Skip to main content

Legal

Last updatedSeptember 2026

This English translation is provided for information purposes only. In case of any discrepancy between language versions, the Spanish version prevails.

Data controller

This policy describes how we process the personal data of people who visit uxnstudios.com or contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and the Data Protection Act (Cap. 586) of Malta. The data controller is:

  • Controller

    UXN Studios

  • Address

    Malta

  • Email

    info@uxnstudios.com

Data we process and purposes

We process the data you give us and the data strictly needed for the website to work, for these purposes:

  • Contact form

    Replying to your enquiry and following up on that request (we will not send you marketing). We process your name, your email address, your company name if you provide it, and the content of your message, which we store in our database.

  • Contact by email or WhatsApp

    Replying to the messages you send us directly: your email address or phone number and whatever you write to us.

  • Call request

    Managing the call you ask us for: your name, your email address, your phone number if you provide it, how you'd like to talk, the day and time of day that suit you and anything you want to tell us. We store it in our database to confirm the appointment.

  • Browsing and security

    Serving the website and protecting it from abuse. Our hosting provider logs technical data for each visit: IP address, browser type and pages requested.

  • Web analytics

    Measuring website usage in aggregate to improve it, only if you accept analytics cookies.

Legal basis

  • Pre-contractual steps — Art. 6(1)(b) GDPR

    Replying to your enquiries and managing the calls you ask us for.

  • Legitimate interest — Art. 6(1)(f) GDPR

    Serving the website securely (hosting technical logs) and replying to messages you send us by email or WhatsApp when there is no prior request.

  • Consent — Art. 6(1)(a) GDPR

    Web analytics through cookies. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before.

Recipients

We do not sell or share your data. To provide the service we use these providers, who only access the data they strictly need:

  • Supabase (Supabase, Inc.)

    Storing contact-form messages and call requests in our database, hosted in the European Union.

  • Google Workspace (Google Ireland Ltd.)

    Receiving contact-form messages and call requests at info@uxnstudios.com and sending the emails we reply to you with.

  • Cal.com (Cal.com, Inc.)

    Only if we enable online scheduling: managing call bookings. Its calendar only loads if you click “Show calendar” and uses its own technical cookies.

  • Google Analytics (Google Ireland Ltd.)

    Website usage statistics, only if you have given your consent.

  • Netlify (Netlify, Inc.)

    Website hosting and infrastructure, including the technical logs of each visit, and receiving the forms, which it stores and forwards to us by email.

  • WhatsApp (WhatsApp Ireland Ltd.)

    If you message us on WhatsApp, the conversation is handled on that platform.

Beyond these cases, we will only disclose data to third parties where a legal obligation exists.

International transfers

Some of these providers (Netlify, Supabase, Cal.com and Google) are based in the United States or may process data outside the European Economic Area. In those cases the transfer relies on the safeguards in Chapter V of the GDPR: standard contractual clauses approved by the European Commission and, where the provider is certified, the EU-US Data Privacy Framework. You can ask us for a copy of these safeguards by writing to info@uxnstudios.com.

Retention periods

  • Enquiries and bookings

    We keep the data while we handle your request. If the enquiry does not turn into a project, we delete it within 12 months at the latest; if it does, we keep it for the duration of the relationship and then for the legal limitation periods.

  • Technical logs

    Our hosting provider keeps them for a short period, under its own policy, for the security and operation of the website.

  • Analytics

    Measurement data is kept in Google Analytics for a maximum of 14 months.

Your rights

You can exercise the rights granted to you by the GDPR at any time:

  • Access

    Know what data of yours we process and obtain a copy.

  • Rectification

    Correct inaccurate or incomplete data.

  • Erasure

    Ask us to delete your data.

  • Objection

    Object to a specific processing activity.

  • Restriction

    Restrict processing in the cases provided for by law.

  • Portability

    Receive your data in a structured, commonly used format.

  • Withdrawal of consent

    Withdraw it at any time, without affecting prior processing.

How to exercise them

Write to us at info@uxnstudios.com, stating which right you want to exercise and providing information that allows us to verify your identity. We will reply within one month at the latest.

Supervisory authority

If you believe we have not processed your data correctly, you can lodge a complaint with the supervisory authority in Malta, the Information and Data Protection Commissioner (IDPC), through its website at idpc.org.mt. If you live in another European Union Member State, you may also contact the supervisory authority in your country.

If you prefer, write to us first at info@uxnstudios.com and we will try to resolve it directly.

Changes to this policy

We may update this policy to reflect regulatory changes or changes in the services we use. The version in force will always be published on this page, together with its update date.