Legal
Privacy policy
This notice explains what information utemply uses, why we use it, who receives it, and the choices and rights available to you.
Who controls your information
utemply operates the service in the United Kingdom and is the controller for account, billing, support and marketing information. Customers decide what business information and content they place into websites. Contact us at hello@utemply.com.
Information we collect
- Account information, including name, email address, verification status and security records.
- Business briefs, services, locations, contact details and instructions submitted to generate a website.
- Content and files you upload, including logos and images, plus generated text, images and website versions.
- Payment and subscription references, status, discounts and transaction records. PayPal processes card or funding details; utemply does not receive complete payment credentials.
- Technical and security information such as IP address, browser, device signals, timestamps, login events and abuse-prevention records.
- Support communications and optional analytics information, but only where analytics consent has been given.
Why we use it and our legal bases
| Purpose | Typical basis |
|---|---|
| Create, edit, export and host websites; administer accounts and purchases | Contract, or steps requested before entering a contract |
| Prevent fraud, abuse, duplicate accounts and excessive AI spend; secure and monitor the service | Legitimate interests in protecting users, utemply and its suppliers |
| Keep tax, accounting, payment and dispute records | Legal obligation and legitimate interests |
| Answer support requests and improve reliability | Contract and legitimate interests |
| Google Analytics and Clicky measurement | Consent, which may be withdrawn at any time |
Your right to object: where processing relies on legitimate interests, you may object by emailing us. We will assess the request and stop unless there are compelling legitimate grounds or the information is needed for legal claims.
AI processing and generated content
Business briefs and relevant instructions are sent to external AI providers to generate or revise website text and images. Do not submit special-category information, confidential third-party material or personal information that is unnecessary for the website. AI output may be inaccurate, resemble existing material or be unsuitable; customers must review it before publication. utemply minimises retained AI request data and does not retain image base64 responses after files are processed.
Who receives information
Information may be processed by infrastructure and hosting providers, email providers, OpenAI or other configured AI providers, PayPal for payments, security and anti-bot providers, and Google Analytics and Clicky only following consent. Professional advisers, authorities or a buyer of the business may receive information where lawful and necessary. We do not sell personal information.
Some providers may process information outside the UK. Where required, transfers rely on UK adequacy regulations or appropriate contractual safeguards. Contact us for further information about applicable safeguards.
Retention and deletion
- Free previews ordinarily expire after the period displayed in the application.
- Deleted accounts and sites may remain recoverable for 30 days before permanent purge.
- Abandoned temporary uploads and exports are ordinarily removed within 24 hours.
- AI generation metadata is ordinarily retained for 30 days after unnecessary prompt/output content is minimised.
- Operational logs and failed-job records are ordinarily retained for 7 to 14 days.
- Financial, fraud, refund and tax records may be retained for up to seven years where required.
- Backups rotate on a separate schedule and deleted information may persist until the relevant encrypted backup expires.
We may retain information longer where necessary for disputes, security investigations or legal obligations.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw analytics consent through “Cookie settings” without affecting earlier lawful processing. We may need to verify identity. You may complain to the UK Information Commissioner’s Office at ico.org.uk.
Security and children
We use access controls, rate limits, validation, restricted uploads, logging and other safeguards. No online system is completely secure. utemply is a business service and is not directed to children under 18.
Changes and contact
We may update this notice when the service or law changes. Material changes will be highlighted appropriately. Questions and rights requests can be sent to hello@utemply.com.