Privacy policy

Who is responsible

The data controller is Sergio Gualda, Spain. You can reach us at hello@uxerhub.com, which is the fastest route for anything in this document. uxerhub currently operates as an individual rather than an incorporated company. A registered address and company number will be published here once the operating entity exists, and this document will be updated on the same day.

What we collect, and why

We collect as little as we can get away with, and we do not run advertising trackers.

• Assessment requests: the email address, the role you are hiring for, and anything you choose to write in the optional fields. Purpose: replying to your request. Legal basis: steps taken at your request prior to entering a contract.
• Email correspondence: whatever you send us. Purpose: answering you. Legal basis: legitimate interest in responding to enquiries.
• Server logs: IP address and request metadata, generated automatically by our hosting provider. Purpose: security and availability. Legal basis: legitimate interest.

Analytics, and how to say no

We use Google Analytics to see which pages people read. It only runs if you say yes to the banner: until then no script from Google loads, no cookie is set, and your browser never contacts them. Saying no is a real no, not a smaller amount of tracking.

If you accept, Google sets cookies in your browser and receives your IP address, which Google anonymises before storing. We have advertising features and personalisation switched off, so this counts reading rather than following you around.

You can change your mind at any time from the link at the bottom of any page. When you turn it off we stop the collection immediately and delete Google's cookies from your browser — we do not simply stop adding to them.

None of this touches the assessment. Candidate answers and reports are never sent to Google, whatever you choose here.

What we do not do

No advertising cookies, no ad profiling, no retargeting pixels, and no sale or rental of personal data to anyone, ever.

We do not add you to a mailing list because you requested an assessment. If we ever start a newsletter it will be a separate, explicit opt-in.

Who processes data on our behalf

We use a small number of service providers, each bound by a data processing agreement and each processing data only on our instructions.

• Hosting and content delivery — serving the website and generating access logs.
• Website analytics — counting page views, and only for visitors who accepted the banner.
• Database hosting — storing accounts, assessment answers and reports.
• Transactional email — delivering the emails we send you.
• There is no fifth. In particular, no artificial intelligence provider processes anything: scoring is arithmetic that runs on our own servers, and no answer a candidate gives is ever sent to a model.

International transfers

Some providers operate outside the European Economic Area. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Assessment requests: 24 months from your last contact with us, then deleted.

Email correspondence: 24 months from the last message in the thread.

Server logs: 30 days.

Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction of processing, portability, and object to processing based on legitimate interest. Use the form at /legal/data-request, or write to us. We respond within one month, usually much sooner.

If you think we have handled your data badly, you can complain to your national supervisory authority. In Spain that is the Agencia Española de Protección de Datos.

Changes

If we change this policy materially we will update the date at the top and, where we hold your contact details and the change affects you, tell you directly.