Privacy Policy
Last updated: 20 July 2026
Who we are
This website is operated by Devstack Consultancy Limited (“DevStack”, “we”, “us”), a company registered in England and Wales under company number 08363434, whose registered office is at West Hill House, Allerton Hill, Chapel Allerton, Leeds, LS7 3QB. Our correspondence address is 32 Park Cross Street, Leeds LS1 2QH.
We are the data controller for personal data collected through this website. For any question about this policy or your data, contact us at hello@devstack.co.uk or 0113 493 1006.
We are registered with the Information Commissioner’s Office (ICO), registration reference ZB364428.
What personal data we collect
- When you use our contact form: your name, company name, email address, phone number (optional), the option you select to describe your situation, and the content of your message.
- Technical data with each enquiry: the date and time, the page you submitted from, and your IP address — recorded to protect the site against spam and abuse (including rate-limiting how often the form can be submitted).
- Analytics data (only with your consent): if you accept analytics, Google Analytics collects usage information such as pages viewed, approximate location and device or browser type. See our Cookie Policy.
We do not run advertising trackers and do not knowingly collect data from anyone under 18.
Why we use it and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Respond to your enquiry and discuss a possible project | Steps taken at your request prior to a contract; and our legitimate interest in responding to business enquiries |
| Keep a record of enquiries and provide our services | Legitimate interests / performance of a contract |
| Protect the website from spam and abuse (IP, rate-limiting) | Legitimate interests in securing our systems |
| Send you marketing about our services | Your consent (the opt-in on our contact form) |
| Measure and improve website performance (analytics) | Your consent |
Marketing
We only send marketing emails to people who ask us to. If you tick the marketing opt-in when you contact us, we may add you to our mailing list and send occasional emails about our services and insights, using Campaign Monitor. We rely on your consent for this. You can withdraw consent at any time using the unsubscribe link in any marketing email, or by emailing hello@devstack.co.uk. Whether or not you opt in, we keep a record of your enquiry in our CRM (HubSpot) so we can respond and manage our relationship with you.
Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf under contract:
- Amazon Web Services (AWS) — hosts this website and our enquiry records (EC2, London region), and delivers our enquiry emails (Amazon SES).
- Google (Google Analytics 4) — website analytics, only if you consent.
- HubSpot — our customer relationship management (CRM) system.
- Campaign Monitor — sends our marketing emails.
We may also disclose data where required by law.
International transfers
Our website hosting and enquiry email are handled within the UK (AWS London). Some other providers (Google, HubSpot, Campaign Monitor) may process data outside the UK, including in the United States. Where that happens we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision, so your data receives an equivalent level of protection.
How long we keep it
We keep enquiry records for 5 years after our last contact with you, after which we delete them, unless we need to keep them longer to meet a legal or contractual obligation. Analytics data is retained for 14 months (our Google Analytics setting).
How we protect it
Enquiries are transmitted over an encrypted (HTTPS) connection and stored on access-controlled systems in the UK. We apply spam filtering and rate-limiting to the form. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
Your rights
Under UK data protection law you have the right to access, correct, erase, restrict or object to our use of your personal data, to data portability, and to withdraw consent (for analytics) or opt out of marketing at any time. To exercise any of these, contact hello@devstack.co.uk. You also have the right to complain to the ICO (ico.org.uk), though we’d appreciate the chance to help first.
Changes
We may update this policy from time to time. The “last updated” date shows the current version.