Last updated: 2 July 2026
This policy explains what personal data DEVIGO DIGITAL LIMITED collects through devigo.co.uk, why we collect it, how we use it and the rights you have over it.
Who we are
DEVIGO DIGITAL LIMITED is the controller responsible for your personal data.
- Company number: 16571975
- Registered address: C/O The Accountancy Partnership, Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London, E14 9NN
- ICO registration: ZC031105
- Contact for privacy matters: webmaster@devigo.co.uk
This policy covers devigo.co.uk. Our Devigo Studio waitlist is hosted on a separate site (waitlist.devigo.studio) but is operated by the same company, DEVIGO DIGITAL LIMITED, so it is covered by this notice; see "Joining the Devigo Studio waitlist" below.
The personal data we collect and why
Contact form
When you use the contact form on devigo.co.uk we collect:
- Your name (required)
- Your email address (required)
- Your website (optional)
- The details you give us in the "Tell us about your site" field (required)
Why: to read and respond to your enquiry and to follow up about the work you have asked us about.
Lawful basis: legitimate interests. Our interest is responding to enquiries people send us and running our business. You can object to this at any time (see "Your rights").
Where it goes: submissions are stored in Devigo Studio, our own content management system, which runs on our own server. We are also notified of each enquiry by email: the notification is sent using Amazon SES (Amazon Web Services) and lands in our inbox, which is a Google Workspace (Gmail) account. So your enquiry is handled by Amazon and stored by Google as well as by us; see "Who we share your data with" and "International transfers" below.
Joining the Devigo Studio waitlist
The waitlist is on a separate site, waitlist.devigo.studio, run by us. If you sign up there we collect your email address only. The data is stored in Devigo Studio, our own content management system.
Why: so we can send you a single email letting you know when Devigo Studio is available. That is the only reason we hold it and the only message you will get from signing up.
Lawful basis: consent. You gave it by signing up to be told when we launch. You can withdraw it at any time by emailing webmaster@devigo.co.uk and we will delete your address.
We will not use waitlist sign-ups for wider marketing. If we introduce marketing emails in future (through Freshworks) we will ask for your separate consent first and you will be able to opt out of every message.
Site analytics (our own system)
If you accept analytics through our cookie banner, we run our own basic analytics through Devigo Studio to understand how the site is used and to improve it. It records which pages you view (the page paths) and any parameters included in the page address (the part of a URL after a "?"). It counts these as aggregate statistics, for example how many times a page was viewed. It is measured per site, not per visitor, so it does not build a record of an individual's activity.
This analytics is first-party. The data stays in our own system. We do not share it with any third-party analytics provider or advertising network, we do not use it to profile you, we do not track you across other websites and we do not use it for advertising.
Lawful basis: consent. We only run this if you accept it through the cookie banner, and you can withdraw at any time by changing your cookie choice. If you decline, this analytics does not run.
Server logs
Our web server keeps standard logs when you visit the site. These typically include your IP address, browser type, the pages you request and the date and time. IP addresses can count as personal data.
Why: to keep the site running, protect it against abuse and attacks and diagnose technical problems.
Lawful basis: legitimate interests in the security and reliable operation of our site.
We keep these logs for 10 days, after which they are overwritten.
Cookies
We use a single cookie, devigo_consent_..., which records your choice about analytics and any other non-essential cookies. Its value is either true (you accepted) or false (you declined). While it is set to false, no analytics or other non-essential cookies run. This cookie is strictly necessary to remember your choice, so it does not itself require consent.
You can change or withdraw your choice at any time through the banner on the site.
A note on Google Search Console
We use Google Search Console to understand how devigo.co.uk performs in Google Search. It reports aggregated search data to us from Google's side. It does not place cookies on your device through our site and it does not identify you to us as an individual visitor.
Video backgrounds
Some pages use video for visual backgrounds. These are served from our own site. We do not embed third-party players or widgets, so no third-party company receives your data through them.
Who we share your data with
We do not sell your personal data. We share it only with the service providers we rely on to run the site, and only so far as they need it:
- Amazon Web Services (AWS): hosting and email delivery. The site and Devigo Studio run on server infrastructure we manage on AWS in its Stockholm region (Sweden), and we use Amazon SES to send the notification emails from our contact form.
- Google (Google Workspace): our email inbox. Contact-form notification emails are received and stored in our Google Workspace (Gmail) account, so this data is handled by Google.
- Cloudflare: manages the DNS for our domains. In this configuration your visit does not route through Cloudflare's network and it does not process your browsing data.
Each provider acts as our processor and handles your data on our instructions. We do not currently pass contact or waitlist data to any marketing tool. If that changes in future (for example, using Freshworks for marketing), we will ask for your separate consent first.
International transfers
Our hosting is in AWS's Stockholm region, so contact-form submissions stored in Devigo Studio, and waitlist emails, are held in Sweden, which is in the European Economic Area (EEA). This is a transfer outside the UK, and UK data protection law recognises the EEA as providing an adequate level of protection, so it is permitted on that basis without additional safeguards.
Contact-form notification emails are sent through Amazon SES and are received in our Google Workspace inbox. Google, and depending on configuration Amazon, may process this data in the United States. These transfers to the US rely on the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), under which UK personal data may be transferred to US providers that are certified to it. Amazon and Google are both certified under this framework.
We access and manage all of this data from the UK.
How long we keep your data
- Contact enquiries: we delete enquiry data 24 months after our last contact with you. Where an enquiry leads to an ongoing client relationship or a signed contract, we keep the records we need for the length of that relationship and for up to 6 years afterwards to meet our tax and legal obligations. We delete your data sooner if you ask us to.
- Waitlist emails: until Devigo Studio launches and we have sent the launch email, after which we delete them unless you have separately opted in to further contact.
- Server logs: 10 days.
Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you
- Ask us to correct data that is wrong or incomplete
- Ask us to delete your data
- Ask us to restrict how we use it
- Object to us using it where we rely on legitimate interests
- Ask for your data in a portable format
- Withdraw consent at any time where we rely on consent
To exercise any of these, email webmaster@devigo.co.uk. We will respond within one month.
Complaints
If you are unhappy with how we have handled your personal data you can complain to us directly at webmaster@devigo.co.uk. Tell us what the problem is and we will look into it and let you know the outcome.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113. We would ask you to raise it with us first so we have the chance to put things right.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be reflected here.
Contact
Questions about this policy or your data: webmaster@devigo.co.uk