Legal
Privacy Policy
Last updated 14 October 2026
Who we are
UX4U (“we”, “us”) is a software and growth studio registered in Islamabad, Pakistan. Controllers for personal data processed through https://ux4u.online and our related products are contacted at info@ux4u.online. Governing law and venue for privacy disputes sit with the courts of Islamabad, Pakistan, without limiting rights you may have under the law of your country of residence.
Pakistan does not yet have an enacted personal-data statute equivalent to the EU GDPR. The draft Personal Data Protection Bill is pending. Until then we follow the Constitution of Pakistan (Article 14 privacy principles), the Prevention of Electronic Crimes Act, 2016 (PECA) where it applies to unauthorised access and misuse of data, and international practice (lawful purpose, transparency, minimisation, security, retention limits). If you are in the EU/UK or another jurisdiction with stricter rules, we apply the stricter standard where that law reaches our processing.
What this policy covers
This policy covers:
- Visitors to the public marketing site at https://ux4u.online
- People who contact us (forms, email, WhatsApp)
- Authenticated users of our internal desk / dashboard tools
- Personal data that appears in lead lists and directories when you use our lead-generation product (public business contact data collected at your instruction)
Data we collect
Contact and project inquiries. Name, email, company, service interest, and message content you submit on /contact, plus any follow-up you send by email or WhatsApp.
Account / desk access. Session cookies required to keep you signed in to /dashboard. Credentials are handled only for authentication; we do not sell account data.
Analytics (optional). If you allow analytics in the consent banner, we load Vercel Web Analytics. It is cookieless: page path, referrer, browser/OS class, and a daily-resetting anonymous request hash. No advertising profiles, no cross-site tracking. Dashboard routes are excluded from analytics events where we control the client.
Technical logs. Hosting and security logs (IP address, user agent, timestamps) may be processed by our infrastructure providers to keep the service available and secure.
Lead-generation product data. When you run a search or scrape job, the tool may store business names, public websites, published emails/phones/WhatsApp links, city, category, and notes. That data is personal data where it identifies a natural person. You are the controller for how you use those lists; we are the processor for storage and tooling inside your account, unless we agree otherwise in writing.
Why we process it
- Respond to inquiries and deliver studio services
- Operate and secure the website and dashboard
- Understand aggregate traffic (only with analytics consent)
- Provide the lead and directory features you request
- Meet legal obligations and defend legal claims
Cookies and similar tech
- Essential: session cookie for dashboard login. Required for the product to work.
- Preference: your analytics choice stored in localStorage (`ux4u-consent`) so we do not ask on every visit.
- Analytics: loaded only after you click “Allow analytics”. Choose “Essential only” to refuse. You can clear site data in your browser to reset the choice.
Sharing
We use infrastructure processors such as Vercel (hosting / optional analytics) and Supabase (database / auth storage) under their terms. We do not sell personal data. We may disclose information if required by Pakistani law or a valid legal process, or to protect rights, safety, and security.
Retention
Inquiry messages are kept while useful for the relationship and then deleted or archived. Analytics aggregates follow Vercel’s retention. Lead rows remain until you delete them or close the account. Session cookies expire when the session ends or ages out.
Security
We use HTTPS, access-controlled admin tools, and least-privilege database keys. No method of transmission or storage is perfectly secure; report issues to info@ux4u.online.
Your choices
- Refuse or withdraw analytics via the consent banner / clearing site data
- Ask for a copy, correction, or deletion of inquiry data we hold about you
- Object to processing that is not required to provide a service you requested
Write to info@ux4u.online. We will respond within a reasonable time. If you are an EU/UK resident and believe we have not handled a request properly, you may complain to your local supervisory authority.
Children
The site and products are aimed at businesses and professionals. We do not knowingly collect data from children under 16.
Changes
We may update this policy. The “Last updated” date above will change. Material changes affecting tracking will be reflected in the consent banner or a notice on the site.
