Privacy Policy

This website is part of the Devel Box group of companies, which includes The Devel Box, Web-Zilla, Commerce Cart, and Worth-it-Web.

INTRODUCTION
We at the Devel Box Group take the protection of your personal data very seriously and strictly adhere to the rules laid out by data-protection laws and General Data Personal Regulation (GDPR).

This privacy notice aims to give you information on how we collect and process your personal data through your use of this or any of the other above-mentioned company sites, including any data you may provide if you contact us regarding our products and services.
If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us on dpo@develbox.co.uk

LAWFUL BASIS OF PROCESSING PERSONAL INFORMATION
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
• The data subject has given consent to the processing
• Processing is necessary for the performance of a contract
• Processing is necessary for compliance with a legal obligation to which the controller is subject
• Processing necessary for the purpose of the legitimate interest pursued by the controller or third party

WHAT INFORMATION WE COLLECT
We collect personal information from you, for example, if you register to our website, request product information, or use any of our Services. The categories of personal information that we may collect, store and use about you include:
• Name – So we know who you are
• Telephone number – So we can call you to talk about your site
• Email – So we can email you about your site.
• Any Personal Data that is included in any of the content you provide us to put on your website. In this case, we will be considered as a Processor under GDPR.

USE OF ‘COOKIES’
Cookies are small text files (typically made up of letters and numbers) placed in the memory of your browser or device when you visit a website or view a message. Cookies allow a website to recognize a device or browser.

At the Devel Box Group, we set and use some cookies ourselves but only on our site. Please see what cookies we use and their expiry settings below:

Cookie Name Domain Expiry Purpose

HOW LONG DO WE KEEP INFORMATION FOR?
We pride ourselves on ensuring that your personal data is retained for the period that we need it for. We will only keep your data for the time period that you are a customer +90 days. We keep it whilst we’re providing you with a service so we can contact you throughout the process and the 90 days is how long we retain a copy of your product which will contain personal data in the form of a secure backup and records of who you were should you need it.

SECURITY OF PERSONAL INFORMATION
The Devel Box group is committed to handling your personal information with high standards of information security. We use computer safeguards such as up to date anti-virus systems, strong password management policies and full disk encryption.
We have also ensured that all employees have enough information security training and have a Media Handling policy which helps maintain, enforce and communicate best practices surrounding media handling throughout the business.

CHILDREN’S INFORMATION
We do not knowingly collect information on children without consent from a responsible parent. If we have collected personal information on a child, please see section contact us on dpo@develbox.co.uk immediately and the data will be investigated and removed if the appropriate consent cannot be obtained.

YOUR INDIVIDUAL RIGHTS
In this Section, we have summarised the rights that you have under the General Data Protection Regulation. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
Your principal rights under the General Data Protection Regulation are:
• Right to Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Object
• Right to Data Portability
• Right to complain
• Right to compensation
• Right to contest automated decision making – We do not use any, but it is still your right.

You have the right to confirmation as to whether we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply you a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee (£10).

You as a data subject have the right to rectification, which will allow you as the data subject to modify/change any personal information to the purpose of ensuring that the information we process is up to date.

The right to erasure or right to be forgotten will allow you as the data subject to inform us that you no longer want Devel Box group companies to continually store or process your personal information. Please be aware that we may decline your right for several reasons, which are not limited to, having a lawful basis to process your information or us needing your information for the performance of a contractual obligation.

As a data subject, you have the right to stop any processing of your personal information. Please be aware that you must provide us with a legitimate reason for us to stop processing. Any request made that doesn’t conform to the GDPR will be rejected.

We may send you marketing emails to make you aware of new products that we believe can benefit you, the data subject. As you have the right to object, you can click the unsubscribe link on all of our emails to inform us that you no longer want to receive marketing emails from us.

The right to data portability will allow you as the data subject to have your personal information securely transferred to another organization for processing. At Devel Box, we place this reasonability on you that data subject. When you make this request, we will export all information about you and securely transfer it to yourself. You, the data subject will be able to give this information to your chosen organization.

DATA TRANSFERS/THIRD PARTIES
PROVIDING YOUR INFORMATION TO OTHERS
Devel Box companies may disclose your personal data to some third parties insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy. Third parties that we use are listed below.

OUTSOURCED DESIGNERS
On occasion, we may use independent designers to assist with the completion of your project. All of these designers will have been vetted by the Devel Box from both a quality and information security point of view. However, we strongly recommend that if you are at all concerned by this, to get in touch and we will either:
• Ensure your project is not undertaken by outsourced designers
• Provide you details of the outsourced designer (that they have agreed can be provided) This could include their email address, name or website.

INTERNAL TOOLS
To help with the smooth running of day to day business operations, your personal data may be tracked or stored using third-party applications such as, but not limited to, Google, Trello, WeTransfer, and PayPal. If you wish to know the full list of third parties, please get in touch.

INFORMATION SECURITY WITH TRANSFERS
We do transfer personal information to third parties outside of the European Economic Area (EEA). We take steps to ensure that where your information is transferred outside of the EEA by our service providers, appropriate measures and controls are in place to protect the information in accordance with applicable data protection laws and regulations. For example, we may share information with affiliates based outside the EEA for the purposes foreseen by this Privacy Notice. Devel Box companies are subject to our internal data protection policies designed to protect data in accordance with EU data protection laws. In each case, such transfers are made in accordance with the requirements of Regulations (EU) 2016/679 (the General Data Protection Regulations or “GDPR”) and may be based on the use of the European Commission’s Standard Model Clauses for transfers of personal data outside the EEA
All information that is being transferred within the EEA will follow our strict Information Transfer Policy.

RIGHT TO COMPLAINT
We take any complaints about our collection and use of personal information very seriously. If you think that our collection or use of personal information is unfair, misleading or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance.
To make a complaint, please contact us via email dpo@develbox.co.uk. Alternatively, you can make a complaint to the Information Commissioner’s Office:

By Post:
Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

By Email: Click Here
By Phone: 01438 759 658 (National rate)

ADDITIONAL INFORMATION
Your trust is important to us. That is why we are always available to talk with you at any time and answer any questions concerning how your data is processed. If you have any questions that could not be answered by this privacy policy or if you wish to receive more in-depth information about any topic within it, please contact us via email dpo@develbox.co.uk.

REVIEW OF THIS POLICY
We keep this Policy under regular review. This Policy was last updated on 18/07/2019.

AMENDMENTS
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.