Privacy Policy
1. Who we are
UKEDL is operated by UKEDL (sole proprietorship; entity formation pending). This policy explains how we process personal data when you visit ukedl.com, create an account, or use the product.
2. Controller and processor roles
Organizers are controllers of personal data they collect about their attendees and speakers inside their events (for example registrations, agendas, messages, and check-ins for that event). UKEDL (sole proprietorship; entity formation pending) is the processor for that event data: we process it on the organizer's instructions to provide UKEDL.
For your UKEDL account (login, billing contact, support tickets with us), UKEDL (sole proprietorship; entity formation pending) is the controller.
3. Data we process
- Account profile: name, email, password hash, optional bio/affiliation/photo
- Organization and event membership roles
- Event participation: attendance, bookmarks, check-ins, messages you send
- Billing metadata via our merchant of record (not full card numbers on our servers)
- Technical logs needed to operate and secure the service (without storing secrets in logs)
4. Why we process data
To provide the service, authenticate you, enforce plans and security, send transactional email (invites, password reset, verification), improve reliability, and comply with law. We do not sell attendee data or show ads.
5. Subprocessors
We use the following subprocessors to operate UKEDL:
- Lemon Squeezy — Merchant of record (payments, tax)
- Neon — PostgreSQL hosting
- Render — API hosting
- Netlify — Web hosting
- Resend — Transactional email (when configured)
- Sentry — Error tracking (when configured)
6. Cookies
We set essential cookies only: an HttpOnly session cookie for authentication and a CSRF cookie to protect state-changing requests. Because we do not set non-essential analytics or advertising cookies today, we do not show a cookie consent banner. This is a deliberate product choice (see brand.cookieConsentRequired in config). If we add analytics cookies that require consent, we will enable a banner and update this section.
7. Retention
We retain account and event data while your account or organization remains active, and for a limited period afterward for backups, dispute resolution, and legal obligations. Organizers control how long they keep event content they are responsible for.
8. Your rights (including GDPR)
Depending on your location, you may have rights to access, correct, export, or delete personal data. Signed-in users can download a JSON export of their own account data from Account. Deletion of accounts is available once cascade rules are finalized (see /security for continuity commitments). Organizer-held lists outside UKEDL remain the organizer's responsibility.
9. International transfers
Infrastructure may be located in the United States or other regions used by our hosting subprocessors. Where required, we rely on appropriate transfer mechanisms offered by those providers.
10. Security
See our Security page for architecture, downloads, and product principles. No method of transmission or storage is 100% secure.
11. Children
UKEDL is not directed to children under 16. If you believe we have collected such data in error, contact support@ukedl.com.
12. Changes and contact
We may update this policy; the date above will change. Questions: support@ukedl.com (UKEDL (sole proprietorship; entity formation pending)).