This policy explains what information UXUI.expert collects when you visit this site or book a call, how that information is used, and the choices you have. It is written to be read, not to be survived.
1. Who we are
UXUI.expert is a user-experience consulting practice operated by Brent Lackley. For the purposes of the GDPR, UXUI.expert is the data controller for information described in this policy.
Contact:
2. What we collect
2.1 Information you give us directly
- Scheduling: when you book a call via our Google Calendar appointment scheduling page, Google collects your name, email address, timezone, and any answers to the booking-form questions on our behalf.
- Email: if you write to us, we receive your email address, your message, and anything you choose to include in it.
2.2 Information collected automatically
- Server logs: our web host records standard request data — IP address, browser and device type, referring page, and timestamp — for security and reliability purposes.
2.3 Information from third parties
We do not buy, rent, or receive personal information about you from data brokers or advertising networks.
What this site does not do. UXUI.expert does not run advertising, does not use advertising or social-media tracking pixels, does not sell or share personal information, and does not set analytics cookies. Typefaces are served from our own server, so no third party sees your IP address when the page loads. If that changes, this policy will be updated before the change takes effect.
3. How we use your information
- To schedule, prepare for, and hold the call you requested.
- To reply to you and continue a conversation you started.
- To operate and secure the website.
- To meet legal, tax, and record-keeping obligations.
We do not use your information to build advertising profiles, and we do not make automated decisions that produce legal or similarly significant effects.
4. Who we share it with
We share information only with the service providers needed to operate the practice. Each acts on our instructions under contract.
| Provider | What it handles |
|---|---|
| Google (Workspace & Calendar) | Appointment scheduling, booking-form responses, calendar invitations, email identity |
| ICDSoft | Website hosting, mail hosting, server logs |
We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a business transfer — in which case we will say so here first.
5. How long we keep it
- Booking and enquiry records: kept while the conversation is active and for up to 24 months afterwards, so we can pick up where we left off.
- Email correspondence: kept while it remains relevant to an active or prospective engagement.
- Server logs: retained on a short rolling window by our host for security purposes.
- Records with a legal or tax obligation: kept for the period the relevant law requires.
You can ask us to delete your information sooner — see section 6.
6. Your rights
Depending on where you live, you may have the right to request access to the personal information we hold about you, correction of anything inaccurate, deletion, a portable copy, restriction of or objection to certain processing, and to withdraw consent where processing relies on it.
How to exercise them: email with the request. We will respond within 30 days. We may ask you to confirm your identity before acting, and we will not charge you or treat you differently for making a request.
California residents (CCPA/CPRA): we do not sell or share personal information as those terms are defined, and we have not done so in the preceding 12 months.
EU/UK residents (GDPR): our lawful bases are your consent (when you book a call or write to us), legitimate interests (operating and securing the site, replying to enquiries), and legal obligation. You have the right to lodge a complaint with your local supervisory authority.
7. Security
The site is served over HTTPS. Access to booking data and correspondence is limited to those who need it. No method of transmission or storage is perfectly secure, and we do not claim otherwise — but we will tell you promptly if a breach affects your information.
8. Children
This site is intended for business use by adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided information, contact us and we will delete it.
9. International visitors
We operate from the United States, and our providers may process information in the United States and elsewhere. Where information is transferred from the EU or UK, our providers rely on Standard Contractual Clauses or another approved transfer mechanism.
10. Changes to this policy
If we change this policy we will update the date at the top. Material changes — particularly any addition of tracking or analytics — will be described here before they take effect.
11. Contact
Questions, requests, or corrections:
UXUI.expert · Brent Lackley, Principal