Privacy Policy

This Privacy Policy describes how TWELVEDEVS SP. Z O. O. ("we," "us," or "our"), located in Warsaw, Poland, collects, uses, stores, and shares your personal information when you use our services ("Services"), visit our website at https://twelvedevs.com/, or engage with us via sales, marketing, or events.

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Australian Privacy Act 1988, and the New Zealand Privacy Act 2020.

If you do not agree with our policies and practices, please do not use our Services. If you have questions, please contact us at business@twelvedevs.com.

1. What personal data we collect

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Why we collect personal data

Twelvedevs collects the data for the following purposes: advertising; analyzing website visitor statistics; technical website troubleshooting; improving website user experience. We don't rent or trade email lists with other organizations and businesses.

However, to enhance privacy, we have built-in technological and procedural safeguards designed to prevent data leaks. For example, we store data we collect from you indirectly or directly, such as your name, email address or phone number, company name, in a secure database.

A. Information you provide voluntarily

When you use our Contact Form or contact us via email, we collect the following data to process your request and establish contact:

• Identity Data: First name and last name.
• Contact Data: Email address, phone number (optional).
• Professional Data: Job title (optional), Company name (optional).
• Message Data: The reason for contacting us and any other information you choose to provide in the text fields.

B. Information collected automatically

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information.

• Log and Usage Data: IP address, browser type, device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services.

C. Cookies and similar technologies

We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information.

• Cookie Management: We use CookieYes (CookieYes Limited, UK) as our Consent Management Platform (CMP). This tool blocks non-essential cookies until you give your explicit consent.
• Google reCAPTCHA: We use Google reCAPTCHA to protect our forms from spam and abuse. This service analyzes your behavior (mouse movements, IP address, time spent) to distinguish between humans and bots. Data entered via reCAPTCHA is stored for five months.

2. How do we process your information?

We process your personal information for specific business purposes, relying on the following legal bases:

3. When and with and whom do we share your personal information?

We do not sell your personal information. We may share your data with the following categories of third parties:

• Vendors and Service Providers: We share data with third-party vendors who perform services for us or on our behalf and require access to such information to do that work (e.g., CookieYes for consent management, Google LLC for security/reCAPTCHA, hosting providers, and IT support).
• Affiliates: We may share your information with our affiliates (companies within our current or future Group of Companies) for customer support, marketing, and technical operations.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Obligations: We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

4. International data transfers

As a company operating globally with clients in the US and Oceania, your information may be transferred to, stored, and processed in countries other than your own.

• For EEA Residents: If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or reliance on adequacy decisions.

5. Data retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

• General Inquiries: Retained until the conversation implies the matter is clarified.
• reCAPTCHA Data: Retained for 5 months.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

6. Your privacy rights

7. Data security

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

8. Cookie consent & policy

We use the cookie consent tool from CookieYes Limited (UK). When you visit our site, a banner is displayed allowing you to give consent for certain cookies. The tool blocks the setting of non-essential cookies until consent is given.

• Detailed Information: For a complete list of the cookies we use, their purpose, and their duration, please please review our full Cookie Policy.
• Data Processing: To manage your consent, specific user information (including IP address) is transmitted to CookieYes servers based on our legitimate interest in compliant consent management (Art. 6(1)(f) GDPR).

9. Updates to this notice

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this privacy notice. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.