Privacy notice
Last updated 12 November 2026
This notice covers this website, theuxhive.com: what personal data it collects, why, and your rights. The audit tool at audit.theuxhive.com has its own privacy policy.
1. Who is responsible for your data
Carl Borg Bartolo, trading as The UX Hive, a sole trader registered in Malta (VAT MT29089817), is the controller of your personal data. Contact: carl@theuxhive.com.
2. What I collect
- Messages you send: your name, email address and message when you use the contact form or email me, plus anything we discuss afterwards.
- Call bookings: if you book a call, Google Calendar collects the details you enter there (usually your name and email) and shares them with me.
- How the site is used: pages visited, buttons clicked (such as opening the contact form or the audit tool), referring site, browser, device type and approximate country. This is anonymous: no cookies are set, nothing is stored on your device, IP addresses aren't kept in the analytics, and visits can't be linked to you. There are no session recordings on this site.
- Server logs: like any website, the hosting provider briefly records technical request data (including IP addresses) to run the site securely.
3. Why I use it, and the legal basis
- To reply to you and discuss working together: legal basis is taking steps at your request before a possible contract, and my legitimate interest in answering enquiries.
- To understand which pages are useful and improve the site: legal basis is my legitimate interest. Because the analytics is anonymous and cookie-free, no consent banner is needed.
- To keep the site secure: preventing spam and abuse of the contact form. Legal basis is my legitimate interest.
- To meet legal obligations: for example keeping records if we end up working together.
I don't sell your data, use it for advertising, or add you to a mailing list because you got in touch.
4. Who I share it with
These service providers process data on my behalf under data-processing agreements:
| Provider | What for | Where |
|---|---|---|
| Vercel | Hosting the website and handling the contact form | Global, including the United States |
| Brevo | Delivering contact-form messages to my inbox | EU (France) |
| Google Workspace | My email inbox, where your messages and replies are kept | Global, including the United States |
| PostHog | Cookie-free website analytics | EU |
| Google Calendar | Booking a call, only if you choose to | Global, including the United States |
Some of these process data in the United States. Those transfers are protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.
5. How long I keep it
- Messages and call details: up to 2 years after our last contact, unless we work together, in which case as long as needed for the project and Maltese tax and accounting rules.
- Analytics: up to 12 months.
- Server logs: a few days, as set by the hosting provider.
6. Your rights
Under the GDPR you can ask me to:
- give you a copy of your data;
- correct data that's wrong;
- delete your data, or restrict how I use it;
- stop using it for purposes based on my legitimate interests.
Email carl@theuxhive.com and I'll reply within one month. If you're unhappy with how I've handled your data, you can complain to Malta's Information and Data Protection Commissioner (idpc.org.mt) or the data-protection authority where you live.
7. Changes
I'll update this notice when the way this site handles data changes, and change the date at the top.