Privacy Policy
Privacy Policy of
Owner and Data Controller
UXalliance PLC, 14 Lower Grosvenor Place, London SW1W 0EX, United Kingdom
Owner contact email:
This Privacy Policy applies to www.uxalliance.com and describes how UXalliance PLC ("we", "us", "the Owner") collects, uses, discloses, and protects Personal Data of visitors and prospective clients, in accordance with the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018 and, where applicable to visitors located in the European Economic Area, the EU General Data Protection Regulation (Regulation (EU) 2016/679).
Types of Data collected
Among the types of Personal Data that this Application collects, by itself or through third parties, are: first name, last name, email address, company name, country, project details and any message content submitted through a form; and, through cookies and similar technologies, Usage Data (see the Cookies section below).
Complete details on each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or by specific explanation texts displayed prior to Data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application. All Data requested by this Application is mandatory unless stated otherwise, and failure to provide it may make it impossible for this Application to provide the requested service. Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner using the details above.
Users are responsible for any third-party Personal Data obtained, published or shared through this Application and confirm that they have the third party's consent to provide that Data to the Owner.
Legal basis for processing
The Owner processes Personal Data relating to Users where one of the following legal bases applies under the UK GDPR / EU GDPR:
Consent — where the User has given clear consent for the Owner to process their Personal Data for a specific purpose, such as submitting a contact or project enquiry form.
Legitimate interests — where processing is necessary for the Owner's legitimate interests (for example, understanding how the Application is used, improving its content and security, or responding to business enquiries), provided those interests are not overridden by the User's rights.
Performance of a contract — where processing is necessary to take steps requested by the User prior to entering into a contract, or to perform an existing contract with the User.
Legal obligation — where processing is necessary for the Owner to comply with a legal or regulatory obligation to which it is subject.
If a User has questions about the specific legal basis relied on for a given processing activity, they may contact the Owner using the details provided above.
Mode and place of processing the Data
Methods of processing
The Data Controller processes the Data of Users in a proper manner and takes appropriate technical and organizational security measures to prevent unauthorized access, disclosure, alteration or destruction of the Data. Processing is carried out using computers and/or IT-enabled tools, following organizational procedures strictly related to the purposes indicated. In addition to the Data Controller, in some cases the Data may be accessible to certain categories of authorized personnel involved with the operation of this Application (administration, sales, marketing, legal, systems administration), or to external parties acting as Data Processors on the Owner's behalf (such as hosting providers, email and CRM providers, analytics providers, and IT service providers). An updated list of these parties may be requested from the Data Controller at any time.
Place
Data is processed at the Data Controller's operating offices in the United Kingdom and at the locations of the Data Processors involved with the processing, which may be located outside the UK or the European Economic Area ("EEA"). Where Personal Data is transferred outside the UK or the EEA, the Owner ensures such transfers are made on the basis of an adequacy decision, standard contractual clauses, or another safeguard recognized as valid under the UK GDPR and/or EU GDPR. Users may contact the Owner for further information about the safeguards applied to a specific transfer.
Retention time
Personal Data is kept only for as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting or reporting requirements. Enquiry and project-related Data submitted through forms is typically retained for the duration of the business relationship and for a reasonable period afterwards to respond to related queries, after which it is deleted or anonymized, unless a longer retention period is required or permitted by law. Users may request that the Data Controller specify the retention period applicable to their Data, or request earlier deletion, at any time.
The rights of Users under UK GDPR / EU GDPR
Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following, to the extent permitted by applicable law:
Right to access — obtain confirmation as to whether Data concerning them is being processed and, where that is the case, obtain a copy of that Data and other related information.
Right to rectification — have inaccurate or incomplete Data concerning them corrected or completed.
Right to erasure — obtain the erasure of Data concerning them, subject to the exceptions set out in applicable law.
Right to restriction of processing — request that the Owner restrict the processing of their Data in certain circumstances.
Right to data portability — receive Data concerning them, provided under a contract or with consent, in a structured, commonly used and machine-readable format, and, where technically feasible, have it transmitted to another controller.
Right to object — object to the processing of their Data where it is carried out on the basis of legitimate interests, including profiling, on grounds relating to their particular situation.
Right to withdraw consent — withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.
Requests to exercise these rights should be sent to the Data Controller at the contact details set out above. Requests are handled free of charge and answered as early as possible, in line with applicable law. The Owner may ask the User to verify their identity before responding to a request.
Users who believe that their rights have been infringed may lodge a complaint with the UK Information Commissioner's Office (ICO), or with the supervisory authority in their EEA country of habitual residence, place of work, or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
Detailed information on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Analytics
The services in this section enable the Owner to monitor and analyze website traffic and can be used to keep track of User behavior.
Google Analytics (Google LLC), configured with IP anonymization where available.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other locations where Google operates data centers — see Google's Privacy Policy and, for EEA/UK transfers, its EU/UK data transfer safeguards.
Contacting the User
Contact and project enquiry forms (this Application)
By filling in a contact or enquiry form with their Data, the User consents to this Application using those details to reply to requests for information, project quotes, or any other request as indicated by the relevant form.
Personal Data collected: first name, last name, email address, company name, country, and any project or message details submitted.
Cookies and similar technologies
This Application uses cookies and similar technologies to operate correctly, to remember User preferences, and, where the User has given consent, for analytics purposes. Users can manage or withdraw their cookie preferences at any time through the cookie consent tool provided on this Application (where available) or through their browser settings. Disabling certain cookies may affect the availability or functioning of some features of this Application.
Children's privacy
This Application is intended for a business audience and is not directed at, or knowingly used to collect Personal Data from, children. If the Owner becomes aware that Personal Data from a child has been collected without appropriate consent, it will take reasonable steps to delete that Data.
Additional information about Data collection and processing
Legal action
The User's Personal Data may be used for legal purposes by the Data Controller in Court, or in the stages leading to possible legal action arising from improper use of this Application or the related services. The User acknowledges that the Data Controller may be required to disclose Personal Data upon request by competent public authorities.
System logs and maintenance
For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs (files that record interaction with this Application) or use other Personal Data, such as IP address, for this purpose.
Information not contained in this policy
More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time, using the contact information set out at the beginning of this document.
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page and updating the "Last updated" date below. It is recommended to check this page periodically. If a User objects to any of the changes, they must cease using this Application and may request that the Data Controller erase their Personal Data. Unless stated otherwise, the then-current Privacy Policy applies to all Personal Data the Data Controller holds about Users.
Definitions and legal references
Personal Data (or Data)
Any information that relates to an identified or identifiable natural person.
Usage Data
Information collected automatically through this Application (or third-party services it uses), which may include: the IP addresses or domain names of the devices used by Users, the URI addresses, the time of the request, the method used to submit the request, the size of the file received in response, a numerical code indicating the server's response status, the country of origin, the browser and operating system used, and details about the visit, such as time spent on pages and the navigation path within the Application.
User
The individual using this Application, who must coincide with, or be authorized by, the Data Subject to whom the Personal Data refers.
Data Subject
The identified or identifiable natural person to whom the Personal Data relates.
Data Processor
The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Data Controller.
Data Controller (or Owner)
The natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation of this Application. Unless otherwise specified, the Data Controller is UXalliance PLC.
This Application
The means by which the Personal Data of Users is collected and processed, i.e. www.uxalliance.com.
Cookies
Small sets of data stored on the User's device.
Legal information
This Privacy Policy has been prepared taking into account the UK General Data Protection Regulation, the UK Data Protection Act 2018 and, for EEA visitors, the EU General Data Protection Regulation (Regulation (EU) 2016/679), together with applicable UK privacy and electronic communications regulations (PECR) on the use of cookies.
This Privacy Policy relates solely to this Application.
Last updated: September 9, 2026.