Legal
Privacy Policy
Last updated · 9 July 2026
This page is maintained by Ushii Ltd and describes how ushii.org.uk works today. It is written in plain terms, meets our UK GDPR obligations and is drafted to cover clients and visitors in the UAE, Dubai and the wider Middle East. It is not a certification and is not legal advice.
Who we are
This website, ushii.org.uk, is operated by Ushii Ltd (company number 15667131), registered office 91 St. Marks Road, Enfield, England, EN1 1BJ. We are the data controller for personal information you submit through the site. General enquiries and data protection requests can be sent to info@ushii.uk or through the contact page.
Scope of this notice
This notice covers everyone who visits the site or enquires with us, wherever they are based. It is written to comply with the UK General Data Protection Regulation and the Data Protection Act 2018, and it is written so it also meets the transparency obligations of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL), the DIFC Data Protection Law No. 5 of 2020 and the ADGM Data Protection Regulations 2021, for visitors and clients in the UAE, Dubai and the wider Middle East.
Personal data we collect
Only what you choose to send us through the contact form: title, first and last name, country code, phone number, email address, postcode, the disciplines you're interested in, and any message you write. We also process technical data your browser sends automatically (IP address, user agent, request time) which our hosting provider records in server logs for security and diagnostics. We do not run behavioural analytics, advertising trackers or fingerprinting on this site.
Legal bases we rely on
Under the UK GDPR we rely on: consent (the agreement checkbox on the contact form); taking steps at your request to enter into a contract (responding to a project enquiry); legitimate interests (running the site securely and replying to business enquiries); and legal obligation (keeping tax and accounting records). For visitors in the UAE, Dubai and the wider Middle East we rely on the equivalent bases in the UAE PDPL, the DIFC Data Protection Law and the ADGM Data Protection Regulations, primarily your consent and the steps needed to respond to your enquiry.
Why we use your information
Solely to reply to your enquiry, discuss a potential project, deliver work you engage us for, keep the records the law requires, and secure the site. We do not use your details for marketing and we do not add you to a mailing list unless you specifically ask us to.
How long we keep it
Enquiry details are kept for up to 12 months from your last contact with us, then permanently deleted. If your enquiry becomes a project, related records are retained for the length of the contract and for a further 7 years after completion to satisfy HMRC, construction warranty and professional liability obligations. Server security logs are retained for up to 90 days.
Who we share it with
Only the parties strictly necessary to run the business: our website hosting and email infrastructure providers, our professional advisors (accountants, insurers, legal), and any sub-contractors or specialist consultants engaged on a live project (bound by confidentiality). We disclose personal information to regulators, law enforcement or courts only where we are legally required to. We never sell or trade personal information.
International transfers
Our primary operations are in the United Kingdom. Where personal data is transferred outside the UK — for example to an email or hosting provider processing data in the EEA or United States — we rely on the UK's adequacy decisions where they apply, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate safeguards. For personal data received from the UAE, transfers outside the UAE are made in line with Articles 22 to 23 of the UAE PDPL, and equivalent provisions of the DIFC and ADGM regimes where they apply. On request we can tell you the specific safeguard used for a given transfer.
Cookies and tracking
We use only strictly necessary cookies and local browser storage required for the site to function and to remember that you have dismissed our notice bar. No analytics, no advertising, no cross-site tracking. See our cookie policy for the full list and how to control cookies in your browser.
Security
The site is served over HTTPS with TLS in transit. Access to enquiry data is restricted to Ushii Ltd staff who need it, and any sub-processor we use is contracted to appropriate technical and organisational measures. No system is perfectly secure — if you become aware of a vulnerability affecting our site or your data, please tell us so we can investigate.
Your rights (UK)
Under the UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal information, to withdraw consent at any time, to receive a portable copy, and to lodge a complaint with the Information Commissioner's Office (ico.org.uk). To exercise any of these rights, email info@ushii.uk and we will respond within one month.
Your rights (UAE, DIFC and ADGM)
If you are in the UAE and your data is processed under the PDPL, you have equivalent rights to be informed, to access, to rectify, to erase, to restrict processing, to portability, to object and to withdraw consent, and you may complain to the UAE Data Office (uaepdpl.gov.ae). If your data is processed under the DIFC Data Protection Law you may complain to the DIFC Commissioner of Data Protection (difc.ae). If your data is processed under the ADGM regime you may complain to the ADGM Office of Data Protection (adgm.com).
Automated decisions and profiling
We do not use automated decision-making or profiling of any kind.
Children
The site is not directed at children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided data to us, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The "last updated" date above will always reflect the current version. Material changes will be flagged on the site homepage or notified to active clients directly.
Questions