[01]
In short
This policy explains how Advanced Design Technologies Ltd ("ubernatural", "we", "us") handles personal data when you visit ubernatural.io (the "site") or send us a project enquiry.
- We collect what you send through our enquiry form, plus the technical data every website receives.
- We use it to reply, prepare a proposal and keep the site running and secure.
- With your consent, we use Google Analytics to understand how the site is used.
- We use Leadfeeder to see which companies visit the site, based on the network a visit comes from. It sets a cookie only if you accept analytics cookies.
- We don't use advertising cookies or advertising pixels, and we don't sell your data.
1. Who we are
Advanced Design Technologies Ltdادفانسد ديزاين للتقنيات المحدودةCommercial Licence No. CL12718, Dubai International Financial Centre (DIFC)Innovation One, Level 3, DIFC, Dubai, United Arab EmiratesPrivacy contact: bogdan@ubernatural.io
We are the controller of the personal data described in this policy. As a DIFC company, we are primarily subject to the DIFC Data Protection Law No. 5 of 2020, and we have notified our processing to the DIFC Commissioner of Data Protection. Other laws may also apply depending on where you are (see section 11).
We haven't appointed a data protection officer because our processing doesn't require one. Please send any privacy question to bogdan@ubernatural.io.
2. What we collect
Your enquiry
| What | Details |
|---|---|
| Contact details | Name, email address and phone number, plus the page you sent the form from, the time, the first page of your visit (including any campaign tags in its address) and the website that linked you to us, if your browser shares it |
| Project brief | Project type and description, goals and target figures (such as revenue or leads per month), deadline, company or product name, website, what your product does, funding stage, target audience, brand and design preferences, references, competitors, what to avoid, how you heard about us |
| Materials | Files and links you choose to share |
Your contact details reach us as soon as you send the first step of the form, before the brief. If you stop partway, we keep what you've already sent (see section 6 for how long).
Much of a brief is business information. We treat it as personal data where it relates to you or another identifiable person, and as confidential either way.
Please don't include sensitive data, such as health information, in your brief or files. If you share information about other people, such as colleagues, please make sure you're allowed to.
When you browse
Like any website, our hosting and content delivery providers receive technical data from your browser: IP address, browser and device type, the pages you request, the referring page, and the date and time. We use it to deliver the site and keep it secure, not to profile you.
Analytics, only with your consent
If you accept analytics cookies, Google Analytics records how the site is used: the pages you view and for how long, how you arrived, your device and browser, your approximate location (country and city, derived from your IP address, which Google Analytics doesn't store), and actions such as switching the Works view, sending the contact form, completing brief steps, booking a call or opening a project's live site. It uses cookies with a random identifier (see section 9). We don't send your name, email, phone number or the contents of your brief to Google Analytics. If you decline, or your browser sends a Global Privacy Control signal, Google Analytics isn't loaded at all.
Which companies visit
We use Leadfeeder, a service of Dealfront, to learn which companies visit the site. When you load a page, Leadfeeder receives your IP address, the pages you view and their titles, the referring page, the time of your visit and files you download. It matches the IP address against a database of company networks to tell us which business, if any, the visit likely comes from, such as its name, industry and location. It's designed to identify companies, not individual people, and we don't send it what you type into our forms. This works without cookies. If you accept analytics cookies, Leadfeeder also sets a cookie with a random identifier to recognise your return visits, and receives the Google Analytics identifier to link the two (see section 9). If your browser sends a Global Privacy Control signal, Leadfeeder isn't loaded. You can object to this use at any time (section 8).
In your browser
A small amount of data is kept in your browser while you visit. See section 9.
3. How we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to your enquiry, assess your project, prepare and send a proposal | Enquiry | Steps you ask us to take before entering into a contract. Where you act for a company, our legitimate interest in responding to business enquiries |
| Learn which websites, searches and campaigns bring us enquiries | Where you arrived from (part of your enquiry) | Our legitimate interest in knowing which channels work |
| Follow up on an enquiry you started or a proposal we sent | Contact details, enquiry | Our legitimate interest in following up on your request. Tell us and we'll stop |
| Understand how the site is used and improve it | Analytics data | Your consent, which you can withdraw at any time (section 9) |
| Find out which companies visit the site, to understand interest in our services and follow up with those businesses | Company visit data | Our legitimate interest in knowing which businesses are interested in our services. You can object at any time (section 8). Leadfeeder's cookie only with your consent |
| Run the site, prevent spam and abuse, keep our systems secure | Technical data | Our legitimate interest in a secure, working site |
| Keep business records, meet legal obligations, establish or defend legal claims | As needed | Legal obligation; our legitimate interest |
| Send studio news, only if you opt in | Email address | Your consent, which you can withdraw at any time |
We don't make decisions about you based solely on automated processing.
Do you have to give us this data? The form needs your name, email address and phone number so we can respond. Without them, we can't reply. The brief helps us prepare an accurate proposal; share what you're comfortable with.
4. Who we share it with
We share personal data only as needed:
- Service providers that process it on our behalf under contract:
- Cloudflare, Inc.: hosting, content delivery, security and running our enquiry form
- Sanity: content management and image delivery (your browser loads site images directly from Sanity's servers)
- Google (Google Sheets) and Telegram: receiving and managing enquiries
- Google (Google Workspace): email
- Telegram: storing files you upload
- Google (Google Analytics): site analytics, only if you accept analytics cookies
- Dealfront (Leadfeeder): identifying which companies visit the site
- Our team and contractors working on your enquiry or project, bound by confidentiality
- Professional advisers, such as lawyers, accountants and auditors, bound by confidentiality
- Authorities, where the law requires it or to protect our rights, our clients or others
- A buyer or successor, if our business is reorganised or sold, under the same protections
We don't sell personal data, share it for cross-context behavioural advertising, or give it to third parties for their own marketing.
5. International transfers
We are based in the DIFC, and our providers run infrastructure in other countries, including the United States and the European Union. When personal data moves across borders, we protect it as the applicable law requires: by transferring it to jurisdictions recognised as providing an adequate level of protection, or by using appropriate safeguards such as standard contractual clauses. Contact us for details.
6. How long we keep it
| Data | How long |
|---|---|
| Unfinished enquiries: you sent contact details, didn't complete the brief, and we haven't been in touch | Deleted within 90 days |
| Enquiries that don't become a project | Up to 24 months after our last contact, then deleted |
| Client data | For the engagement and afterwards for as long as needed for accounting, tax and legal purposes |
| Technical logs | Short periods set by our providers for security purposes |
| Analytics data (with your consent) | Up to 14 months in Google Analytics, then deleted |
| Company visit data (Leadfeeder) | As long as we need it to follow up on business interest, then deleted |
| Data in your browser | As listed in section 9 |
7. Security
We use encryption in transit (HTTPS), limit access to the people who need it, and work with providers that maintain strong security. No system is perfectly secure. If a breach affecting your data is likely to put you at risk, we'll notify you and the relevant regulator as the law requires.
8. Your rights
Depending on where you live, you can:
- know how we use your data (this policy);
- access your data and get a copy;
- correct inaccurate data;
- have your data deleted;
- restrict or object to our use of it, and object at any time to direct marketing;
- receive your data in a portable format;
- withdraw consent where we rely on it;
- not be subject to decisions based solely on automated processing;
- exercise these rights without being treated differently.
To use them, email bogdan@ubernatural.io. We may need to confirm your identity first. We'll reply within one month. If a request is complex, we may extend this by up to two months and will tell you why. There's no fee unless a request is clearly unfounded or excessive.
If you're unhappy with how we've handled your data, please contact us first. You can also complain to a regulator: the DIFC Commissioner of Data Protection, or the authority where you live, such as your national data protection authority in the EEA, the Information Commissioner's Office in the UK, the Office of the Australian Information Commissioner, or the Saudi Data and Artificial Intelligence Authority.
9. Cookies and browser storage
We use analytics cookies only if you accept them in the banner shown on your first visit. We don't use advertising or social media cookies. If you decline, Google Analytics isn't loaded and no analytics cookies are set; Leadfeeder still works out which company network you visit from, without cookies (section 2). If your browser sends a Global Privacy Control signal, neither is loaded. You can change your choice at any time: Your current choice: ….
| Name | Where | Purpose | How long |
|---|---|---|---|
_ga, _ga_VXND80ME9L | Cookies set by Google Analytics, only with your consent | Tell visits and sessions apart with a random identifier, so we can count visitors and see how the site is used | Up to 13 months |
_lfa, _lfa_consent | Cookies set by Leadfeeder, only with your consent, with copies in local storage | Recognise your return visits with a random identifier and remember that you accepted | 12 months |
ubn-consent | Local storage | Remembers whether you accepted or declined analytics cookies | 12 months, then we ask again |
ubernatural:cta-style | Session storage | Remembers the button style you create with the playground in our footer while you browse | Until you close the tab |
ubn-lead | Local storage | Keeps a reference to your enquiry so you can finish the brief after the contact step | 24 hours, or until you send the brief |
Apart from analytics, these entries are strictly necessary for features you choose to use, so we don't ask for consent. Our hosting provider may also set strictly necessary security cookies, for example to filter out bots.
When you accept or decline, Leadfeeder may set a test cookie (_lfa_test_cookie_stored) for a moment to check that cookies work. We don't track visitors across other websites. If you decline analytics after accepting it, we stop Google Analytics and delete its and Leadfeeder's cookies from your browser.
10. Children
The site is intended for businesses and adults. We don't knowingly collect personal data from anyone under 18. If you believe we have, contact us and we'll delete it.
11. Region-specific information
European Economic Area and United Kingdom
The GDPR and UK GDPR apply because we offer our services to people in the EEA and the UK. Sections 3 to 8 set out our legal bases, recipients, transfers, retention periods and your rights.
California
- What we collect: identifiers (name, email address, phone number), commercial information about your business and project, and internet activity (technical data). See section 2.
- Who we share it with: the categories in section 4.
- Reviewing or changing your data: email bogdan@ubernatural.io.
- Changes to this policy: we'll update the effective date at the top and make significant changes clear on the site.
- Do Not Track: see section 9. No third parties collect personal data about your online activities over time and across websites through our site.
- We don't sell or share personal information, and we don't disclose it to third parties for their direct marketing purposes.
Australia
Where the Privacy Act 1988 (Cth) applies to us, we handle personal information in line with the Australian Privacy Principles. You can browse the site without identifying yourself, but we need your contact details to respond to an enquiry. We are likely to disclose personal information to recipients in the United Arab Emirates, the United States, the European Union and other countries where our providers operate (see section 4). You can ask to access or correct your information at any time. If you make a complaint, we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Saudi Arabia
Where the Personal Data Protection Law applies, you have the right to be informed, to access and obtain a copy of your data, to correct it, and to ask us to destroy data we no longer need. We transfer personal data outside the Kingdom only as the law and its transfer regulations permit. You can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).
12. Changes to this policy
We'll update this policy when our practices change, for example if we add a newsletter or new tools. The effective date at the top shows the current version. If a change is significant, we'll make it clear on the site.
13. Contact us
bogdan@ubernatural.ioAdvanced Design Technologies Ltd, Innovation One, Level 3, DIFC, Dubai, United Arab Emirates