This policy applies to the UCX360 website (www.ucx360.com), the UCX360 application (app.ucx360.com), and all related services. By using our services you agree to the collection and use of information as described here.
1 Data Controller
UCX360 is the Data Controller for personal data collected through its website and platform. For any data-related enquiries, contact us at sales@ucx360.com.
Where UCX360 processes data on behalf of client organisations (e.g. CRM records entered by users), UCX360 acts as a Data Processor and the client is the Data Controller.
2 What Data We Collect
We may collect and process the following categories of personal data:
- Account data — name, work email, company name and hashed password when you create an account.
- Usage data — pages visited, actions performed within the platform, session duration and feature usage.
- Communication data — messages submitted via the contact form, support tickets, and email correspondence with us.
- Technical data — IP address, browser type, device identifiers and cookies (see our Cookie Policy).
- CRM / operational data — contact records, workflow data, call logs and other data entered into the UCX360 platform by you or your team as part of your business operations.
3 How We Use Your Data
- Providing, operating and improving the UCX360 platform and services.
- Managing user accounts and authentication.
- Responding to enquiries submitted via the contact form or support channels.
- Sending service-related communications (updates, security alerts).
- Analysing usage patterns to improve platform performance and user experience.
- Complying with legal obligations.
4 Legal Basis for Processing
We process your personal data on the following legal bases under GDPR:
- Contract performance — processing necessary to provide the services you have subscribed to.
- Legitimate interests — improving the platform, security monitoring and fraud prevention.
- Consent — where you have explicitly opted in (e.g. marketing communications, analytics cookies).
- Legal obligation — where we are required to process data to comply with applicable law.
5 Data Sharing
We do not sell your personal data. We may share data with the following categories of third parties:
- Infrastructure providers — cloud hosting and storage services that process data on our behalf under signed data processing agreements.
- Communication providers — email delivery and telephony services used to operate platform integrations.
- Analytics tools — aggregated, anonymised usage data for platform improvement.
- Legal authorities — where required by applicable law, court order or regulatory obligation.
All third-party processors are bound by appropriate data processing agreements and must maintain the security of your data.
6 Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Account data is retained for the duration of the active subscription plus a reasonable period thereafter. You may request deletion of your data at any time (see Section 8).
7 Data Security
We implement appropriate technical and organisational security measures to protect your personal data, including encrypted data transmission (HTTPS/TLS), access controls, audit logging and regular security reviews.
No method of transmission over the internet is 100% secure. While we strive to protect your data using commercially acceptable means, we cannot guarantee absolute security.
8 Your Rights
Under applicable data protection law (GDPR), you have the following rights:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion of your personal data (subject to legal retention requirements).
- Right to restriction — request that we limit how we use your data in certain circumstances.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, contact us at sales@ucx360.com. We will respond within 30 days.
9 Cookies
We use cookies and similar tracking technologies to operate and improve the platform. For full details, please read our Cookie Policy.
10 International Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the European Commission — to protect your data to the same standard required within the EEA.
11 Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this policy periodically. Continued use of our services after changes are published constitutes acceptance of the revised policy.
12 Contact Us
If you have questions, concerns or requests regarding this Privacy Policy or the processing of your personal data:
UCX360
Email: sales@ucx360.com
Website: www.ucx360.com