Privacy Policy

At Devabble, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how Devabble collects, uses, stores, and protects personal data when you visit our website, contact us, or schedule a meeting with our team.

We aim to collect only the information that is reasonably necessary for the purposes described below. We do not sell or rent personal data, and we do not use advertising trackers on this website.

This Privacy Policy is intended to provide transparent information about our processing activities and is governed primarily by Law No. 124/2024 of the Republic of Albania “On Personal Data Protection”, together with other applicable data protection legislation. The Albanian data protection framework is aligned with the standards of the European Union’s General Data Protection Regulation (GDPR).

1. Who We Are

Devabble SHPK (“Devabble”, “we”, “us”, or “our”) is a privately held software and AI development studio based in Albania.

We design and develop software products, MVPs, AI-powered systems, web applications, and digital solutions for startups, businesses, and other organisations.

For the purposes of applicable data protection legislation, Devabble acts as the data controller in relation to the personal data described in this Privacy Policy, unless otherwise stated.

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at: Email: info@devabble.com

You may also contact us through our official social media channels, including Instagram and LinkedIn. Please note that communications conducted through third-party platforms are also subject to the privacy policies of those platforms.

2. Personal Data We Collect

The personal data we collect depends on how you interact with our website and services.

2.1 When You Contact Us

If you submit an enquiry through our contact form or chat interface, we may collect:

• your name;
• email address;
• telephone number, where provided;
• company or organisation name, where provided;
• information contained in your message or project description;
• the webpage from which the enquiry was submitted; and
• referral information indicating the website or source from which you reached our website, where technically available.

Telephone number and company name are optional unless otherwise indicated on the relevant form.

The information you submit is used to understand your enquiry, communicate with you, assess your requirements, prepare proposals, and determine whether our services may be appropriate for your project.

Enquiries may be stored in our business systems, including private Google Workspace tools, and a copy may be sent to our business email account for the purpose of managing and responding to your request.

If you contact us directly by email, we process the personal data contained in your email and any attachments or information you voluntarily provide.

2.2 Spam Prevention

Our forms may contain technical fields or mechanisms that are not visible to you and are used solely for spam prevention and abuse detection.

These mechanisms are designed to identify automated submissions and do not intentionally collect additional personal information for marketing or profiling purposes.

2.3 When You Schedule a Call

Our meeting-booking service is available through book.devabble.com and is powered by FluentBooking.

When you schedule a meeting, we may collect:

• your name;
• email address;
• the date and time of your selected meeting;
• the meeting type;
• any message, project information, or other details you voluntarily provide; and
• information technically necessary to administer and confirm the appointment.

The booking system may send confirmation and scheduling communications to you and to Devabble.

Booking information may also be incorporated into our internal business records so that we can manage enquiries, meetings, and potential client relationships efficiently.

2.4 Technical Information

When you access our website, certain technical information may be processed automatically as part of normal web hosting and security operations.

Depending on the hosting and technical configuration of the website, this may include:

• IP address;
• browser and device information;
• operating system;
• requested webpages or resources;
• date and time of access;
• referring URL; and
• technical information contained in server or security logs.

This information is primarily used to maintain the availability, security, performance, and integrity of the website and to investigate technical problems or security incidents.

The website is hosted by Hostinger, which may process technical information as part of providing hosting and infrastructure services.

3. Analytics and Cookies

3.1 Google Analytics

We use Google Analytics 4 (“Google Analytics”), provided by Google Ireland Limited, to understand how visitors use our website.

Google Analytics may provide us with aggregated or statistical information such as:

• the number of visitors to the website;
• the pages visitors view;
• approximate geographic information;
• referral sources;
• device and browser information; and
• general website usage patterns.

Google Analytics uses cookies and similar technologies to provide these analytics services.

3.2 Analytics Requires Your Consent

Where consent is required by applicable law, we do not activate Google Analytics until you have given consent through our cookie consent mechanism.

If you decline analytics cookies, Google Analytics is not intentionally activated through our website.

Your cookie preference may be stored locally in your browser so that we can remember your choice. You may change or withdraw your consent at any time through the cookie settings available on our website.

The withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Google may process information in countries outside Albania and the European Economic Area, including the United States. Such processing is subject to the safeguards and contractual mechanisms applied by Google as described in its applicable privacy documentation.

For more information about how Google processes personal data, please consult Google’s Privacy Policy.

3.3 No Advertising Tracking

We do not use advertising pixels, behavioural advertising trackers, or social media advertising trackers on this website for the purpose of building advertising profiles about visitors.

We also do not sell personal data to third parties.

4. Purposes and Legal Bases for Processing

We process personal data only where there is a lawful basis for doing so.

Depending on the circumstances, we may process your information on the following grounds:

Performance of a requested service or pre-contractual steps

Where you contact us about a potential project, request information, ask for a proposal, or schedule a meeting, we may process your information because it is necessary to respond to your request or take steps at your request before entering into a contract.

Consent

Where processing requires consent, such as certain analytics cookies, we process the relevant information only after obtaining your consent.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Legitimate interests

We may process limited personal data where this is necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.

Examples may include maintaining the security of our website and systems, preventing spam or abuse, managing business communications, and maintaining appropriate records of enquiries and business relationships.

Legal obligations

We may process and retain personal data where necessary to comply with applicable legal, regulatory, accounting, tax, or other legal obligations.

5. How We Use Personal Data

We may use personal data to:

• respond to enquiries and requests;
• communicate with prospective or existing clients;
• understand your project requirements;
• arrange and manage meetings;
• prepare proposals, quotations, and contractual documentation;
• provide our software development, AI, consulting, design, and related services;
• manage our business relationship with clients and prospective clients;
• maintain and secure our website and IT systems;
• prevent spam, fraud, abuse, or other security incidents;
• comply with legal and regulatory obligations; and
• improve the performance and usability of our website.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

We do not add individuals who contact us to a marketing mailing list without the appropriate legal basis or consent where consent is required.

6. Data Sharing and Third-Party Service Providers

We do not sell, rent, or otherwise commercially trade your personal data.

We may disclose or make personal data available to trusted service providers where this is necessary to operate our website, manage communications, provide our services, maintain our systems, or comply with legal obligations.

Depending on the services currently used by Devabble, these providers may include:

• Hostinger — website hosting and related infrastructure;
• Google Workspace / Google Ireland Limited — business email, document and spreadsheet services, and related business infrastructure;
• Google Analytics — website analytics, where you have provided the required consent;
• FluentBooking — appointment scheduling and booking management; and
• other technical, professional, or infrastructure providers that Devabble may reasonably engage in connection with its business operations.

Service providers may process personal data only to the extent necessary for the services they provide and subject to applicable contractual and legal requirements.

Where personal data is transferred internationally, we take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law.

7. International Data Transfers

Some of the service providers we use may process personal data outside Albania and, where applicable, outside the European Economic Area.

Where such transfers occur, we rely on legally recognised transfer mechanisms and safeguards applicable to the relevant transfer, which may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

Because the safeguards applicable to a particular provider may change over time, the specific provider’s current privacy and data-transfer documentation should also be consulted.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including for the purposes of responding to enquiries, managing business relationships, fulfilling contractual obligations, resolving disputes, maintaining business records, and complying with legal obligations.

Enquiry and booking information may therefore be retained for the duration of the relevant business relationship and for any additional period required or permitted by applicable law.

Where information is no longer necessary, we will take reasonable steps to delete, anonymise, or otherwise securely dispose of it, subject to applicable legal or legitimate business retention requirements.

If you request deletion of your personal data, we will assess and respond to the request in accordance with applicable law. Certain information may need to be retained where we have a legal obligation or other lawful basis to do so.

9. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you may have rights including the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data where the legal requirements for deletion are met;
• request restriction of processing in applicable circumstances;
• object to certain processing activities;
• request portability of personal data where applicable;
• withdraw consent where processing is based on consent; and
• lodge a complaint with the competent data protection supervisory authority.

To exercise your rights, please contact us at: info@devabble.com

We may need to verify your identity before fulfilling certain requests in order to protect your information from unauthorised disclosure.

Under Albanian law, you may lodge a complaint with the Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale) if you believe that your personal data rights have been infringed. The Commissioner is the independent supervisory authority responsible for monitoring and enforcing personal data protection legislation in Albania.

Further information about submitting a complaint is available from the Commissioner’s official website.

10. Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, misuse, or destruction.

Our website is served over HTTPS, and access to business systems containing personal information is restricted to authorised personnel and systems where reasonably necessary.

However, no method of transmission or storage over the internet can be guaranteed to be completely secure. You should therefore avoid sending sensitive personal information through our website or ordinary email unless it is necessary for the relevant purpose.

11. Children’s Privacy

Our website and services are primarily intended for businesses, professionals, entrepreneurs, and other adult users.

We do not knowingly seek to collect personal data from children under the age of 16 through this website.

If you believe that a child has provided personal data to us without appropriate consent, please contact us at info@devabble.com so that we can assess the situation and take appropriate action.

12. Third-Party Websites

Our website may contain links to third-party websites, including social media platforms, client websites, technology providers, and other external resources.

Once you leave our website, the processing of your personal data is governed by the privacy policies and practices of the relevant third party.

Devabble is not responsible for the privacy practices, security, content, or data processing activities of third-party websites.

We encourage you to review the privacy policy of any third-party website before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, technology, legal requirements, or data processing practices.

When we make changes, we will update the “Last updated” date at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes to our processing activities.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or require further information about how Devabble processes personal data, please contact:

Devabble SHPK
Email: info@devabble.com
Website: https://devabble.com/

We will review and respond to legitimate privacy-related requests in accordance with applicable law.