Privacy Policy

9x Dev is the data controller for personal data collected through this website. Privacy questions can be sent through the contact form on the home page.

We collect three kinds of information, all of it either given to us directly or generated by your visit:

• Contact details you send us. Name, email address, company and whatever you write in the message when you use the contact form, email us or connect on LinkedIn.
• Recruitment information. If you apply to work with us or are put forward for a client role, your CV, work history, portfolio links and interview notes.
• Usage data. Pages viewed, approximate location derived from IP address, device and browser type, referring site and the time of your visit, collected through the analytics described below.

We do not knowingly collect special-category data (health, beliefs, biometrics and similar) and ask that you do not send it to us.

• to reply to you and, if you ask, to prepare a proposal;
• to run a recruitment process you are part of and, with your consent, to keep you in mind for future roles;
• to understand how the site is used so we can improve it;
• to keep the site secure and detect abuse;
• to meet legal and accounting obligations.

We do not use your data for automated decision-making and we do not sell it or share it with data brokers.

Where GDPR or the UK GDPR applies, we rely on:

• Legitimate interests to reply to inquiries, run analytics, secure the site and grow our business in ways you would reasonably expect;
• Consent for non-essential cookies and for keeping candidate details on file beyond the role applied for;
• Contract where processing is needed to enter into or perform an agreement with you;
• Legal obligation for records we are required to keep.

The site stores a few functional items in your browser that contain no personal data and are never sent to us: your light or dark theme preference, your cookie choice, and a short-lived note that clears the contact form after you send a message.

For analytics we use Google Analytics, which sets cookies to distinguish visitors and measure how the site is used. IP addresses are not stored by Google Analytics, and we do not enable advertising features. You can decline non-essential cookies through the banner on your first visit and change your mind at any time via the link in the footer.

We share personal data only with providers who process it on our behalf under contract, and only what each one needs:

• Hosting and email providers that run this website, deliver contact-form messages to our inbox, and store job applications and the CVs sent with them.
• Email and CRM tools we use to reply to you and keep track of conversations.
• Analytics, as described in the Cookies section above.
• Applicant tracking software used during recruitment.

We may also disclose data where the law requires it, to protect our rights, or as part of a merger or sale of the business, in which case this policy continues to apply.

• Inquiries that do not lead to an engagement: 24 months from our last exchange.
• Client contacts: for the life of the relationship and 6 years after, to meet accounting rules.
• Candidate data: 12 months after the process ends, or longer with your consent.
• Analytics: detailed data deleted after 2 months; only aggregated reports are kept.

Some of our providers store data outside the UK and EEA. Where they do, we rely on adequacy decisions or standard contractual clauses and check that the provider offers equivalent protection.

Depending on where you live you can ask us to:

• confirm what data we hold about you and give you a copy;
• correct anything that is wrong;
• delete your data;
• restrict or object to particular uses, including direct marketing;
• give you your data in a portable format;
• withdraw consent where consent is the basis we rely on.

Send your request through the contact form on the home page. We reply within one month. You can also complain to your local supervisory authority; in the UK that is the ICO, in the EU the authority of your member state.

Data is encrypted in transit and access is limited to the people who need it. No system is perfectly secure; if a breach affects you we will tell you and the regulator as the law requires.

This site is aimed at businesses and is not intended for anyone under 16. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

We will post any changes here and update the date at the top. If a change materially affects how we use data you have already given us, we will tell you directly where we can.