This Privacy Policy applies when you visit the Uddr website, contact us, use the Uddify platform, engage us for software engineering services, or use an Uddr local-directory application or service that links to this policy.
Who we are
UDDR LTD is the data controller responsible for the personal information described in this policy.
Our company number is 11678015. Our correspondence address is:
Unit 17, Springboard Business Innovation Centre,
Llantarnam Industrial Park,
Cwmbran, Wales,
NP44 3AW.
You can contact us about privacy or data protection at hello@uddr.co.uk.
Scope of this policy
This policy covers personal information processed through:
- The Uddr website and online contact forms.
- The Uddify website-building and business-management platform.
- Websites, portals and software products we build or support.
- The Uddr local-directory and discovery app.
- Sales, support, billing and account-management communications.
- Council-funded and partner-delivered digital programmes.
Where we build or host a website for another organisation, that organisation may be the data controller for information submitted by its own customers. In those circumstances, Uddr may act as a data processor on its behalf.
Information we may collect
Identity and contact details
Your name, business name, job title, address, telephone number and email address.
Account information
Login identifiers, account permissions, profile details and settings associated with an Uddify or Uddr account.
Business information
Information about your organisation, products, services, website content, listings and project requirements.
Payment information
Transaction references, subscription status, billing details and payment history. Card details are normally processed by our payment provider rather than stored by Uddr.
Technical information
IP address, device type, browser, operating system, log data, page activity and security information.
Location information
Approximate or precise location information where you choose to use an app feature that requires it and grant the relevant device permission.
Communications
Emails, enquiries, support messages, feedback and records of our communications with you.
Usage and analytics
Information about how visitors and authorised users interact with websites, platform features and digital services.
We do not intentionally request special-category personal information unless it is necessary for a specific project and appropriate safeguards have been agreed.
How we collect information
We may collect personal information:
- Directly from you when you contact us, request a quote, create an account, buy a service or ask for support.
- Through your use of our services, including account activity, technical logs, app permissions and website analytics.
- From organisations you work with, such as a council, programme partner, employer or project lead.
- From publicly available sources, including company websites, public business listings and Companies House.
- From service providers, including payment, hosting, security and communications providers.
How we use personal information
We may use personal information to:
- Respond to enquiries and prepare proposals or quotations.
- Create and administer customer or business accounts.
- Design, build, host and support websites and software.
- Provide Uddify subscriptions and platform functionality.
- Operate local business listings and discovery features.
- Process subscriptions, invoices and payments.
- Provide training, account support and technical assistance.
- Manage council-funded and partner-led programmes.
- Monitor service performance and improve user experience.
- Protect our systems, customers and users from fraud or misuse.
- Comply with tax, accounting, legal and regulatory duties.
- Send relevant service communications and, where permitted, marketing communications.
Our legal bases for processing
UK data-protection law requires us to have a valid legal basis for processing personal information.
| Legal basis | When we may rely on it |
|---|---|
| Contract | Where processing is needed to provide a service you have requested or to take steps before entering into a contract. |
| Legitimate interests | To operate and improve our business, respond to business enquiries, protect our services and maintain customer relationships, where those interests are not overridden by your rights. |
| Legal obligation | Where information must be processed or retained to comply with tax, accounting, regulatory or other legal duties. |
| Consent | For optional marketing, certain cookies, location access or other processing where you are given a genuine choice. |
Where we rely on consent, you can withdraw that consent at any time. Withdrawal will not affect processing that took place before consent was withdrawn.
Who we may share information with
We do not sell personal information. We may share it where necessary with:
- Hosting, cloud-storage, database and content-delivery providers.
- Payment processors, accounting providers and financial advisers.
- Email, communications, analytics and customer-support providers.
- Developers, consultants and subcontractors working under appropriate confidentiality obligations.
- Local authorities, funding bodies and programme partners where required to administer an agreed project.
- Professional advisers, insurers, regulators, courts or law enforcement where reasonably necessary or legally required.
- A purchaser or successor organisation if Uddr undergoes a merger, restructuring or sale of relevant business assets.
Service providers are expected to use personal information only for the agreed purpose and to protect it appropriately.
International data transfers
Some technology providers or support partners may process information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate safeguard is in place. This may include an adequacy regulation, approved contractual clauses or another lawful transfer mechanism.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
When deciding retention periods, we consider:
- The duration of the customer or contractual relationship.
- The type, volume and sensitivity of the information.
- Support, security and dispute-resolution requirements.
- Tax, accounting, insurance and legal obligations.
- Whether information can be securely deleted or anonymised.
Backup copies may remain for a limited period after deletion from live systems before being overwritten through normal backup processes.
How we protect information
We use proportionate technical and organisational safeguards designed to protect personal information from unauthorised access, alteration, loss or disclosure.
These safeguards may include:
- Access controls and account permissions.
- Encrypted connections and secure hosting services.
- Authentication and password protections.
- Backups, monitoring and security logging.
- Restricted administrative access.
- Supplier and contractor confidentiality obligations.
No internet service or electronic-storage method is completely risk-free. You are also responsible for protecting your passwords and account credentials.
Cookies, analytics and similar technologies
Our website and services may use cookies, local storage, pixels or similar technologies.
Essential technologies
These are used for core functionality such as security, sessions, navigation, forms and account access. They may operate without consent where they are strictly necessary.
Analytics technologies
Analytics can help us understand website traffic, feature usage, device types and service performance. Where required, these technologies will be used only after you have provided consent.
Your choices
You can manage cookies through any cookie controls presented on the website and through your browser settings. Blocking essential cookies may prevent parts of a website or service from working correctly.
Marketing communications
We may send relevant information about Uddr services where you have consented or where applicable law otherwise permits us to do so.
You can unsubscribe using the link included in a marketing email or by contacting hello@uddr.co.uk.
We may still send non-marketing service communications concerning an active account, subscription, transaction, security issue or project.
Your data-protection rights
Depending on the circumstances, UK data-protection law may give you the right to:
- Access the personal information we hold about you.
- Correct incomplete or inaccurate information.
- Request deletion where there is no lawful reason for continued processing.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests or direct marketing.
- Request portability of certain information in a structured, commonly used format.
- Withdraw consent where processing relies on consent.
- Challenge certain automated decisions where applicable.
To exercise a right, email hello@uddr.co.uk. We may need to confirm your identity before responding.
Some rights are subject to legal conditions and exemptions. We may also retain information where required by law or where it is needed to establish, exercise or defend legal claims.
Children’s information
Uddr’s general business services are not designed for children to use independently, and we do not knowingly collect personal information directly from children without an appropriate lawful basis.
A project involving children or young people may have its own privacy information and additional safeguards.
Third-party websites and services
Our websites, apps and customer projects may link to services operated by other organisations.
Uddr is not responsible for the privacy practices of an external website or service. You should review its privacy information before submitting personal information.
Changes to this Privacy Policy
We may update this policy where our services, suppliers or legal obligations change.
The latest version will be published on this page, together with its updated date. Where a change is significant, we may provide an additional notice through the relevant website, platform or communication channel.
Contact us or raise a concern
For questions, requests or concerns concerning personal information, contact:
UDDR LTD
Unit 17, Springboard Business Innovation Centre,
Llantarnam Industrial Park,
Cwmbran, Wales,
NP44 3AW.
Email: hello@uddr.co.uk
You also have the right to complain to the UK Information Commissioner’s Office if you are concerned about how your personal information has been handled. We would appreciate the opportunity to address your concern first.
Have a privacy question?
Contact the Uddr team and tell us how we can help.