This policy explains how ALPHA DEVS LTD (“AlphaDevs”, “we”, “us”) collects and uses personal data when you visit alphadevs.co or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the applicable law of the Republic of Cyprus.
1. Who we are
ALPHA DEVS LTD, a company registered in Cyprus (registration number HE 486595), with its registered office at Vasili Michailidi 9, 3026 Limassol, Cyprus. We are the data controller for the processing described in this policy. You can reach us through the contact page or by post at the address above.
2. What data we collect and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You send us a message through a contact form, email or WhatsApp | Name, email address, phone number, company, the content of your message | To answer your enquiry and, if you ask, to prepare a proposal | Pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (Art. 6(1)(f)) |
| You browse the website | IP address, browser and device information, pages visited, approximate location, referring site | To keep the site secure, to understand how it is used and to measure the effectiveness of our marketing | Legitimate interest for security and basic operation (Art. 6(1)(f)); your consent for analytics and marketing cookies (Art. 6(1)(a)) |
| You are a client or a client’s contact person | Business contact details, contract and invoicing details, project communication | To deliver our services, invoice, and meet accounting and tax obligations | Performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)) |
3. Cookies and similar technologies
The website uses the following third-party tools. Analytics and marketing cookies are used on the basis of your consent, which you can give or withdraw through the cookie settings on this site, and you can remove the cookies at any time through your browser settings.
- Google Analytics 4 (Google Ireland Limited): usage statistics such as pages visited and session duration. IP addresses are truncated by Google before storage.
- Meta Pixel (Meta Platforms Ireland Limited): measures whether visitors who saw our advertising on Facebook or Instagram later visited this site, and allows us to show relevant advertising.
- Cloudflare: content delivery and protection against attacks. Cloudflare sets a strictly necessary cookie for security purposes.
- WhatsApp chat button (Meta Platforms Ireland Limited): if you choose to contact us through the WhatsApp button, your conversation takes place under WhatsApp’s own privacy terms.
Strictly necessary cookies (for example the security cookie set by Cloudflare) do not require consent.
4. Who receives your data
We share personal data only with service providers that process it on our behalf under data processing agreements: our hosting provider (servers located in the European Union), email and productivity tools, our CRM and accounting software, and the analytics and advertising providers listed above. We do not sell personal data.
Google and Meta may transfer data to the United States. These transfers rely on the EU-US Data Privacy Framework and, where applicable, the European Commission’s Standard Contractual Clauses.
5. How long we keep data
- Enquiries that do not lead to a contract: up to 24 months after the last contact.
- Client and contract data: for the duration of the engagement and for 6 years afterwards, as required by Cypriot accounting and tax law.
- Analytics data: 14 months, the retention period configured in Google Analytics.
6. Your rights
Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us through the contact page. We respond within one month.
You also have the right to lodge a complaint with the supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection, dataprotection.gov.cy.
7. Security
We apply technical and organisational measures appropriate to the risk, including encrypted connections (TLS), access control, and the secure development practices we apply in our own engineering work. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
8. Children
This website is intended for businesses. We do not knowingly collect personal data from anyone under 18.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be announced on this page.
