Privacy Policy

Idealdevs Corporation Ltd, Unit 104, The Light Box, 111 Power Road, London, W4 5PY, United Kingdom (referred to as Idealdevs, we, or us) is committed to protecting your personal data. This Privacy Policy explains what personal data we collect when you visit idealdevs.io, contact us, apply for a job, or work with us as a client, and how we process it under the EU General Data Protection Regulation (GDPR) and, where applicable, the California Consumer Privacy Act (CCPA).

Who is responsible for your data

The data controller for processing described in this policy is Idealdevs Corporation Ltd, Unit 104, The Light Box, 111 Power Road, London, W4 5PY, United Kingdom, registered in England and Wales. Our Data Protection Officer can be reached at [email protected] or by post at the address above, marked for the attention of the Data Protection Officer.

Where we process personal data on behalf of our clients in the course of delivering services, for example, data contained in systems we build or operate, we act as a processor under Article 28 GDPR, and the client's privacy notice governs that processing. This policy covers processing for which we are the controller.

What data we collect

We collect the following categories of personal data:

• Contact and inquiry data: name, email address, phone number, company, and the content of messages you send through our contact forms or by email.
• Application data: CV, cover letter, portfolio links, and any other information you provide when applying for a position, including interview notes we create during the process.
• Newsletter data: email address and subscription preferences, together with a record of your consent.
• Usage data: pages visited, referring pages, approximate location derived from a truncated IP address, browser type, device category, and interaction events, collected through privacy-focused analytics.
• Technical data: full IP address, timestamps, and request metadata in server logs, retained for security purposes.
• Client and supplier data: names, business contact details, and correspondence of the people we work with at client and partner organizations, together with contractual and billing records.

We do not intentionally collect special categories of personal data and ask that you do not include such data in applications or messages.

Purposes and legal bases

We process personal data only where a legal basis under Article 6 GDPR applies:

• To respond to inquiries and prepare proposals, legitimate interest (Art. 6(1)(f)) or steps prior to entering a contract (Art. 6(1)(b)).
• To perform contracts with clients and suppliers, including billing and project communication, contract performance (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) for accounting records.
• To run recruitment processes, Art. 6(1)(b) GDPR and Section 26 of the German Federal Data Protection Act (BDSG).
• To send our newsletter, consent (Art. 6(1)(a)), which you may withdraw at any time using the unsubscribe link in every email.
• To operate, secure, and improve our website, legitimate interest (Art. 6(1)(f)) in maintaining a safe, functional service; analytics cookies are used only with your consent (Art. 6(1)(a)).

Sharing and processors

We do not sell personal data, and we have not sold personal data in the preceding twelve months within the meaning of the CCPA. We share data only with service providers who process it on our instructions under Article 28 data processing agreements, hosting and infrastructure providers, email delivery services, our applicant-tracking system, and accounting services, and with professional advisers or authorities where legally required. A current list of sub-processors is available on request from [email protected].

International transfers

Our primary infrastructure is located in the European Union. Where a service provider processes data outside the EU or EEA, we rely on an adequacy decision of the European Commission or on the Commission's Standard Contractual Clauses, supplemented where necessary by additional technical safeguards such as encryption in transit and at rest.

Retention

We keep personal data only as long as needed for the purpose it was collected for: inquiry correspondence for up to 24 months after the last contact; application data for 6 months after the end of a process, or longer only with your consent to join our talent pool; contractual and billing records for the statutory retention periods of 6 to 10 years under German commercial and tax law; server logs for up to 30 days; and newsletter data until you unsubscribe.

Your rights

Under the GDPR you have the right to access your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time without affecting past processing. You also have the right to lodge a complaint with a supervisory authority; our lead authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

If you are a California resident, the CCPA gives you rights to know, delete, and correct personal information we hold about you, and the right not to be discriminated against for exercising them. Requests under either regime can be sent to [email protected]; we respond within one month (GDPR) or 45 days (CCPA) and may need to verify your identity first.

Security, children, and changes

We protect personal data with technical and organizational measures appropriate to the risk, described further in our Security page, and we are certified against ISO/IEC 27001. Our website and services are directed at businesses and we do not knowingly collect data from children under 16. We may update this policy as our services or the law change; the date above reflects the latest revision, and material changes will be announced on this page.

Contact

Questions, requests, and complaints regarding personal data: Idealdevs Corporation Ltd, Data Protection Officer, Unit 104, The Light Box, 111 Power Road, London, W4 5PY, United Kingdom, [email protected].