Privacy Policy
Last updated: 2026. This policy explains how UCL Ltd ("we", "us") collects, uses and protects personal data when you use https://ucl.ltd.
Who we are
UCL Ltd, Mopes Lane, Swindon SN5 4HG. Contact us at info@ucl.ltd or 01793 772882.
What we collect
When you submit our contact form we collect your name, email address, phone number (if provided) and the message you send us. We use this data only to respond to your enquiry.
Third-party services we use
- Resend — delivers contact form enquiries to our inbox by email. Resend processes the content of your enquiry solely to transmit it.
- Cloudflare Turnstile — verifies that contact form submissions come from a real person, not automated spam. Turnstile may process technical data such as your IP address and browser characteristics.
- Cloudflare — provides hosting, content delivery and security for this website, including essential cookies required for the site to function.
- Google Analytics 4 (GA4) — used only if you accept analytics cookies via our cookie banner. Helps us understand how visitors use the site. See our Cookie Policy for details.
- Meta Pixel (Facebook) — used only if you accept analytics cookies via our cookie banner. Helps us measure the performance of our Facebook and Instagram advertising. See our Cookie Policy for details.
How long we keep data
Contact form submissions are stored securely in our database, in addition to being emailed to our inbox, so that no enquiry is lost if an email fails to send or is filtered as junk. We retain this data for up to 12 months from submission, after which it is deleted.
Recruitment and job applications
This section is in draft and pending review by our legal adviser before launch.
What we collect. If you apply for a role with us — through our tick-box application form, the "send your CV" form, or by speaking with our recruitment assistant — we collect your name, contact details, postcode, the roles, tickets, qualifications and work experience you tell us about, your availability, and anything else you choose to share with us. If you upload a CV, we collect whatever it contains.
Why we process it. We use this information to assess your application against our current vacancies and to contact you about it. We rely on our legitimate interests in recruiting suitable staff as the lawful basis for this — not consent — which is why submitting an application does not require a separate consent tickbox. Where you tick the optional box to be considered for future roles, we rely on your consent for that separate, ongoing use, which you can withdraw at any time (see below).
Who sees it. Your application is seen by UCL Ltd's recruiting team and by Devon Pixels, our website developer, who provide and maintain the systems that store and score applications on our behalf. Your details are also processed by Cloudflare (hosting and data storage) and Resend (email delivery) as described above, solely to operate these services — neither uses your data for their own purposes.
How long we keep it. We keep an application for up to 12 months from submission, so we can consider you for other suitable roles that come up in that time, after which it is deleted. If you have ticked the optional future-roles box, we keep your details for up to 24 months from your last contact with us, or until you ask us to delete them, whichever is sooner.
Your rights. As well as the rights listed below, you can ask us at any time to delete your application or withdraw consent to be contacted about future roles, by emailing info@ucl.ltd. This will not affect any application already in progress unless you ask us to stop processing it.
Your rights
Under UK GDPR you have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact us at info@ucl.ltd.
Contact
Questions about this policy should be sent to info@ucl.ltd.