// LEGAL

undek ("we", "us", "our") operates a full-stack digital studio and the client portal at this domain. This policy explains what information we collect when you request a quote, work with us on a project, or use the portal, and how we use, store and protect it.

1. Information we collect

Information you give us directly — your name, email address, phone number, company details, project descriptions, requirements, reference files or images you upload, and any messages you send us through a quote request, project chat, or email.

Account information — if you register for the client portal, we store your name, email address, and a securely hashed password. We never store your password in plain text.

Project & billing information — quotations, budgets, milestones, deliverables, and payment-related details associated with work we do for you.

Automatically collected information — standard technical data such as IP address, browser type, and pages visited, collected via server logs and, where used, cookies or similar technologies for authentication and session management.

2. How we use your information

We use the information we collect to:

• respond to quote requests and prepare quotations;
• deliver, manage, and communicate about projects, milestones, and deadlines;
• maintain your account and authenticate you in the client portal;
• send you service-related updates, and — only with your consent or an existing business relationship — occasional product or promotional emails;
• improve our services, troubleshoot issues, and keep the portal secure;
• meet our legal, accounting, and contractual obligations.

3. How we share your information

We do not sell your personal information. We only share it with:

• the undek team members and specialists directly assigned to your project, so they can do the work you've asked for;
• service providers who help us operate the portal (for example, hosting and email delivery), under obligations to protect your data;
• authorities, where required by law or to protect our legal rights.

4. Data retention

We retain project and account information for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account and associated personal data at any time, subject to records we're required to keep.

5. Your rights

Depending on where you're located, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.

6. Security

We use industry-standard measures — including encrypted password storage, HTTPS in transit, and access controls scoped by role — to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data appropriately for its sensitivity.

7. Cookies

We use essential cookies to keep you signed in and to remember preferences such as light/dark mode. We do not use third-party advertising trackers.

8. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "last updated" date above and, where appropriate, let you know directly.

9. Contact us

Questions about this policy or your data? Email us at hello@undek.com.