Privacy Policy | uni-uk.ai

1. Introduction

Welcome to uni-uk.ai. We are committed to protecting your privacy and ensuring transparency about how we handle data. This privacy policy explains our practices regarding data collection, use, and protection in compliance with the General Data Protection Regulation (GDPR) and UK data protection laws.

2. Data Controller

uni-uk.ai operates as the data controller for any personal data processed through this website. If you have any questions about this privacy policy or our data practices, please contact us through the website.

3. Personal Data We Collect

We are committed to minimizing data collection. The personal data we may process includes:

Chat Conversations

When you use our AI chat feature, your messages are processed temporarily to provide university recommendations. We do not store your chat history or personal information from conversations.Conversations are processed in real-time and are not retained after your session ends.

Analytics Data

We use Google Analytics to understand how visitors use our site. This includes anonymized data such as:

Pages visited and time spent on pages
Browser type and device information
General geographic location (country/city level)
Referral sources

We have configured Google Analytics to anonymize IP addresses and do not collect personally identifiable information through analytics.

Technical Data

Our hosting provider (Vercel) may collect technical data such as IP addresses in server logs for security and performance purposes. This data is automatically deleted after a short retention period.

4. Legal Basis for Processing

Under GDPR, we process data based on the following legal grounds:

Legitimate Interests: We process analytics data to improve our service and understand user needs
Consent: By using our website and chat feature, you consent to the processing described in this policy
Legal Obligation: We may process data to comply with legal requirements

5. How We Use Your Data

We use collected data solely for:

Providing university recommendations through our AI chat service
Improving website functionality and user experience
Understanding usage patterns through anonymized analytics
Ensuring website security and preventing abuse

We do not: Sell your data, share it with third parties for marketing purposes, or use it for any purpose other than those listed above.

6. Third-Party Services

We use the following third-party services that may process data:

Google Analytics

For anonymized usage analytics. View their privacy policy.

Google AdSense

For displaying relevant advertisements. Ads are contextual and based on page content, not personal data. View their privacy policy.

OpenAI

Powers our AI chat feature. Your chat messages are processed by OpenAI's API but are not used to train their models. View their privacy policy.

Vercel

Our hosting provider. May collect technical logs for security purposes. View their privacy policy.

7. Cookies and Tracking

We use minimal cookies and tracking technologies:

Essential Cookies: Required for website functionality
Analytics Cookies: Google Analytics cookies for understanding site usage (anonymized)
Advertising Cookies: Google AdSense cookies for serving relevant ads

You can control cookie preferences through your browser settings. Note that disabling cookies may affect website functionality.

8. Data Retention

Chat Data: Not retained - processed in real-time only
Analytics Data: Retained for 26 months (Google Analytics default)
Server Logs: Automatically deleted after 30 days

9. Your Rights Under GDPR

As a user in the UK or EU, you have the following rights:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Request correction of inaccurate personal data

Right to Erasure

Request deletion of your personal data

Right to Restrict Processing

Request limitation of how we process your data

Right to Data Portability

Request your data in a portable format

Right to Object

Object to processing of your personal data

Right to Withdraw Consent

Withdraw consent for data processing at any time

Given that we collect minimal personal data and do not retain chat histories, there is typically very little personal data to access or delete. However, if you wish to exercise any of these rights, please contact us.

10. Data Security

We implement appropriate technical and organizational measures to protect your data:

HTTPS encryption for all data transmission
Secure hosting infrastructure with Vercel
API keys and sensitive data stored securely with environment variables
Regular security updates and monitoring
Minimal data collection principle - we only collect what's necessary

11. International Data Transfers

Some of our service providers (Google, OpenAI) may process data outside the UK/EU. These transfers are protected by:

Standard Contractual Clauses (SCCs)
Adequacy decisions where applicable
Appropriate safeguards as required by GDPR

12. Children's Privacy

Our service is intended for prospective university students and may be used by individuals under 18. We do not knowingly collect personal information from children. The minimal data we process (anonymized analytics) does not identify individuals. Parents or guardians who believe their child has used our chat service should contact us.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

14. Contact Us & Complaints

If you have questions about this privacy policy or wish to exercise your data protection rights, please contact us through the website.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues:

Information Commissioner's Office
Website: ico.org.uk
Phone: 0303 123 1113

15. Advertising & Third-Party Services

We use Ezoic and other third-party advertising services to display ads on our website. These services may use cookies and similar technologies to collect information about your browsing activity.

Summary

In simple terms: We collect minimal data, don't store your chat conversations, use anonymized analytics to improve the site, and never sell your data. We're committed to your privacy and comply with GDPR regulations.