This notice explains what personal data we collect through podium.dev, why we collect it, who we share it with and what rights you have. It covers visitors to this website and people who contact us through it. Client projects are covered by our contracts and, where we process data for a client, a separate data processing agreement.
1. Who we are
Podium Apps Limited is the controller of the personal data described here. We are a company registered in Northern Ireland, company number NI630987. Our registered office is Opus House, 137 York Road, Belfast, Northern Ireland, BT15 3GZ.
For anything about this notice or your data, email [email protected].
2. What we collect and why
2.1 The contact form
When you send an enquiry through our contact form, we collect:
- your name
- your work email address
- your website address, if you give one
- the project options you tick
- your rough budget band and timeline, if you choose them
- your message
We also record the IP address the enquiry came from. We use it to block spam and to limit repeated submissions. The form contains a hidden field and a timing check for the same reason.
We use this information to read and answer your enquiry, and to prepare a proposal if you ask for one. Our legal basis is our legitimate interest in responding to business enquiries. Where you ask us for a proposal or quote, we also rely on taking steps at your request before entering into a contract.
Enquiries go to our own enquiry system at go.podium.dev. We do not add you to a mailing list.
2.2 Email and booked calls
If you email us, we keep the email and our reply so we can deal with your request. If you book a call through one of our booking links, the booking service passes us your name, email address and the time you chose. The legal basis is the same as for the contact form.
2.3 Server logs and hosting
Like any website, our hosting and network providers process technical data when you visit. This includes your IP address, browser and device type, the pages you request, the referring page and the time of the request. It is needed to deliver the site, keep it secure and fix faults. Our legal basis is our legitimate interest in running a secure, working website.
We do not run analytics on this site. We do not use the logs to build profiles of visitors or to identify you.
3. Cookies
This site does not set any cookies of its own. We use no analytics, advertising or tracking cookies, and no tracking pixels. That is why you do not see a cookie banner.
Cloudflare, which protects the site, may set a strictly necessary security cookie to tell people apart from automated traffic. It is not used to track you across other sites. Sites we link to, such as our booking service and the SocialJuice review wall, have their own cookie policies.
4. Testimonials from SocialJuice
Our testimonials pageshows reviews collected through SocialJuice. The video previews and videos on that page load directly from SocialJuice's storage. When they load, your browser connects to SocialJuice, which sends it your IP address and basic browser details. Previews load as you scroll to them. Videos load only when you press play.
5. Who we share it with
We do not sell personal data or share it for anyone else's marketing. We use a small number of service providers who process data on our behalf, under contract and only for the purposes above:
- Postmark: transactional email, such as enquiry notifications and replies. Data may be processed in the EU and the US.
- Railway: hosting for this website, in its EU West region.
- Cloudflare: DNS, content delivery and security for this website.
- SocialJuice: testimonial videos and images on our testimonials page.
- TidyCal: call bookings, when you use one of our booking links.
We may also disclose information where the law requires it, or to protect our rights in a legal dispute.
6. How long we keep it
We keep enquiries while we deal with them and for a reasonable period after, normally 24 months from our last contact. If the enquiry leads to a contract, we keep the relevant records for as long as the contract needs and for any period the law requires after it ends.
Server logs are kept for a short period for security and troubleshooting, then deleted on our providers' standard schedules.
7. International transfers
Some of our providers process data outside the UK, including in the EU and the US. When data leaves the UK, we make sure appropriate safeguards are in place. These are UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses (SCCs). You can ask us for details of the safeguard that applies.
8. Keeping it safe
The site is served over HTTPS, and enquiries are sent to our enquiry system over an encrypted, authenticated connection. Only people at Podium who need to deal with your enquiry can see it.
9. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected (rectification)
- have your data deleted (erasure)
- restrict how we use your data
- object to our use of your data, including where we rely on legitimate interests
- receive your data in a portable format and have it sent to someone else (portability)
To use any of these rights, email [email protected]. We may ask you to confirm your identity. We will reply within one month. There is normally no charge.
10. Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk.
11. Children
This website and our services are for businesses. They are not aimed at anyone under 18, and we do not knowingly collect personal data from children.
12. Changes to this notice
We will update this page when the way we handle personal data changes, and change the effective date at the top. If a change is significant, we will make it clear on this page.