UX Surgery · Legal

Privacy policy

How UX Surgery processes personal data. Draft structure pending legal review.

Draft. This text is a placeholder structure and is not a binding legal document until reviewed by legal counsel.

Last updated: [to be completed by legal]

Controller

Identity and contact details of the controller and DPO, if any: [to be completed by legal]

Data we process

Account data (name, email, billing details), the URLs and tasks you submit, test credentials you provide (encrypted), and the recordings, screenshots and reports of each study.

This marketing site does not use analytics or advertising cookies.

Purposes and legal basis

Purposes, legal bases and data minimization: [to be completed by legal]

Where data is stored

Data is hosted in the EU, in Madrid.

Subprocessors (hosting, payments, AI model provider) and international transfers: [to be completed by legal]

Retention

Study data is kept for 90 days and then deleted. You can ask us to delete it sooner.

Retention of account and billing records: [to be completed by legal]

Your rights

You can request access, rectification, deletion, restriction, portability or object to processing by writing to hello@uxsurgery.com. You may also complain to the Spanish Data Protection Agency (AEPD).

Full rights procedure: [to be completed by legal]