Privacy Policy

Last Updated: 28 April 2026

Uivwa LTD (“we,” “our,” “us”), registered at 110 Queen Street, Glasgow G1 3BX, United Kingdom, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your personal data when you visit the Uivwa website (the “Site”).

1. Data Controller

The data controller responsible for your personal data is Uivwa LTD. You can contact us at any time using the details on our Contact Us page. Our Managing Director, Eilidh MacKenzie, oversees data protection matters.

2. What Information We Collect

We collect the following categories of personal data:

• Contact Form Data: When you voluntarily fill in the form on the Site, we collect your name, email address, phone number, and any message you provide.
• Automatically Collected Data: When you browse the Site, our servers automatically log technical information such as IP address, browser type, operating system, referring URL, and date/time stamps. This data does not directly identify you.

3. How We Use Your Data

We use the collected information for the following purposes:

• To respond to enquiries submitted through the contact form.
• To operate, maintain, and improve the Site's functionality and security.
• To comply with legal obligations and protect our legitimate business interests.

We do not use your personal data for automated decision‑making or profiling.

4. Legal Basis for Processing

Under UK GDPR, our lawful bases for processing are:

• Consent: When you voluntarily submit the contact form, you give your clear consent for us to process the provided information for the purpose of responding to your query.
• Legitimate Interests: We process technical logs to ensure network and information security, which is a legitimate interest.

5. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share data only in the following circumstances:

• With trusted service providers who assist in hosting the Site (e.g., our web hosting provider), subject to appropriate contractual safeguards.
• If required by law, court order, or governmental authority.

6. International Transfers

Your data is stored and processed within the United Kingdom. We do not transfer personal data outside the UK or the European Economic Area.

7. Data Retention

We retain contact form submissions for up to 12 months after the enquiry is resolved. Server logs are retained for a maximum of 30 days. After these periods, the data is securely deleted or anonymised.

8. Your Rights

Under UK data protection law, you have the following rights:

• Right to access – obtain a copy of the personal data we hold about you.
• Right to rectification – correct any inaccurate or incomplete data.
• Right to erasure – request deletion of your data under certain conditions.
• Right to restrict processing – limit how we use your data.
• Right to data portability – receive your data in a structured, commonly used format.
• Right to object – object to processing based on legitimate interests.

To exercise any of these rights, please contact [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Cookies

Please see our Cookie Policy for detailed information about the cookies we use.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the “Last Updated” date.