Who we are
DevKit is an IT staffing company that provides staff augmentation, dedicated development teams and tech recruitment. DevKit operates through two companies:
- DevKit Agency LLC, 900 Foulk Rd. Ste 201, Wilmington, DE 19803, USA
- DevKit Agency OÜ, Narva mnt 5, Kesklinna linnaosa, Tallinn, Estonia
The DevKit company you contact through this website, or that you contract with, is the controller of your personal data. For visitors and clients in the European Economic Area (EEA), the United Kingdom and Switzerland, DevKit Agency OÜ, our Estonian company, is the controller. We have not appointed a Data Protection Officer; privacy questions are handled by our management team at hi@devkit.agency.
What data we collect
Data you give us when you use our contact form or email us:
- Your name and work email address
- If you use our hiring request form: your company, country and, optionally, phone number
- Details of the engineers you need: roles, level, skills, start date, engagement type, budget range and location
- Anything else you write in your request or notes
- Your agreement to our processing of this data, and when you gave it
Data collected automatically:
- Technical data needed to deliver and secure the website, such as IP address, browser type and the page you came from, processed by our hosting provider and by Google reCAPTCHA to protect our forms from spam and abuse
- With your consent only: usage data collected by Google Analytics, such as pages viewed, approximate location (country/city), device type and how you reached the site
- The page you submitted a form from, the website language and campaign (UTM) parameters, so we know which page or campaign a request came from
We do not knowingly collect special categories of personal data, and we do not sell personal data.
How we use your data and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your request, sending candidate profiles and preparing a proposal or contract | Steps taken at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in responding to business inquiries (Art. 6(1)(f)) |
| Managing our relationship with clients and candidates | Performance of a contract (Art. 6(1)(b)) |
| Protecting the website and forms against spam, fraud and abuse | Legitimate interest in keeping our services secure (Art. 6(1)(f)) |
| Understanding how the website is used to improve it | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Occasional business updates to existing business contacts | Legitimate interest in B2B marketing (Art. 6(1)(f)); you can opt out at any time |
| Complying with legal, tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
International transfers
Some of our service providers are located in the United States, and DevKit itself operates in both the EU and the US. When personal data from the EEA, UK or Switzerland is transferred outside these regions, we rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission’s Standard Contractual Clauses, together with additional safeguards where needed.
How long we keep data
- Contact-form requests and related correspondence: up to 24 months after our last interaction, unless we start working together
- Client and contract records: for the duration of the contract and as long as required by tax and accounting law afterwards
- Google Analytics data: up to 14 months
- Your cookie choice: 12 months, after which we ask again
Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Have your data deleted
- Restrict or object to certain processing, including direct marketing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting earlier processing
To exercise any right, email hi@devkit.agency. We reply within one month. If you are in the EEA, you can also complain to your local data protection authority or to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee). Residents of US states with privacy laws, such as California, can make the same requests, and we do not discriminate against anyone for exercising their rights.
Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls limited to people who need the data, and reputable providers with strong security programmes. No system is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.
Children
Our website and services are intended for businesses and professionals. We do not knowingly collect data from children under 16.
Changes to this policy
We may update this policy to reflect changes in our services or the law. The date at the top shows when it was last updated; for significant changes we will provide a more prominent notice.
Contact us
Email hi@devkit.agency, or write to DevKit Agency LLC, 900 Foulk Rd. Ste 201, Wilmington, DE 19803, USA, or to DevKit Agency OÜ, Narva mnt 5, Kesklinna linnaosa, Tallinn, Estonia.