Your information. Clear choices.
Updated October 2, 2026
This notice explains how we handle information from website visitors, business contacts and clients. You can request a scope without accepting optional analytics.
Privacy contact: inquiry@devbrows.com · Cookie Policy
1. Who is responsible
DEVBROWS LLP (LLPIN ACU-3276), trading as DevBrows, is responsible for personal information used to run this website and manage its business inquiries. Registered office: Co Khetivadi Utpan Bajar, Vill Ta Pavi Jetpur, Chhota Udepur, Vadodara, Gujarat 391160, India.
Privacy questions, rights requests and grievances: inquiry@devbrows.com. Mark the subject “Privacy request” and tell us the relevant interaction. Do not send identity documents, passwords or customer records in your initial request.
When an engagement involves processing a client’s personal data on its instructions, our responsibilities and the client’s responsibilities are defined in the applicable agreement and data processing terms. This website notice does not replace those terms.
2. Information and purposes
| Information | Purpose |
|---|---|
| Name, work email, company, role, requested service, timing and message; optional company size and product context | Respond to the inquiry, assess fit, prepare a scope and manage business correspondence. The form does not subscribe you to marketing. |
| Connection and technical data such as IP address, browser details, request timing and security events | Deliver the website, investigate errors and prevent abuse. The contact service uses keyed, hashed identifiers for short-lived rate limits and duplicate-request handling. |
| Optional analytics identifiers, page visits and device information | Understand use of informational pages after your opt-in. We do not intentionally send form contents, URL query strings or URL fragments to analytics. |
| Engagement, billing, authorization and communication records | Deliver agreed services, maintain accounts, comply with law and manage disputes. |
Fields marked required let us respond to a scoped inquiry. You may instead contact us by email. Do not put sensitive personal information, payment card details, production secrets, health records or confidential security evidence in the public form. We agree a suitable transfer method for engagement materials separately.
3. Grounds for processing
Where European or UK data protection law applies, we use consent for optional analytics; steps requested before a contract or performance of a contract where you are the contracting party; legitimate interests in answering business contacts and protecting our systems where appropriate; and legal obligations for required records. You may object to processing based on legitimate interests.
For India and other jurisdictions, we apply the consent, voluntarily provided information, permitted-use or other grounds recognized by the applicable law. A ground under one country’s law does not automatically apply in another. Reading this notice is not consent to unrelated marketing, unrestricted transfers or optional tracking.
4. Cookies and optional services
Optional services stay off until you choose them. Accepting, rejecting or choosing preferences is available in the privacy panel; you can reopen it using “Privacy choices” in the footer. We host our website fonts locally.
Google Analytics is optional and configured with advertising features disabled. It is not loaded on contact, confirmation or legal pages. The third-party site assistant is currently disabled while its data handling is reviewed.
When Global Privacy Control is enabled, analytics stays off. We do not interpret the older Do Not Track signal as a separate instruction; you can reject optional services using our controls. See the Cookie Policy for storage, durations and withdrawal.
5. Providers and disclosures
Providers process information needed for their functions: website hosting and infrastructure providers serve pages and protect systems; Zoho Mail processes inquiry emails and business correspondence; Google processes optional analytics when enabled by your choice; and payment providers process transactions arranged for paid engagements. Our public inquiry form does not collect card details.
The contact form sends to our own contact endpoint and Zoho mailbox. It does not submit your inquiry to FormSubmit. We may disclose information to professional advisers or authorities where needed for a lawful obligation, dispute or protection of rights. We do not sell inquiry details to data brokers or use this website for targeted advertising.
Read Zoho’s privacy policy and Google’s privacy policy. Contact us for information about the providers relevant to your engagement.
6. International processing
DevBrows operates from India and serves international businesses. Information may be accessed in India and processed in the countries used by our hosting, email and other relevant providers. A provider’s account region and the agreed service determine the processing locations; we do not promise that all information stays in your country.
Where transfer restrictions apply, an appropriate legal mechanism and any required assessment or additional safeguards must cover the transfer. Depending on the context, these may include an adequacy decision, approved contractual clauses or another lawful mechanism. Consent to optional cookies is not a substitute for these safeguards. Ask us about the locations and safeguards applicable to your inquiry or proposed engagement before sharing regulated data.
7. Retention and security
We keep inquiry correspondence while it is needed to answer the request, manage the resulting relationship or resolve a dispute. Engagement, invoice and authorization records are retained for the relevant contract, legal, tax and limitation periods. Retention depends on the purpose and applicable law; we delete or de-identify records when no longer required, subject to lawful holds and backup cycles.
The contact service does not keep message bodies in its rate-limit database. Per-IP abuse counters expire within 30 minutes and duplicate-request records after 24 hours. Aggregate daily and monthly submission counters contain no visitor identifiers and expire one hour after their UTC period ends; background deletion may take longer. Delivery emails remain in the business mailbox under the correspondence retention criteria above. Browser choices expire after 180 days. Contact service access and operational logs are configured for 180 days for security and incident investigation. A legal obligation or incident hold may require longer retention. Other hosting records follow the applicable provider configuration and legal requirements.
Measures include server-side validation, encrypted SMTP transport, restricted sender and recipient settings, limited operational logging and controls against repeated submissions. No service can guarantee absolute security. We assess suspected incidents and meet applicable notification duties.
8. Your rights and how to request them
Depending on the applicable law, you may request access, information about processing, correction, deletion, portability, restriction or objection; withdraw consent; and complain to a competent regulator. Some requests have legal exceptions. Withdrawal does not undo lawful processing before withdrawal.
Email inquiry@devbrows.com with the right you want to exercise and enough context to locate your information. We may request proportionate verification or evidence of an agent’s authority. We respond within the timeframe required by the applicable law and explain any permitted extension or refusal. You can ask us to review a refusal or submit an appeal through the same address. We do not discriminate for exercising applicable privacy rights.
EEA, UK and Switzerland: you may also contact your relevant supervisory authority. Canada: you may challenge our handling through our privacy contact and the relevant federal or provincial commissioner. India: use the contact above for correction, erasure, consent withdrawal and grievances; DPDP rights and escalation routes apply in accordance with their commencement provisions. US states, including California: applicable access, correction, deletion, disclosure, opt-out and appeal rights depend on the law and its scope. Global Privacy Control disables analytics without a form or account. These controls are offered regardless of whether a statutory business threshold applies.
9. Children and external sites
This site is intended for adult business users, not children. We do not seek information from people under 18 through the inquiry form. If you believe a child has supplied information, contact us so we can assess and address it. Links to social platforms and other websites take you to services with their own policies; we do not embed social tracking pixels through those links.
10. Changes to this notice
We update the date on this page when the notice changes. A materially new optional purpose requires a new choice before activation. A revised notice does not retrospectively create consent. Signed engagement and data processing terms continue to govern the relevant services.