Privacy Policy

1. Data Controller

D&M Labs ("we", "us", "our") is the data controller responsible for your personal data. We are a website design and development service for businesses. You can reach us at [email protected] or via WhatsApp at +357 97472847.

2. Information We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, phone number, and business name - provided when you fill in our contact form or message us on WhatsApp.
• Project information: Details about your business, design preferences, and website requirements - provided during consultations.
• Technical data: IP address, browser type, device type, and pages visited - collected automatically through essential and analytics cookies (with your consent).
• Payment information: Billing details processed securely through third-party payment providers. We do not store credit card numbers.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:

• Contractual necessity: To deliver the website design services you have requested.
• Legitimate interest: To respond to enquiries, improve our services, and ensure website security.
• Consent: For analytics cookies and marketing communications (where applicable). You may withdraw consent at any time.

4. How We Use Your Data

• To respond to your enquiries and provide quotes
• To design, develop, and deliver your website project
• To communicate project updates and timelines
• To process payments for our services
• To provide post-launch maintenance and support
• To improve our website and services through anonymised analytics

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with the following categories of recipients, solely to deliver our services:

• Hosting providers: To host and serve your website.
• Payment processors: To securely process payments.
• Analytics providers: Privacy-friendly analytics (with your consent) that do not track you across other websites.
• Form processors: Formspree, to deliver contact form submissions to our email.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Contact form submissions: 12 months after last communication
• Client project data: Duration of the project plus 24 months
• Payment records: As required by applicable tax and accounting laws
• Analytics data: 26 months (anonymised)

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent for analytics cookies or marketing at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

We use essential cookies for site functionality and analytics cookies (with your consent) to understand how visitors use our website. For full details, see our Cookie Policy.

9. International Transfers

Your data may be processed by service providers located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes SSL encryption, secure hosting, and access controls.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact & Complaints

If you have questions about this policy or wish to make a complaint, contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority in your country of residence.