GDPR

This page applies if you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, where the General Data Protection Regulation (GDPR) or an equivalent law protects you. It adds to our Privacy Policy, which describes the data we collect. The controller is WebSprint.dev, Cebu, Philippines, contactable at info@websprint.dev.

Analytics and advertising cookies are off by default. Google tags run in Consent Mode with storage denied, and Microsoft Clarity does not load until you accept analytics. Rejecting is as easy as accepting, and you can change your choice at any time.

Access

Get a copy of the personal data we hold about you.

Rectification

Have inaccurate or incomplete data corrected.

Erasure

Have your data deleted when we no longer need it or you withdraw consent.

Restriction

Ask us to pause using your data, for example while we check a complaint.

Portability

Receive data you gave us in a machine-readable format.

Objection

Object to processing based on legitimate interests, and to direct marketing at any time.

Withdraw consent

Turn analytics or advertising off at any time; this doesn't affect earlier processing.

Complain

Lodge a complaint with your data protection authority.

Email info@websprint.dev with the subject “Data request” and tell us which right you want to use and the email address or details you used with us. We may ask you to confirm your identity before we act.

We reply within one month. For complex or numerous requests we may extend this by up to two more months, and we will tell you if we do. Requests are free unless they are clearly unfounded or excessive.

We operate from the Philippines and use providers mostly in the United States, including Vercel, SMTP2GO, Zoho, OpenAI, OpenRouter, Groq, Google, Microsoft, and Mapbox. When personal data leaves the EEA or UK, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum), or on a provider’s certification under the EU-U.S. Data Privacy Framework. You can ask us for more detail on the safeguards for a specific provider.

Our AI assistant generates replies automatically, but we don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. A person at WebSprint reviews every project enquiry.

If a personal data breach is likely to put your rights at risk, we will notify the competent supervisory authority within 72 hours of becoming aware of it and, where the risk is high, tell you without undue delay.

Please contact us first at info@websprint.dev so we can try to fix the problem. You also have the right to complain to the data protection authority in the country where you live or work, or where you think the problem happened. The European Data Protection Board lists EU authorities at edpb.europa.eu, and in the UK it is the Information Commissioner’s Office (ico.org.uk).