Privacy policy
This policy explains what personal data HannibalDev collects through this website, why, how long we keep it, who we share it with, and your rights under UK GDPR and the EU GDPR.
1. Who we are
The data controller is [FULL LEGAL NAME], trading as HannibalDev, [POSTAL ADDRESS, COUNTRY]. Contact for anything about your data: contact@hannibaldev.com.
Because we are based outside the UK and the EU and offer our services to people there, we [have appointed / will appoint] a representative under Article 27 of UK GDPR and of the EU GDPR: UK representative [NAME, ADDRESS]; EU representative [NAME, ADDRESS].
2. What we collect and why
| When | Data | Why | Legal basis |
|---|---|---|---|
| You ask for a call-back | Name, phone number, topic | To call you back | Steps at your request before a contract (Art. 6(1)(b)) |
| You book a call or use the contact form | Name, work email, company, chosen time, interest, your message | To arrange and prepare the call | Steps at your request before a contract (Art. 6(1)(b)) |
| You email us | Email address, name, message content | To reply and keep a record of our exchange | Legitimate interests (Art. 6(1)(f)) |
| You become a client | Contact details, project and billing information | To deliver the project, invoice and meet legal obligations | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| You accept analytics cookies | Pages viewed, device, browser, approximate location, clicks and scrolls | To measure the audience and improve the website | Consent (Art. 6(1)(a)) |
| Any visit | IP address and technical logs kept by our host | To deliver the site and keep it secure | Legitimate interests (Art. 6(1)(f)) |
We don't use your data for automated decisions, and we don't ask for special category data. Please don't send it in a form.
3. How long we keep it
- Call-back, booking and contact requests from people who don't become clients: 3 years from our last contact, then deleted.
- Client records: for the duration of the project, then as long as tax and accounting law requires (up to 6 years after the end of the financial year), then deleted.
- Your cookie choice: 6 months, then we ask again.
- Google Analytics: 14 months. Microsoft Clarity: session recordings 30 days, aggregated heatmaps up to 13 months.
- Hosting logs: the short period our host keeps them for security.
4. Who we share it with
Only service providers who process data on our instructions (processors), never for their own marketing:
- Vercel Inc. (United States): website hosting and the server functions that receive our forms.
- [EMAIL PROVIDER, e.g. Google Workspace / Microsoft 365]: receiving and storing our email, including form notifications
- Google Ireland Ltd / Google LLC: Google Analytics, only with your consent.
- Microsoft Corporation: Microsoft Clarity, only with your consent.
Our team works from [COUNTRY], so your data is accessed there. Transfers outside the UK and the EEA are protected by the EU–US Data Privacy Framework and its UK extension where the provider is certified, or by standard contractual clauses (and the UK addendum).
5. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time, for cookies with the “Cookie settings” link in the footer. Write to contact@hannibaldev.com. We answer within one month.
You can also complain to a supervisory authority: in the UK the Information Commissioner's Office (ico.org.uk), in France the CNIL (cnil.fr), or the authority where you live. We'd appreciate the chance to fix it first.
6. Security
Forms are sent over HTTPS, access to our inbox and systems is limited to the people who need it and protected by two-factor authentication. More on how we work in Security.
7. Children
This website is for businesses. It isn't aimed at children and we don't knowingly collect their data.
8. Changes
We update this policy when our tools or practices change, and change the date at the top. Significant changes are shown on the website.
Frequently asked questions
No. We never sell or rent personal data, and we don't use it for advertising.
Email contact@hannibaldev.com with “Delete my data”. We confirm within one month, usually much sooner.
No. Google Analytics and Microsoft Clarity only load after you accept them in the cookie banner. You can change your choice any time with “Cookie settings” in the footer.