Scope & Roles

Website visitors - we act as a controller for data collected through the Site (forms, email sign‑ups, analytics, cookies).

Prospective & active clients - we are typically a controller for business contact details we need to engage you, and a processor for any personal information you instruct us to handle inside your projects (e.g., user research data you lawfully collected). Our Master Service Agreement / SOW governs processing specifics.

What we collect

We collect the minimum necessary data for the purposes below:

A. You provide it directly

• Contact and business details (name, email, company, role, phone, timezone, region)
• Project and brief details (goals, timelines, budgets, references)
• Newsletter sign‑up (email address and your consent)
• Messages sent to our email or via social platforms

We collect automatically

• Standard web logs and device data (IP address, browser/OS, pages viewed, referrer/UTM, timestamps)
• Access to or ownership of working files, raw source files (e.g., layered PSDs, editable Figma files, or research notes), unless explicitly included.

Data we process for clients (as processor)

• Content and assets you supply for a project (e.g., copy, images, research notes)
• User research materials you lawfully collected (e.g., interview recordings, survey exports) - only if you instruct us to process them and with appropriate safeguards

We do not intentionally collect sensitive categories unless a client explicitly instructs us to process them and lawful grounds/consents are in place.

Why we use personal information

• To respond to inquiries and provide proposals
• To perform, administer, and improve client projects
• To operate and secure the Site (fraud/abuse prevention, diagnostics)
• To send service communications and (with your consent or as permitted by law) occasional updates/newsletters, a user can unsubscribe at any time
• To comply with legal, tax, and accounting obligations

Legal bases

Depending on your region, we rely on: consent (e.g., newsletters/cookies), contractual necessity (to deliver services you request), legitimate interests (site security, minimal analytics), and legal obligation (record keeping).

Sharing & disclosures

We do not sell personal information. We share only as needed:

• Service providers (hosting, email, CRM, project tools, analytics) bound by confidentiality and data‑processing terms
• Professional advisors (legal, accounting) under duty of confidentiality
• Business transfers (e.g., merger, acquisition) with appropriate safeguards
• Legal compliance (lawful requests, enforcement of our agreements)

A current list of core categories of service providers is available on request.

Cookies & similar technologies

We use strictly necessary cookies for basic site functions and form protection, and limited analytics to understand overall traffic and improve content.

You can manage cookies through your browser settings. If we deploy a cookie banner in your region, you can adjust preferences there.

Retention

We keep personal information only as long as needed for the purposes described, including:

• Inquiry and proposal records: up to 24 months
• Newsletter subscriber records: until you unsubscribe (plus a short period to record the opt‑out)
• Project and billing files: 7 years (or longer if required by law/contract)
• Aggregated analytics: retained without direct identifiers where feasible

Security

We apply administrative, technical, and organizational safeguards appropriate to the risk (access controls, least‑privilege, encryption in transit, vendor due diligence). No system is 100% secure; we maintain incident response procedures and will notify you of breaches as required by law.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict/opt‑out of certain processing, and to withdraw consent.

How to exercise: Email support@uxperiment.design from the address you used with us and specify your request. We may need to verify your identity and jurisdiction. Where we act as a processor for a client, we will refer your request to that client/controller.

Email, marketing & CASL/GDPR/CPRA notices

We send marketing emails only with consent or where otherwise permitted, and include an unsubscribe link or instructions in every message.

California residents may have additional rights regarding “sharing”/“selling” and targeted advertising; we do not sell personal information and use only limited, aggregated analytics.

Social platforms & lead forms

If you interact with us on platforms like LinkedIn (including lead‑gen forms), those platforms collect your information under their own policies. We receive the contact details you choose to submit and use them for the purposes in §3.

International transfers

We may process and store information in Canada and other countries where our service providers operate. Where required, we use appropriate safeguards (e.g., contractual clauses) and ensure materially comparable protection.

Children

Our Site and services are intended for adults and business users. We do not knowingly collect personal information from children under the age required by local law. If you believe a child provided information, contact us and we will delete it.

AI & research tools we use for client work

With client authorization, we may use vetted AI‑assisted or research tools to analyze non‑confidential project materials. We avoid uploading confidential or personal data unless contractually permitted and necessary, and only with suitable safeguards. Clients can instruct us not to use AI tools for their work.

Links to other sites

Our Site may link to third‑party websites or resources. Their privacy practices are governed by their own policies.

Changes to this Policy

We may update this Policy from time to time. We will change the "Effective date" above and, where required, provide additional notice. Your continued use of the Site after an update means you accept the revised Policy.

Questions or Permissions

For clarification, custom licensing arrangements, or requests to use or distribute our work, please contact: