Privacy Policy

Last updated: 1 January 2025

UIforgelab ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect personal information in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Belgian data protection legislation.

1. Data Controller

UIforgelab
Rue Grétry 72E
4020 Liège, Belgium
Email: [email protected]
Phone: +32 33 75 27 69

2. Data We Collect

We collect personal data in the following circumstances:

  • Contact form: name, email address, company name, project description, and budget range.
  • Email correspondence: any personal data contained in messages you send to us.
  • Analytics: anonymised usage data including pages visited, time on site, and referral source (collected only with your consent).

We do not collect sensitive personal data, and we do not use your data for automated decision-making or profiling.

3. Legal Basis for Processing

  • Contract performance: when processing is necessary to respond to your project enquiry or fulfil a service agreement (Article 6(1)(b) GDPR).
  • Legitimate interests: for general business communication and maintaining our client records (Article 6(1)(f) GDPR).
  • Consent: for analytics cookies, where you have explicitly accepted via our cookie banner (Article 6(1)(a) GDPR).

4. How We Use Your Data

  • To respond to project enquiries and quotes
  • To manage ongoing client relationships and project delivery
  • To send project-related communications
  • To improve this website (with your consent to analytics)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Sharing

We may share your data with trusted third-party service providers strictly for operational purposes, including:

  • Email service providers (for delivering our responses)
  • Analytics platforms (only with your consent, using anonymised data)
  • Cloud storage for project file management

All third-party processors are contractually bound to protect your data and may not use it for any other purpose.

6. Data Retention

We retain contact form data for 12 months after your last interaction with us. Project-related data is retained for the duration of the project and for 5 years afterward for accounting and legal compliance purposes.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights:

  • Right of access: to request a copy of the personal data we hold about you
  • Right of rectification: to request correction of inaccurate data
  • Right of erasure: to request deletion of your data (subject to legal retention obligations)
  • Right to restrict processing: to limit how we use your data
  • Right to data portability: to receive your data in a structured, machine-readable format
  • Right to object: to object to processing based on legitimate interests
  • Right to withdraw consent: at any time, where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

We use cookies for analytics purposes only, with your consent. For full details, see our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Data transmitted via our contact form is encrypted in transit.

10. Supervisory Authority

If you believe your rights under the GDPR have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit):
Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of the page indicates the most recent revision. Continued use of this website after a change constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions: [email protected]