Data controller
This policy describes how we process the personal data of people who visit uxnstudios.com or contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and the Data Protection Act (Cap. 586) of Malta. The data controller is:
Controller
UXN Studios
Address
Malta
Email
info@uxnstudios.com
Data we process and purposes
We process the data you give us and the data strictly needed for the website to work, for these purposes:
Contact form
Replying to your enquiry and following up on that request (we will not send you marketing). We process your name, your email address, your company name if you provide it, and the content of your message, which we store in our database.
Contact by email or WhatsApp
Replying to the messages you send us directly: your email address or phone number and whatever you write to us.
Call request
Managing the call you ask us for: your name, your email address, your phone number if you provide it, how you'd like to talk, the day and time of day that suit you and anything you want to tell us. We store it in our database to confirm the appointment.
Browsing and security
Serving the website and protecting it from abuse. Our hosting provider logs technical data for each visit: IP address, browser type and pages requested.
Web analytics
Measuring website usage in aggregate to improve it, only if you accept analytics cookies.
Legal basis
Pre-contractual steps — Art. 6(1)(b) GDPR
Replying to your enquiries and managing the calls you ask us for.
Legitimate interest — Art. 6(1)(f) GDPR
Serving the website securely (hosting technical logs) and replying to messages you send us by email or WhatsApp when there is no prior request.
Consent — Art. 6(1)(a) GDPR
Web analytics through cookies. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before.
Recipients
We do not sell or share your data. To provide the service we use these providers, who only access the data they strictly need:
Supabase (Supabase, Inc.)
Storing contact-form messages and call requests in our database, hosted in the European Union.
Google Workspace (Google Ireland Ltd.)
Receiving contact-form messages and call requests at info@uxnstudios.com and sending the emails we reply to you with.
Cal.com (Cal.com, Inc.)
Only if we enable online scheduling: managing call bookings. Its calendar only loads if you click “Show calendar” and uses its own technical cookies.
Google Analytics (Google Ireland Ltd.)
Website usage statistics, only if you have given your consent.
Netlify (Netlify, Inc.)
Website hosting and infrastructure, including the technical logs of each visit, and receiving the forms, which it stores and forwards to us by email.
WhatsApp (WhatsApp Ireland Ltd.)
If you message us on WhatsApp, the conversation is handled on that platform.
Beyond these cases, we will only disclose data to third parties where a legal obligation exists.
International transfers
Some of these providers (Netlify, Supabase, Cal.com and Google) are based in the United States or may process data outside the European Economic Area. In those cases the transfer relies on the safeguards in Chapter V of the GDPR: standard contractual clauses approved by the European Commission and, where the provider is certified, the EU-US Data Privacy Framework. You can ask us for a copy of these safeguards by writing to info@uxnstudios.com.
Retention periods
Enquiries and bookings
We keep the data while we handle your request. If the enquiry does not turn into a project, we delete it within 12 months at the latest; if it does, we keep it for the duration of the relationship and then for the legal limitation periods.
Technical logs
Our hosting provider keeps them for a short period, under its own policy, for the security and operation of the website.
Analytics
Measurement data is kept in Google Analytics for a maximum of 14 months.
Your rights
You can exercise the rights granted to you by the GDPR at any time:
Access
Know what data of yours we process and obtain a copy.
Rectification
Correct inaccurate or incomplete data.
Erasure
Ask us to delete your data.
Objection
Object to a specific processing activity.
Restriction
Restrict processing in the cases provided for by law.
Portability
Receive your data in a structured, commonly used format.
Withdrawal of consent
Withdraw it at any time, without affecting prior processing.
How to exercise them
Write to us at info@uxnstudios.com, stating which right you want to exercise and providing information that allows us to verify your identity. We will reply within one month at the latest.
Supervisory authority
If you believe we have not processed your data correctly, you can lodge a complaint with the supervisory authority in Malta, the Information and Data Protection Commissioner (IDPC), through its website at idpc.org.mt. If you live in another European Union Member State, you may also contact the supervisory authority in your country.
If you prefer, write to us first at info@uxnstudios.com and we will try to resolve it directly.
Changes to this policy
We may update this policy to reflect regulatory changes or changes in the services we use. The version in force will always be published on this page, together with its update date.