Legal

Privacy Policy

How we collect, use and protect your personal information when you visit our website or work with us.

Last updated: August 12, 2026

This Privacy Policy explains how Ullass handles personal information. We are committed to protecting your privacy and being transparent about the data we collect.

01Introduction

Ullass ("we", "us" or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit https://ullass.com or interact with our team and services.

By using our website or providing your information to us, you consent to the practices described in this policy. If you do not agree with these practices, please do not use our website or provide your personal information to us.

We will update this policy from time to time. The "Last updated" date at the top of this page indicates when the most recent changes were made.

02Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from public or third-party sources.

  • Contact details you share when reaching out, such as name, email address, company name and phone number.
  • Project information you provide when discussing potential work, including briefs, requirements and any files you choose to share.
  • Usage data collected automatically, such as IP address, browser type, device information, pages visited, referring URL and time spent.
  • Communication history, including emails and messages exchanged with our team.

03How We Use Your Information

We use the information we collect to operate our business, respond to inquiries, deliver services, and improve our website and communications.

  • To respond to your inquiries and provide information about our services.
  • To evaluate, plan and deliver the projects and services you engage us for.
  • To send administrative messages, invoices and service-related communications.
  • To analyse website usage and improve our content, design and user experience.
  • To send occasional marketing communications, where you have opted in and have not unsubscribed.
  • To comply with legal obligations and protect our rights and the rights of others.

04Legal Bases for Processing (GDPR)

Where the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases for processing personal data:

  • Consent — where you have given clear consent for us to process your personal data for a specific purpose.
  • Contract — where processing is necessary for the performance of a contract with you, such as a project agreement.
  • Legitimate interests — where processing is necessary for our legitimate business interests, such as responding to inquiries, preventing fraud and improving our services, provided your interests and rights do not override those interests.
  • Legal obligation — where processing is necessary to comply with a legal obligation to which we are subject.

05Cookies & Similar Technologies

We use cookies and similar technologies to make our website work, understand how visitors use the site, and improve your experience. Some cookies are strictly necessary; others help us with analytics and preferences.

You can control and manage cookies through your browser settings. Please refer to our Cookie Policy for full details on the categories of cookies we use and how to control them.

For more information, read our Cookie Policy.

06Sharing & Disclosure of Information

We do not sell, rent or trade your personal information. We only share information in the circumstances described below:

  • With trusted service providers who help us operate our business (such as hosting, email, analytics and payment providers), under contracts that require them to protect your data.
  • With professional advisers such as lawyers and accountants, where necessary.
  • Where required to do so by law, regulation, legal process or governmental request.
  • To protect the rights, property or safety of Ullass, our users or the public.
  • In connection with a merger, acquisition or sale of assets, where your data may be transferred as part of that transaction.

07Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal obligations, and to resolve disputes and enforce our agreements.

Inquiry and project records are generally retained for the duration of an engagement plus a reasonable period afterward (typically up to seven years for accounting and tax purposes).

Analytics data is retained in aggregate or de-identified form where possible, and individual-level analytics records are deleted on a periodic basis.

08Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include encrypted connections (TLS), access controls, and restricted staff access to personal data on a need-to-know basis.

While we take reasonable precautions, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information.

09Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • The right to access the personal information we hold about you.
  • The right to request correction of inaccurate or incomplete information.
  • The right to request deletion of your personal information.
  • The right to restrict or object to certain processing activities.
  • The right to data portability.
  • The right to withdraw consent at any time, where processing is based on consent.
  • The right to lodge a complaint with a supervisory authority.

10International Transfers

We serve clients worldwide and may use service providers located in different countries. Where personal data is transferred outside your country of residence, including outside the EEA or the UK, we take steps to ensure it receives an adequate level of protection, for example through standard contractual clauses or equivalent safeguards.

11Children's Privacy

Our website and services are directed at business professionals and are not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

12Contact Us

If you have any questions about this Privacy Policy, the data we hold about you, or wish to exercise any of your privacy rights, please contact us:

  • Email: ullassofficial@gmail.com
  • We aim to respond to privacy requests within thirty (30) days.