Last updated: 17 October 2026
This policy applies to uflabs.co.uk (UF Labs) and the UF Labs client portal at portal.uflabs.co.uk, operated by Underdown Labs Limited, a company registered in England and Wales. UF Labs is a trading name of Underdown Labs Limited.
Contact: [email protected]
Our public site is mostly static pages. If you use our contact form, we receive your name, email, business type, and message so we can reply. If you use the UF Labs Helper chat on the site, we process your messages through our hosting provider to generate automated replies about our services. Chat text is not used for advertising profiles. For a human reply, you can use WhatsApp (which is operated by Meta) or the contact form. If you email us directly, we process your email address and message content to respond to your enquiry.
If you are an active UF Labs studio customer, we may give you a login to our client portal. You can use it to sign in, manage your subscription and payments, and raise support requests through Site care. We may process your name, email, business details, billing records, payment information (handled by Stripe), and the content of messages you send through the portal.
Our hosting runs on UF Labs infrastructure (Coolify on EU servers) for the marketing site and related studio properties. Standard server logs (such as IP address, browser type, and pages requested) may be processed for security and reliability.
Our hosting infrastructure may process standard server logs and set cookies needed to keep the marketing site secure. Contact form submissions are handled through our studio console (not third-party form hosting). If you log in to portal.uflabs.co.uk, the client portal sets cookies required for sign-in, security, and your session. These are essential for those features to work.
With your consent, we use Google Analytics to understand how visitors use this site (for example which pages are viewed). Google may set cookies for this purpose. You can accept or reject analytics cookies when you first visit. You can change your mind anytime using Cookie preferences in the site footer. You can also use Google’s opt-out tools or clear cookies in your browser. See Google’s privacy policy for details.
We do not sell personal data. We do not use this site for behavioural advertising.
When we email you about your project, portal, invoices or support, we send the message through Amazon Web Services in London. We note whether it was delivered or bounced, so we know it reached you.
We also note when you click a link in one of our emails. We keep the time and the page the link led to. We remove anything added to the end of the page address, so no personal details are kept. This lets us follow up at a sensible time, and not chase you for something you have already seen.
We do not track whether you open an email, and we do not use a tracking pixel. We never keep your IP address, location or device details for this.
We never track the links in sign-in, password reset, portal invite or payment emails.
For each email we keep your email address, the subject line and the date. We keep click records for 90 days. We keep send, delivery and bounce records for 12 months.
Our lawful basis is legitimate interests: knowing a message reached you, and following up at a sensible time. If you would rather we did not record link clicks for your address, email [email protected] and we will stop.
If you are in the UK or EEA, you may have rights to access, correct, delete, restrict or object to our processing of personal data we hold about you. To exercise these rights, email [email protected]. You may also complain to the ICO (ico.org.uk) if you believe we have handled your data unlawfully.
We may update this policy from time to time. The “last updated” date at the top of this page will change when we do. See also our Terms of use.