Privacy Policy
- Last updated 12 August 2026
- About 6 minutes to read
- Applies worldwide
Who we are
Webtechnosys is a web development studio led by Mehedi Hasan. For anything you send us through this website, we are the data controller — the party that decides what is collected and why.
Registered contact: [legal entity name], [registered address], [registration number]. Data protection contact: legal@webtechnosys.dev. We are not required to appoint a Data Protection Officer, but that address reaches the person who handles these requests.
What we collect
Only three kinds of data, and you trigger all of them yourself.
| Category | Examples | Why we have it | Kept for |
|---|---|---|---|
| You contact us | Name, email, company, phone, project details, budget range | To reply and prepare a quote | 3 years after last contact |
| You subscribe | Email address, when you subscribed | To send the monthly email | Until you unsubscribe |
| You browse | Anonymised page views, country, device type, referring site | To see which pages are useful | 14 months, aggregated |
We do not collect special category data, we do not build advertising profiles, and we do not buy contact lists from anyone.
Why we may use it
Under the GDPR every use needs a legal basis. Ours are simple:
- Contract or steps before a contract — replying to your enquiry, preparing a quote, delivering a project you hired us for.
- Consent — the newsletter, and any non-essential cookies. You give it deliberately and can withdraw it just as easily.
- Legitimate interests — keeping the site secure and understanding which pages work, balanced so it never overrides your privacy.
- Legal obligation — invoices and tax records we are required to retain.
Cookies and analytics
The site works fully without any optional cookies. Essential cookies keep your form progress and your cookie choice; analytics is privacy-first, cookieless where possible, and never used for advertising. Full detail, including every cookie name and duration, is in the Cookie Policy.
Who we share it with
A short list of service providers, each bound by a contract that limits them to acting on our instructions. We never sell personal information, and we never share it for cross-context behavioural advertising. The current list, with locations, is on the Subprocessors page.
Where your data goes
Some providers are based in the United States. Where data leaves the UK, EEA, or Switzerland, transfers rely on Standard Contractual Clauses, the UK Addendum, or an adequacy decision, together with encryption in transit and at rest.
How long we keep it
See the table above. When a retention period ends we delete the record or irreversibly anonymise it. Backups roll off on their own schedule, at most 90 days behind live data.
Your rights (EU & UK)
- Access — get a copy of everything we hold about you.
- Rectification — have anything wrong corrected.
- Erasure — have it deleted, unless we are legally required to keep it.
- Restriction and objection — tell us to stop a particular use.
- Portability — receive your data in a machine-readable file.
- Withdraw consent — at any time, without affecting anything done before.
- Complain — to your local supervisory authority, though we would rather you told us first.
We answer within 30 days and never charge a fee. Use the data request form or email legal@webtechnosys.dev.
Your rights (California)
If you live in California, the CCPA as amended by the CPRA gives you the right to know what we collect, to delete it, to correct it, to opt out of sale or sharing, and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined, and we do not process sensitive personal information for inference, so there is nothing to opt out of — but the request form is open to you regardless. We will never treat you differently for exercising a right.
Rights in other countries
Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, Switzerland's FADP, and similar laws grant comparable rights. Rather than run a different process per jurisdiction, we extend the strongest version of these rights to everyone, wherever you live.
Children
This is a business website. We do not knowingly collect data from anyone under 16. If a child has sent us something, tell us and it is gone the same day.
How we protect data
HTTPS everywhere, encrypted storage, access limited to the people who need it, secrets kept out of source control, and two-factor authentication on every account that touches client data. The detail is on the Security Overview.
Changes
When this policy changes we update the date at the top and keep the previous version available. If a change materially affects your rights, subscribers get an email — no silent rewrites.
Contact us
legal@webtechnosys.dev reaches a person, not a ticket queue. Postal address is on the Legal Notice page.
Still unclear?
Ask a plain question and get a plain answer, usually the same working day.