Privacy policy

Who we are

UPTECHTURE is a software development company. We build custom web and Windows desktop applications, business websites, custom ERP and enterprise systems and e-commerce solutions, and we upgrade existing websites and apps.

UPTECHTURE is the controller of the personal data described in this policy. This means we decide why and how it is processed. You can contact us by email at uptechture@gmail.com. Our full contact details are on our Legal notice page.

What we collect and why

You can browse the site without giving us any personal data. We only collect personal data when you visit the site (server logs), use one of our forms or tools, or write to us. Here is what each feature collects:

• Submit Your Requirements form: your name, work email and project description, plus any optional details you choose to add: company, country, the service you need, budget band, timeline, your current website address and up to 5 file attachments. We email the enquiry to our team inbox and send you a confirmation email. We use it to answer your enquiry and to prepare a proposal.
• Contact form: your name, email address and message. We handle it in the same way as the requirements form, to reply to you.
• Project cost estimator (when available): your answers to the estimator questions and the contact details you enter. We use them to give you an estimate and to follow up on it.
• Free website audit (when available): the website address you enter. We fetch that public website and analyse it, partly with the Google PageSpeed Insights API. If you unlock the full report, we also collect your name, email address and company, and use them to send you the report and follow up on it.
• Newsletter (when available): your email address. We only add you after you confirm your subscription with the link we email you (double opt-in). You can unsubscribe at any time.
• Emails and messages you send us: your contact details and the content of your message, which we use to reply and to continue the conversation. If you contact us via WhatsApp, WhatsApp’s own privacy policy also applies to that conversation.
• Server logs: when you visit the site, our server records your IP address, the date and time, the address of the page you requested and your browser’s user agent. We use these logs to keep the site secure and to find and fix problems.
• Spam and abuse protection: our forms contain a hidden field that only bots fill in, and we limit how many requests one IP address can send. We may also use Cloudflare Turnstile, a Cloudflare check that tells people and bots apart.
• Analytics and marketing (only with your consent): if you accept analytics or marketing cookies, Google Analytics 4, Microsoft Clarity and the LinkedIn Insight Tag collect information about how you use the site. Our Cookie policy explains the details.

Leads are stored in our own database (Microsoft SQL Server on our hosting server), so we can manage our conversation with you.

Our legal bases (EU and UK)

Under the GDPR and the UK GDPR, we need a legal basis for each use of your personal data. We rely on these:

• Steps before a contract (Article 6(1)(b)): handling your requirements, contact, estimator or audit request at your request and preparing a proposal.
• Legitimate interests (Article 6(1)(f)): replying to business enquiries, managing our conversations with prospective clients, keeping the site secure, preventing spam and abuse, and finding and fixing errors. You can object to this at any time (see “Your rights”).
• Consent (Article 6(1)(a)): analytics and marketing cookies and the newsletter. You can withdraw your consent at any time. This does not affect what we did before you withdrew it.
• Legal obligation (Article 6(1)(c)): when a law requires us to keep or disclose certain information.

Attachments you send us

With the Submit Your Requirements form, you can attach up to 5 files: PDF, Office and OpenDocument files, images, text files and ZIP archives. Only these file types are accepted. The files are emailed to our team inbox together with your enquiry.

Please only send files you are allowed to share, and leave out other people’s personal data unless it is needed to describe your project. Please do not send passwords or other access details. We treat attachments as confidential and use them only to understand your project and to prepare a proposal.

Attachments follow the same retention rules as the rest of your enquiry.

How long we keep your data

• Enquiries that do not lead to a project (including attachments): deleted or anonymised after 24 months. This applies to our database and to our mailbox.
• Enquiries that lead to a project: the data becomes part of our client relationship and is handled under our written agreement with you.
• Server logs: up to 30 days.
• Newsletter: until you unsubscribe.
• Your cookie choice: about 6 months (see our Cookie policy).

We may keep data for longer only when the law requires it, or when we need it to establish, exercise or defend legal claims.

Who we share your data with

We do not sell your personal data. We share it only with service providers that help us run the site and answer you. Where they act as our processors, they may only process the data on our instructions.

• Cloudflare: content delivery network, security and DNS for our website. Your requests to the site pass through Cloudflare’s network.
• Our web hosting provider: hosts the website, our database and the server logs on a Windows server managed with Plesk.
• Google: Gmail, which we use for our team inbox and for sending emails, and the PageSpeed Insights API, which we use for website audits.
• Brevo: we may switch to Brevo for sending emails in the future. If we do, we will update this policy.
• Analytics and marketing providers, only if you consent: Google (Google Analytics 4), Microsoft (Microsoft Clarity) and LinkedIn (LinkedIn Insight Tag).

We may also disclose personal data when the law requires it, for example to answer a valid request from a court or public authority.

International transfers

Our team works from Bangladesh, and some of our service providers are based in the USA. This means your data may be transferred to, and accessed from, countries outside the European Economic Area (EEA) and the UK that may not offer the same level of legal protection.

When we transfer personal data outside the EEA or the UK, we use safeguards recognised by law, such as the European Commission’s Standard Contractual Clauses (with the UK addendum for UK data), or the EU-US Data Privacy Framework where the provider is certified under it. You can ask us for more information about these safeguards.

How we protect your data

• HTTPS (TLS) encryption for all traffic between your browser and our site.
• Access control: only team members who need it can see enquiries and our database.
• Encrypted backups.
• Protection against spam and abuse on our forms: a hidden honeypot field, rate limiting and, where used, Cloudflare Turnstile.
• Checks on uploaded files: only the listed file types are accepted.

No system is completely secure, but we work to keep your data safe. If a data breach puts your rights at risk, we will act as the law requires.

Your rights (EU and UK)

If you are in the EEA or the UK, the GDPR or the UK GDPR gives you these rights:

• Access: ask for a copy of the personal data we hold about you.
• Rectification: ask us to correct data that is wrong or incomplete.
• Erasure: ask us to delete your data.
• Restriction: ask us to limit how we use your data.
• Portability: receive the data you gave us in a common, machine-readable format, or ask us to send it to another organisation.
• Objection: object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent: at any time, for example by changing your cookie settings or unsubscribing from the newsletter.
• Complaint: complain to a data protection supervisory authority, for example your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).

Some rights only apply in certain situations. If a right does not apply to your request, we will explain why.

To use your rights, email us at uptechture@gmail.com. We reply within one month. We may ask you to confirm your identity before we act on a request, so we do not share your data with the wrong person.

Your rights in US states

Some US states give residents rights over their personal information, for example California under the CCPA as amended by the CPRA. These include the right to know what we collect, to access it, to correct it, to delete it, and to opt out of its sale or sharing.

We do not sell personal information. We only use advertising cookies if you accept them in the cookie banner, so not accepting them also works as your opt-out of “sharing” for cross-context behavioural advertising.

To make a request, email us at uptechture@gmail.com. We reply within one month. We will not discriminate against you for using your rights, for example by refusing to answer you or offering you worse terms.

Cookies

We use essential cookies to run the site securely and to remember your cookie choice. Analytics and marketing cookies are only set if you accept them in the cookie banner. You can change your choice at any time with the “Cookie settings” link in the footer.

Our fonts are hosted on our own server, so loading a page does not send requests to Google Fonts. Our Cookie policy lists every cookie we use.

Children

Our website and services are meant for businesses. They are not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy when our website, our services or the law changes. The date on this page shows when it was last updated. If we make important changes, we will make them clear on this page.

Contact

Questions about this policy or about your data? Email us at uptechture@gmail.com or use the contact form on our Contact page. You can also reach us via WhatsApp (link on our Contact page).