Legal & Privacy Policy

UTZYx ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard information when you visit our website at utzyx.com or engage our services.

We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: UTZYx
Contact Email: info@utzyx.com

We process your data for the following lawful purposes:

• Service Delivery: To provide consulting, development, and support services
• Communication: To respond to enquiries and provide project updates
• Legal Compliance: To comply with legal obligations and protect our rights
• Improvement: To enhance our website, services, and user experience
• Marketing: To send relevant updates (only with your explicit consent)

We never sell your personal data to third parties.

Our website separates essential storage from optional analytics and marketing:

• Essential Cookies: Required for site functionality (session management, security)
• Analytics: Optional usage measurement, enabled only with analytics consent
• Marketing: Meta Pixel and Google Ads, loaded only after marketing consent, measure page visits, WhatsApp chat/catalogue clicks and successful contact enquiries. These providers may process cookie identifiers, campaign information, IP addresses and device/browser information.
• Preference Cookies: Remember your settings and preferences

Change or withdraw consent at any time using “Cookie preferences” in the footer. Withdrawing marketing consent reloads the page to unload provider code and clears accessible first-party marketing cookies. Events already sent cannot be recalled, and third-party cookies remain subject to your browser and provider controls. Conversion event payloads do not include form contents, names or email addresses.

We work with trusted third-party services to deliver our offerings:

• Hosting: Replit (cloud infrastructure)
• Analytics: Privacy-respecting analytics tools
• Campaign measurement: Meta and Google, with marketing consent. See Meta’s privacy policy and Google’s privacy policy.
• Communication: Email service providers
• Intelligence Services: Google Gemini for intelligent features

Each third party is contractually bound to handle your data securely and in compliance with applicable data protection laws.

We retain your data only for as long as necessary:

• Contact Enquiries: Up to 2 years after last communication
• Client Project Data: Duration of engagement plus 7 years (legal requirement)
• Analytics Data: 26 months (anonymised)
• Financial Records: 7 years (UK tax requirements)

You may request deletion of your personal data at any time, subject to legal retention requirements.

We implement robust security measures to protect your data:

• TLS/SSL encryption for all data in transit
• Encryption at rest for stored data
• Regular security audits and vulnerability assessments
• Access controls and authentication protocols
• Secure development practices

In the unlikely event of a data breach, we will notify affected individuals and relevant authorities as required by law within 72 hours.

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing activities
• Rights Related to Automated Decision-Making: Challenge automated decisions

To exercise any of these rights, contact us at info@utzyx.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

For any questions about this policy or your data, please contact us: