Privacy Policy

Introduction

This Privacy Policy describes how GelUI ("we", "our", or "us") collects, uses, stores, and protects your personal information when you access and use uigel.com and our design system platform (collectively, the "Service"). We are committed to protecting your privacy and handling your data transparently.

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service. This policy should be read alongside our Terms & Conditions and Cookie Policy.

Information We Collect

We collect information that you provide directly to us when you create an account, contact us, submit feedback, or participate in community discussions. This may include your name, email address, username, profile information, and any messages or content you share with us.

We automatically collect certain technical information when you use the Service, including your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, pages visited, time spent on pages, and interaction patterns with our design system components.

We collect usage data related to your interactions with the GelUI design system, such as which components you view or use most frequently, Studio projects you create, theme preferences, and configuration choices. This data helps us improve the Service and prioritise feature development.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. We do not knowingly collect personal information from children under the age of 16.

How We Use Your Information

We use the information we collect to provide, maintain, and improve the Service, including delivering the design system components, documentation, and tools you request. Your usage data helps us understand which features are most valuable and how we can enhance the user experience.

We use your contact information to communicate with you about your account, respond to inquiries, send service-related notifications, and provide customer support. With your consent, we may also send you updates about new features, components, or design system improvements.

We use aggregated and anonymised data for analytics purposes, including understanding usage trends, measuring the performance of our platform, and conducting research to improve our design system. This aggregated data cannot be used to identify individual users.

We may use your information to detect, prevent, and address technical issues, security threats, fraudulent activity, or violations of our Terms & Conditions.

Legal Basis for Processing

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data on the following legal bases: contractual necessity — processing required to fulfil our obligations under our Terms & Conditions when you use the Service.

Legitimate interests — processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, provided these interests are not overridden by your data protection rights.

Consent — where you have given us specific consent to process your data for a particular purpose, such as receiving marketing communications. You may withdraw your consent at any time by contacting us or using the unsubscribe mechanism in our communications.

Legal obligation — processing necessary to comply with our legal obligations, such as responding to lawful requests from public authorities or retaining data for tax and accounting purposes.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the limited circumstances described in this section.

We may share your information with trusted service providers who assist us in operating the Service, such as hosting providers, analytics services, email delivery services, and customer support tools. These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

We may disclose your information if required to do so by law, or if we believe in good faith that such disclosure is necessary to comply with legal process, respond to claims, or protect the rights, property, or safety of GelUI, our users, or the public.

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete your personal data within thirty (30) days, except where we are required to retain it for legal, accounting, or security purposes.

Usage data and analytics are retained in aggregated, anonymised form indefinitely to support long-term trend analysis and Service improvement. This data cannot be used to identify individual users.

We regularly review our data retention practices to ensure we do not retain personal data longer than necessary. Backup copies of your data may persist in our systems for up to ninety (90) days after deletion before being permanently removed.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data. These rights may include: the right to access your personal data and receive a copy of the information we hold about you; the right to rectify inaccurate or incomplete personal data.

The right to erasure ("right to be forgotten") — you may request that we delete your personal data in certain circumstances. The right to restrict processing — you may request that we limit how we use your data. The right to data portability — you may request a copy of your data in a structured, machine-readable format.

The right to object to processing — you may object to our processing of your personal data based on legitimate interests. The right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@uigel.com. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law. We may ask you to verify your identity before processing your request.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data outside the EEA or United Kingdom, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries that have been determined to provide an adequate level of data protection.

By using the Service, you acknowledge and consent to the transfer of your data to countries where our servers and service providers are located. We take all reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS/SSL, secure storage practices, access controls, and regular security assessments.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data, but we continuously monitor and improve our security practices.

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and no later than seventy-two (72) hours after becoming aware of the breach, as required by applicable law.

Children's Privacy

The Service is not intended for use by children under the age of sixteen (16). We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@uigel.com so that we can take appropriate action.

Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We encourage you to review the privacy policies of every site you visit. Our inclusion of links to third-party websites does not imply endorsement of those sites or their privacy practices. Your interactions with third-party services are governed by their respective privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where required by law, by providing additional notice (such as email notification or a prominent notice on the Service).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes to this policy constitutes your acceptance of the updated terms.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:

Email: privacy@uigel.com. Data Protection Officer: dpo@uigel.com. Website: uigel.com. For urgent matters relating to data breaches or security incidents, please contact our security team at security@uigel.com.

If you are in the European Union and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

We aim to respond to all privacy-related inquiries within five (5) business days. For data subject rights requests, we will respond within thirty (30) days or as required by applicable law.