Privacy Policy
Last updated: 21 July 2026
This policy explains how Devute LTD ("Devute", "we") handles your personal data through the Devute client portal, in line with the UK GDPR and the Data Protection Act 2018.
Data controller
Devute LTD, company no. 14301159, 11 Rawson Buildings, Rawson Road, Bradford BD1 3SA. Contact: privacy@devute.com.
What we collect
Account details (name, email, phone, company), project and billing information, messages you send in the portal, and technical data such as authentication cookies. We do not sell your data.
Lawful basis
We process your data to perform our contract with you (managing your projects, invoices and support), for our legitimate interests in running the service securely, and — for marketing — only with your consent.
Retention
We keep your data for as long as your account is active and as required to meet legal, accounting and tax obligations (typically up to 6 years for financial records), then delete or anonymise it.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data. You can download a copy of your data or request deletion from Settings → Privacy & data in the portal, or email us. You may also complain to the ICO (ico.org.uk).
Security
Data is stored on encrypted infrastructure with row-level access controls so you can only ever see your own data. Access is authenticated and transport is encrypted (HTTPS).
This summary is provided for transparency and should be reviewed by legal counsel before production use.