Last updated: 20 February 2026
Key changes
- Unified and simplified privacy policy
- Clarified AI usage policy
Scope of this policy
This privacy policy applies to all websites, applications, content, products and services operated by the UXR LTD (“we”, “us”, “our”).
UXR LTD – Company number 08927425. Registered in England.
1 Derwent Business Centre, Clarke Street, Derby, DE1 2BU
We may update this policy from time to time to reflect changes to our services or legal obligations. The latest version will always be available on this page.
Payment handling and refunds are governed by our Terms of use.
Will this policy ever change?
We may update this policy from time to time to reflect changes to our services or legal obligations. The latest version will always be available on this page.
Continued use of our services after an update means you accept the revised policy.
Data we collect
We collect different types of data depending on how you interact with our services.
Account data
If you create an account we process authentication details required to allow you to securely sign in and access licensed features.
Transaction data
If you purchase or download a product, payment and order processing is handled by our merchant of record. We do not store your payment details.
Usage data
We collect anonymous, cookie‑less product usage information such as page views, feature usage and query types to improve the service. This data does not identify you personally.
Support communications
If you contact support we may access limited order information and your message in order to respond to your request.
Newsletter data
If you subscribe to the newsletter we collect your email address to send the newsletter and confirm your subscription.
Survey and application data
If you submit a form or application we process the information you provide for the purpose described on that form. Personally identifiable data from these forms is deleted within 30 days of the closing date stated on the form unless otherwise stated.
Technical log data
Our servers automatically record technical information such as IP address, browser type and referring pages when you access our services.
Artificial Intelligence (AI) & LLMS
We do not currently use external AI or large language model providers to process user content.
We may introduce optional AI powered features in the future. If we do, we will update this policy to identify the provider and explain how data is handled before the feature becomes active.
If AI features are introduced:
- They will only process content when you actively use them
- Only the minimum information required to generate a response will be sent
- We will take steps to avoid transmitting unnecessary personal data
- Your content will not be used to train models unless we clearly state this
If you do not use an AI feature, your data is not sent to any AI provider.
Why we process data (legal basis)
We process personal data under the following legal bases:
- Contract: to provide access to purchased or registered services
- Legitimate interest: to operate, secure and improve our services and provide support
- Consent: to send newsletters or communications you opt into
- Legal obligation: to comply with applicable laws and lawful requests
Third party processors
We currently use the following third party providers to operate our services:
| Provider | Purpose | Role | Links |
|---|---|---|---|
| Lemon Squeezy | Payments and merchant of record | Independent controller | Terms | Privacy Policy |
| Auth0 | Authentication | Processor | Data privacy |
| Substack | Newsletter delivery | Processor | Privacy policy. Data Processing Addendum |
| Google Forms | Forms and applications | Processor | Privacy policy |
| Replit | Infrastructure hosting | Processor | Privacy policy |
| Posthog | Product analytics | Processor | Terms | Privacy policy |
These providers may process your data according to their own privacy terms and applicable data protection law.
International transfers
Some providers may process data outside the UK. Where this occurs we rely on adequacy regulations or approved contractual safeguards such as Standard Contractual Clauses to protect your data.
Data retention
We retain personal data only as long as necessary to provide the service, meet legal obligations or resolve disputes. Where specific retention periods apply they are stated at the point of collection.
Your rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing based on legitimate interests
- Request a copy of your data in a portable format
You can exercise these rights by contacting privacy@uxrltd.co.uk from the email address associated with your data.
You can unsubscribe from newsletters at any time using the link in the email.
Children
Our services are not directed at children under 13 years of age.
Legal compliance
We may disclose personal information where required to comply with applicable law, legal processes or to protect our rights.