Privacy Policy

This policy explains what personal data DeviLabs collects, why we process it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Last updated: July 10, 2026

1. Who we are

DeviLabs is a Generative Engine Optimization (GEO) agency based in the Netherlands, serving DTC, ecommerce and SaaS brands across the European Union, the Baltics and the United States. For the purposes of the GDPR, DeviLabs is the data controller responsible for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, contact us at info@devilab.eu.

2. What data we collect

We only collect the data we need to respond to you and to run this website. Specifically:

  • Newsletter / subscription details — if you sign up to our mailing list, we collect your email address and, if you provide it, your name. This is handled through our email provider, MailerLite.
  • Consultation bookings — when you book a call through the "Book a free consultation" links, scheduling is handled by Calendly. Any name, email address, and scheduling details you enter are provided directly to Calendly and shared with us so we can meet with you.
  • Email correspondence — if you email us at info@devilab.eu, we receive your email address, name, and the contents of your message.
  • Server logs — like most websites, our hosting provider automatically records technical information such as your IP address, browser type and user-agent, the pages you request, and timestamps. This happens for security, diagnostics, and reliability.
  • Usage analytics — we use Vercel Web Analytics and Vercel Speed Insights to understand aggregate traffic and page performance. These tools are privacy-friendly and do not use cookies, do not build advertising profiles, and do not track you across other websites.

We do not knowingly collect any special categories of data, and this site is not directed at children.

3. Why we process your data (legal bases)

  • To respond to your inquiries and provide our services — processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you (Art. 6(1)(b) GDPR).
  • To send you our newsletter — where you have subscribed, we process your data on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by unsubscribing.
  • To keep the site secure, reliable, and improved — server logs and aggregate analytics are processed on the basis of our legitimate interests in operating and improving the website (Art. 6(1)(f) GDPR).

4. How long we keep it

  • Newsletter data — kept until you unsubscribe or ask us to delete it.
  • Inquiry and booking data — kept for the duration of our correspondence or engagement and for a reasonable period afterwards, so we can follow up and meet legal or accounting obligations.
  • Server logs — retained only for a short period by our hosting provider for security and diagnostics.
  • Analytics — retained in aggregate, non-identifying form in line with our analytics provider's retention practices.

5. Who we share data with (processors)

We do not sell your personal data. We share it only with the service providers that help us operate, acting as our processors under appropriate data-processing terms:

  • Vercel Inc. — website hosting, content delivery, and privacy-friendly analytics.
  • MailerLite — email newsletter and subscriber management.
  • Calendly — scheduling of consultation calls.

Some of these providers may process data on servers outside the European Economic Area. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Cookies

This website does not set its own tracking or advertising cookies. Our analytics (Vercel Web Analytics and Speed Insights) are cookieless. If you choose to interact with an embedded third-party service — for example, booking a call through Calendly — that provider may set its own cookies under its own privacy policy, which we encourage you to review.

7. Your rights under the GDPR

If you are in the EU/EEA, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict or object to our processing;
  • Data portability — receive your data in a portable format;
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at info@devilab.eu. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

8. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be reflected here.

9. Contact

Questions, requests, or concerns about your privacy? Email info@devilab.eu and we will respond promptly.