Privacy Policy

1. Introduction & Scope

Welcome to Analytics Dev ("we", "our", or "us"), operating via analyticsdev.com. We are committed to safeguarding the privacy and personal data of our website visitors, clients, and partners in full compliance with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and applicable global privacy regulations.

This Privacy Policy describes what information we collect when you visit our website, submit inquiries, or contract our tracking, analytics, and AI automation engineering services.

2. Information We Collect

We adhere strictly to data minimization principles. We collect only the data necessary to respond to inquiries, execute client projects, and ensure the security of our infrastructure:

• Direct Inquiries: When you complete our contact or audit request form, we collect your full name, work email address, website URL, requested service scope, CMS/platform, and project message.
• Client Project Access Data: For contracted client engagements, we may receive temporary administrative or viewer access to your Google Tag Manager, Google Analytics 4, or cloud infrastructure. All such access is governed by mutual Non-Disclosure Agreements (NDAs) and revoked immediately upon project handover.
• Technical Server Logs: Our web servers record standard HTTP request logs (IP address, browser user-agent, operating system, and request timestamps) solely for security diagnostics, rate limiting, and DDoS prevention.

3. Legal Bases for Processing (GDPR)

We process your personal information under the following lawful bases:

• Legitimate Interests (Article 6(1)(f) GDPR): To respond to your project inquiries, provide accurate proposals, and safeguard our website infrastructure.
• Contractual Necessity (Article 6(1)(b) GDPR): To execute the tracking implementation, audit, or automation deliverables outlined in client statements of work.
• Consent (Article 6(1)(a) GDPR): Where you explicitly opt into specific communications or analytical measurement.

4. Our Own Measurement Practices on analyticsdev.com

As a measurement agency, we practice what we preach. We do not inject unvetted, bloat-heavy third-party advertising cookies or cross-site tracking scripts on this website without explicit user consent. Any measurement implemented on this website is privacy-conscious, utilizes first-party domains, respects Do-Not-Track / Global Privacy Control headers, and redacts PII.

5. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data under any circumstances. We only share data with reputable cloud service providers acting as data processors under strict Data Processing Agreements (DPAs):

• Hosting & VPS Infrastructure: Hostinger VPS / Docker infrastructure for secure container hosting.
• Transactional Communication: Resend / secure SMTP providers for delivering form notifications.
• Calendar Scheduling: Cal.com / Calendly for self-service consultation bookings.

6. Data Retention & Security

We retain contact form inquiries for no longer than 12 months after the conclusion of communication, unless a formal contract is executed (in which case commercial records are retained as required by tax and commercial law).

We enforce industry-standard security measures including TLS 1.3 encryption in transit, container isolation, SSH key-only server authentication, and strict least-privilege access.

7. Your Rights Under GDPR & UK GDPR

Depending on your jurisdiction, you possess the following rights regarding your personal data:

• The right to request access to personal data we hold about you.
• The right to request rectification of inaccurate personal data.
• The right to request erasure ("the right to be forgotten") of your personal data.
• The right to restrict or object to the processing of your data.
• The right to data portability.

To exercise any of these rights, contact our Data Protection Team at hello@analyticsdev.com. We respond to all verified requests within 30 days.

8. Supervisory Authority

If you are based in the United Kingdom or the European Union and believe our processing of your personal data infringes applicable laws, you have the right to lodge a complaint with your local data protection authority:

• UK: Information Commissioner's Office (ICO) — ico.org.uk
• EU: The supervisory authority of your EU Member State.

9. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our legal obligations or technical services. Any modifications will be posted to this page with an updated revision date.