us at the contact form.
Information we collect#
Information you give us#
When you use the contact form we collect your name, email address, company (optional), the kind of project and timeline you select, and your message. If you email or call us, we receive whatever you include.
Information collected automatically#
- Server logs. Like any website, our hosting platform (Google App Engine) records technical details of each request: IP address, browser type, the page requested, the referring page and the time. We use these only to operate and secure the site.
- Analytics, with your consent. If you allow analytics cookies, Google Analytics collects information about your visit: pages viewed, time on page, the website or campaign that referred you, approximate location (derived from your IP address, which Google Analytics does not store), device and browser type, and actions such as sending the contact form.
- Enquiry source, with your consent. If you allow analytics cookies, your browser also remembers the page you arrived on and any campaign tags in the link you followed. This stays in your browser and is sent to us only if you submit the contact form, so we know how you found us.
- Advertising, with your consent. If you allow marketing cookies and we run advertising campaigns, tags loaded through Google Tag Manager (for example Google Ads) may measure whether you arrived from an ad and may be used to show you our ads on other websites.
We do not knowingly collect sensitive information (such as health data or government ID numbers). Please do not send it through the contact form.
How we use it, and our legal bases#
| Purpose | Information | Legal basis (EU/UK) |
|---|---|---|
| Reply to your enquiry and discuss a project | Contact form details, emails | Taking steps at your request before a contract; our legitimate interest in answering enquiries |
| Deliver and manage client projects | Contact and project details | Performance of a contract |
| Keep the website running and secure | Server logs | Legitimate interest in a secure, working website |
| Understand how the website is used | Analytics data | Your consent |
| Measure and improve advertising | Marketing cookies | Your consent |
| Meet legal, tax and accounting duties | Business records | Legal obligation |
We do not use your information for automated decision-making that has legal or similarly significant effects on you.
Cookies#
Cookies and similar technologies are described in detail, with a list of each one, in our cookie policy. Only the cookie that remembers your choice is used without consent. Everything else waits until you accept it in the cookie banner.
We do not sell your data#
We do not sell, rent, trade or otherwise hand over personal information to anyone, for money or for anything else of value. We have not done so in the past 12 months and we will not do so in the future. We do not share personal information with data brokers, list sellers or other businesses for their own marketing.
The only parties that receive personal information are the service providers listed below, which process it on our behalf, and the authorities or advisers described there.
One note required by some US state privacy laws: allowing marketing cookies can count as “sharing” personal information for targeted advertising, even though nothing is sold. These cookies are off unless you turn them on, you can turn them off at any time with Cookie settings, and we treat a Global Privacy Control signal from your browser as a request to keep them off.
Who we share it with#
We share personal information only with service providers that process it on our behalf and under our instructions:
- Google Cloud (App Engine, Cloud Logging, Secret Manager): website hosting, server logs and the contact form backend.
- Google Workspace (Google Sheets, Google Chat, Gmail): storing and handling enquiries and communicating with you.
- Google Analytics and Google Tag Manager: website analytics, only with your consent.
- Google Ads and other advertising platforms configured in Google Tag Manager: advertising measurement, only with your consent.
We may also disclose information to professional advisers (such as accountants and lawyers), when required by law or to protect our rights, or to a successor if the business is ever transferred.
International transfers#
Google may process information in the United States and other countries. Where information about people in the EU, EEA, UK or Switzerland is transferred, it is protected by Google’s certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and by Standard Contractual Clauses in Google’s data processing terms.
How long we keep it#
- Enquiries that do not lead to a project: up to 24 months after our last contact, then deleted.
- Client records: for the duration of our work together and afterwards for as long as tax, accounting or other laws require.
- Server logs: 30 days.
- Google Analytics data: up to 14 months, after which Google deletes it.
- Cookies: see the durations in the cookie policy.
Your rights#
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy;
- correct information that is inaccurate or incomplete;
- delete your information;
- restrict or object to how we use it, including at any time for direct marketing;
- receive your information in a portable format;
- withdraw consent at any time, without affecting what happened before;
- opt out of the sale or sharing of personal information and targeted advertising (US state laws);
- not be discriminated against for exercising any of these rights.
To exercise a right, contact us at the contact form. We may need to confirm your identity first. We answer within one month (or 45 days where US state law applies), and you can use an authorized agent where the law allows it. If you are in the EU, EEA or UK, you can also complain to your data protection authority, though we would appreciate the chance to resolve your concern first.
How we protect it#
The website and contact form use HTTPS only. Information is stored with Google, encrypted at rest and in transit. Access is limited to the people and service accounts that need it, credentials are kept in a secrets manager rather than in code, and software dependencies are checked for known vulnerabilities before every release. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you as the law requires.
Children#
This website is intended for businesses and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.
Limits of our responsibility#
To the fullest extent permitted by law, we are not responsible or liable for:
- the content, security or privacy practices of other websites and services, including any linked from this website;
- how Google or any other provider processes information under its own terms and privacy policy, where it acts on its own behalf rather than ours;
- information you choose to send us by insecure means (such as ordinary email) or make public yourself;
- any unauthorized access to, or loss, interception or disclosure of, information that results from events beyond our reasonable control, such as attacks on or failures of the internet or third-party infrastructure;
- any loss or damage arising from your use of this website, as further set out in the disclaimer and limitation of liability in our terms and conditions.
This section does not remove any right you have under data protection law that cannot be limited by agreement.
Changes to this policy#
We may update this policy from time to time. The date at the top shows when it was last changed, and significant changes will be highlighted on this website.
Contact#
WebAppsDev
Contact: the contact form