Privacy Policy

1. Who We Are

This Privacy Policy applies to the website devrwa.io (the "Site"), operated by:

Strait Solutions Limited is the data controller responsible for the personal data collected through this Site. We are committed to protecting your privacy and handling your data in an open and transparent manner.

This policy is governed by the Gibraltar Data Protection Act 2004 and is aligned with the principles of the EU General Data Protection Regulation (GDPR).

2. What Data We Collect

2.1 Contact Form

When you submit an enquiry through our contact form, we collect:

• Full name
• Email address
• Company name (optional)
• Area of service interest
• Your message

This data is transmitted via FormSubmit.co, a third-party form processing service, and delivered to our team by email. FormSubmit.co processes your submission data in accordance with their own privacy policy.

2.2 Analytics Data (with your consent)

If you accept cookies, we use Google Analytics to collect anonymised data about how visitors use the Site, including:

• Pages visited and time spent
• Referring website or source
• General geographic region (country/city level)
• Device type and browser

IP anonymisation is enabled. We do not use this data to identify you personally. Google Analytics data is processed by Google LLC under their Privacy Policy and the EU–US Data Privacy Framework.

If you decline cookies, Google Analytics is not loaded and no analytics data is collected.

2.3 Essential Cookies

We set a small number of essential cookies to make the Site function correctly:

• devrwa_cookie_consent — remembers your cookie preference (Accept or Decline)
• theme — remembers your light/dark mode preference

These cookies are strictly necessary for the operation of the Site and cannot be disabled without affecting functionality.

3. How We Use Your Data

• Contact form submissions — to respond to your enquiry and discuss potential services
• Analytics data (with consent) — to understand how the Site is used and improve our content and user experience
• Essential cookies — to maintain your preferences across visits

We do not use your data for automated decision-making, profiling, or any purpose other than those listed above.

4. Legal Basis for Processing

• Contact form data — Legitimate interests (Article 6(1)(f) GDPR): responding to business enquiries is necessary for our legitimate commercial interests and expected by the person submitting the form
• Analytics cookies — Consent (Article 6(1)(a) GDPR): we only load Google Analytics after you explicitly accept cookies
• Essential cookies — Legitimate interests: these are strictly necessary to provide the service you requested

5. Data Sharing and Third Parties

We share data only with the service providers that help us operate the Site:

• FormSubmit.co — contact form processing and email delivery
• Google LLC (Google Analytics) — website analytics (only if you consent)
• Vercel Inc. — website hosting and content delivery

We do not sell, rent, or otherwise share your personal data with any third party for their own marketing purposes. We do not use advertising trackers of any kind.

6. Data Retention

• Contact form / support data — retained for as long as is necessary to manage your enquiry and for up to 5 years thereafter for legitimate business and legal record-keeping, unless you request deletion sooner
• Google Analytics data — retained for 24 months, after which it is permanently deleted
• Essential cookies — expire after 12 months or when you clear your browser data

Once the applicable retention period expires, your Personal Data will be permanently deleted or fully anonymised.

7. International Data Transfers

Some of our third-party service providers (including Google and Vercel) are based in the United States. These transfers are carried out in accordance with applicable data protection law, relying on the EU–US Data Privacy Framework and Standard Contractual Clauses where applicable.

8. Email Marketing

In compliance with Gibraltar law, all marketing emails sent from us will clearly state who the email is from and provide a clear, easy way to opt out of further correspondence.

We only send electronic marketing communications if you have explicitly opted in (given consent), or if you are an existing customer receiving information about similar services (the "soft opt-in"). You may stop receiving our newsletter or marketing emails at any time by following the "unsubscribe" instructions included in every email or by contacting us directly at info@devrwa.io.

9. Privacy of Children

Our Services are not directed at children under the age of 18, and we do not knowingly collect Personal Data from them. If you are under 18, please do not submit any Personal Data through the Services.

If we learn that we have collected Personal Data from a child without verified parental consent, we will delete that information from our systems immediately. If you believe we may have inadvertently collected data from a child, please contact us at info@devrwa.io.

10. Do Not Track Signals

Some browsers incorporate a Do Not Track (DNT) feature that signals to websites that you do not want to be tracked. Because there is no common understanding of how to interpret the DNT signal, the Services do not currently respond to browser DNT signals.

You can control analytics tracking directly via our cookie banner: if you have clicked Decline, Google Analytics will not be loaded regardless of your browser's DNT setting.

11. Your Rights

Under applicable data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request that we restrict processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — withdraw your cookie consent at any time by clearing your browser's local storage or clicking Decline on the cookie banner

To exercise any of these rights, please contact us at info@devrwa.io. We will respond within 30 days.

You also have the right to lodge a complaint with the Gibraltar Regulatory Authority (GRA) or the data protection authority in your country of residence.

12. Cookie Management

You can manage your cookie preferences at any time:

• When you first visit the Site, you will see a cookie banner where you can Accept or Decline optional cookies
• To change your preference later, clear your browser's local storage for devrwa.io (under Developer Tools > Application > Local Storage) and refresh the page
• You can also opt out of Google Analytics tracking at any time using the Google Analytics Opt-out Browser Add-on

Declining cookies will not affect your ability to use the Site.

13. Information Security and Data Breaches

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The Site is served exclusively over HTTPS. However, no method of internet transmission is 100% secure and we cannot guarantee absolute security.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Gibraltar Regulatory Authority (GRA) within 72 hours of becoming aware of it, as required under Gibraltar GDPR. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

14. Changes and Amendments

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we do, we will update the "Last updated" date at the top of this page. If we make material changes, we may also notify you via email or a prominent notice on our Website. Continued use of the Site after any changes constitutes acceptance of the updated policy.

15. Contacting Us and Complaints

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

We will respond to your request within one calendar month.

Right to Lodge a Complaint

If you believe that we have not processed your Personal Data in accordance with the law, or if you are unsatisfied with our response to a rights request, you have the right to lodge a complaint with the supervisory authority in Gibraltar: