Controller and contact
Nordic Devhouse Ltd. is the controller for the Custom Software site, project brief, client delivery portal, and contact forms. Privacy questions and requests can be sent to the address below. sales@nordicdevhouse.com
Information we process
Contact requests may contain a name, company, work email, project description, submission time, and request identifier. Account and alert records may contain identity, workspace, consent, configuration, delivery, and status information. Analytics is off until you allow it and then uses only allowlisted events, routes, locale, campaign fields, release context, and technical error identifiers. Dashboard activity uses coarse last-seen timestamps to keep sessions secure; raw browser and network details are not shown in the dashboard.
Purposes and legal bases
We use contact information to answer enquiries, prepare proposals, and take requested pre-contract steps. Subscriptions and optional communications are processed with consent. Account, alert, security, analytics, and operational information is processed to provide, secure, monitor, and improve the requested service and to meet contractual or legitimate operational needs. Analytics consent can be changed at any time from the footer.
Retention
Contact enquiries are normally kept for up to 12 months after the latest activity. Unconfirmed subscriptions and invitations are removed according to configured provider retention. Security, dashboard activity, audit, and operational records are normally kept for up to 90 days, cookieless analytics for up to 13 months, and active account or alert data until removal or service termination. Protected backups may retain deleted records for up to 30 days.
Recipients and transfers
Information is disclosed only to providers needed for hosting, delivery, monitoring, analytics, payments, and customer communication under appropriate processing terms. Lawful transfer mechanisms are used for transfers outside the EEA. Personal information is not sold.
Your rights
Depending on the situation, you may request access, correction, deletion, restriction, portability, or object to processing. Analytics consent can be accepted, rejected, or withdrawn using the footer settings. You may complain to the Finnish Data Protection Ombudsman. Identity may need to be verified before a request is completed.
Security and changes
We use access controls, data minimisation, encrypted transport, security headers, rate limits, and operational monitoring. No internet service can promise absolute security. This policy may change when the product, providers, or legal requirements change.