Privacy
Policy

Last updated: August 13, 2026

Scope and operator

This notice describes the personal-data processing implemented by the DevX Digital website. DevX Digital is the public brand operated by TYPERT DIGITAL S.R.L. (CUI 44150727, ONRC J2021007245401). The business operates exclusively remotely. Bucharest, Romania is its public operating location; it does not maintain a customer-facing office.

For privacy questions or requests, email privacy@devxdigital.com.

Information you provide

The contact form can collect:

• your name and email address;
• an optional phone number and website URL;
• project type, urgency, an optional budget range, and your enquiry message;
• the page language and your required Terms acknowledgement.

This website does not implement user accounts, a newsletter signup, a marketing-email signup, or an automated decision-making flow. It does not write contact submissions to a DevX-controlled CRM or database.

Page, attribution, and analytics data

Without Analytics consent, the form keeps only the query-free current page path and any service you explicitly selected in memory so that this context can accompany your enquiry.

When you grant Analytics consent through CookieYes, the website can store sanitized first-touch context for the current browser tab: the landing-page path, a query-free referrer, allowlisted UTM values, and service intent. This context can be sent with your enquiry. Analytics events use controlled categories and a query-free page path; they do not include your name, email address, phone number, website URL, budget, or message.

Hosting and browser-loaded resource providers can also receive ordinary request information needed to deliver a page or asset, such as an IP address, browser information, requested URL, and request time. Their active production settings are not controlled by this website.

Why the information is used

• to receive, qualify, respond to, and follow up on an enquiry;
• to relay a valid enquiry to the configured destination mailbox;
• to detect and silently discard likely automated spam;
• to remember language and consent preferences; and
• to measure website and form interactions only after Analytics consent.

The Terms acknowledgement in the form is not marketing or analytics consent.

Services involved

The website code can involve the following services:

• EmailJS, which receives a validated enquiry from the server and relays it using an externally configured email template and destination;
• the website hosting and mailbox providers, which deliver the website and receive the relayed enquiry;
• CookieYes, which provides the consent interface and remembers consent preferences;
• Google Tag Manager and any Google Analytics configuration in the live container, which the website requests only after Analytics consent;
• ImageKit and Google Fonts, which deliver images and font files to the browser; and
• Contentful, when configured, which supplies Insights content to the website at build time or during server-side revalidation.

The active accounts, provider roles, processing locations, subprocessors, retention settings, and international-transfer safeguards are managed in the relevant provider accounts.

Storage and retention

• The language preference is stored in the browser's local storage until you change it or clear browser storage.
• Consent-linked attribution is stored in session storage for the current tab and is cleared when the website detects withdrawal of Analytics consent.
• CookieYes remembers the consent choice according to the active CookieYes configuration.

For business enquiries that do not become client engagements, we normally retain the related personal data for 24 months after the last relevant exchange. We then delete it from active business mailboxes and any manually maintained lead records. We may keep it longer when required by law or when necessary to establish, exercise, or defend legal claims. If an enquiry becomes a client engagement, the resulting contract, accounting, and related records follow their separate legal and operational retention periods.

EmailJS, email and hosting logs, deleted-items folders, analytics services, and provider backups can follow separate provider retention cycles. Deletion from active business mailboxes and manual lead records therefore does not mean that every provider-held or backup copy is erased on exactly the same date. You can contact us for current information.

Consent choices

CookieYes is the consent authority used by the website. Google Tag Manager is not requested by the website until CookieYes reports Analytics consent. Rejecting or withdrawing that consent blocks new DevX-controlled analytics events and clears the stored session attribution. You can reopen Cookie Preferences from the footer or the Cookie Policy.

Withdrawal cannot undo processing that took place before the withdrawal. Removal of any cookies already set by a third party also depends on the active CookieYes and tag configuration or your browser controls.

Your data-protection rights

Depending on the circumstances and applicable law, you may request access, rectification, erasure, restriction, or portability of your personal data, object to certain processing, and withdraw consent without affecting processing that occurred before withdrawal. Email privacy@devxdigital.com to make a request.

You may also lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP). See its official complaint forms and contact information.

Changes to this notice

This notice may be updated when the website's processing changes. The date at the top identifies the latest published revision.