Privacy Policy
Questions about your data? We’re here to help.
Email privacy@u-nego.comU-NEGO operates www.u-nego.com (the “Service”). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Service, and sets out your rights under the General Data Protection Regulation (GDPR) and applicable data protection law.
Contents
1. Who We Are
U-NEGO is a management consulting firm specialising in IT and Telecom contract management. We are the data controller for personal data collected through this Site.
2. What Data We Collect
2.1 Personal Data
When you interact with our Service (e.g., submitting a contact form, downloading a guide, or booking a consultation), we may collect:
- Name and surname
- Professional email address
- Phone number
- Company name and job title
- Business address
- Any information you voluntarily provide in free-text fields
2.2 Usage Data
We automatically collect certain technical information when you visit the Site, including your IP address, browser type and version, pages visited, time and date of visits, time spent on pages, and unique device identifiers.
2.3 Cookies & Tracking Technologies
We use cookies and similar tracking technologies. Full details are set out in our Cookie Policy.
3. How We Use Your Data & Legal Basis
We process your personal data only where we have a lawful basis under GDPR Article 6. The table below sets out each purpose, the legal basis we rely on, and the conditions that apply.
| Processing Purpose | Legal Basis (GDPR Art. 6) | Conditions & Notes |
|---|---|---|
| To respond to enquiries and provide our services | Art. 6(1)(b) — performance of a contract or pre-contractual steps | Applies when you contact us via the contact form or book a consultation. Processing is necessary to respond to your request. |
| To send you our newsletter and requested resources | Art. 6(1)(a) — consent | Applies only where you have ticked the explicit consent checkboxes on our newsletter sign-up form. You may withdraw consent at any time by clicking “unsubscribe” in any email or by contacting privacy@u-nego.com. |
| To send marketing communications to contacts who have submitted our contact form | Art. 6(1)(a) — consent | Applies only where you have ticked the consent checkboxes on our contact form. You may withdraw consent at any time by clicking “unsubscribe” in any email or by contacting privacy@u-nego.com |
| To improve and maintain our website | Art. 6(1)(f) — legitimate interests | We have a legitimate interest in ensuring our website functions correctly and in improving the user experience for visitors. Processing is limited to what is necessary for this purpose. |
| To analyse website usage via Google Analytics & HubSpot | Art. 6(1)(a) — consent (via cookie banner) | Tracking cookies are only placed after you accept them via our cookie consent banner. You may change your preferences at any time via the cookie settings link in the footer. |
| To comply with legal obligations | Art. 6(1)(c) — legal obligation | For example, retaining financial records as required by applicable law. |
| To protect the security of our Site | Art. 6(1)(f) — legitimate interests | We have a legitimate interest in protecting our website and systems against fraud, unauthorised access, and other security threats. Processing is limited to what is strictly necessary for this purpose. |
Your right to object: Where we rely on legitimate interests (Art. 6(1)(f)) as our legal basis, you have the right to object to this processing at any time. Contact us at privacy@u-nego.com. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
4. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected:
- Contact and enquiry data: 3 years from last contact
- Marketing consent records: until consent is withdrawn + 1 year
- Website usage data (Google Analytics): 26 months
- HubSpot CRM contact records: 3 years from last interaction, or until deletion is requested
- Financial and contractual records: 7 years (legal requirement)
You may request deletion of your data at any time — see Section 9.
5. International Data Transfers
Some of our third-party service providers (including Google and HubSpot) may process data outside the European Economic Area, including in the United States. Where such transfers occur, we ensure adequate safeguards are in place, such as the EU Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.
6. Disclosure of Data
We do not sell your personal data. We may disclose your personal data only in the following limited circumstances:
- To comply with a legal obligation or respond to lawful requests by public authorities
- To protect and defend the rights or property of U-NEGO
- To prevent or investigate possible wrongdoing in connection with the Service
- To protect the personal safety of users of the Service or the public
- To authorised service providers who process data on our behalf (see Section 7)
7. Service Providers & Third Parties
We use the following third-party providers who may have access to your personal data solely to perform services on our behalf, under appropriate data processing agreements:
Analytics
- Google Analytics — website usage analytics. Privacy policy ↗
- Statcounter — additional traffic analysis. Privacy policy ↗
Marketing Automation & CRM
- HubSpot — CRM, email marketing, and lead tracking. We use HubSpot to manage contact records, track website interactions, and send marketing communications where you have consented. Privacy policy ↗
Website Infrastructure
- WordPress — website platform
- Wordfence — security and fraud prevention
Embedded Content
- Google Fonts, YouTube, LinkedIn, Instagram, X (Twitter) — these services may set their own cookies when their content is loaded on our Site
8. Security
We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal data. However, no method of transmission over the Internet is 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals in accordance with applicable law.
9. Your Rights
Under GDPR, you have the following rights in relation to your personal data:
Right of access — obtain a copy of the personal data we hold about you
Right to rectification — have inaccurate or incomplete data corrected
Right to erasure — request deletion of your data (‘right to be forgotten’)
Right to restriction — limit how we process your data in certain circumstances
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at privacy@u-nego.com. We will respond within 30 days. We may need to verify your identity before processing your request.
10. Children’s Privacy
Our Service is directed at business professionals and does not address anyone under the age of 18. We do not knowingly collect personal data from minors. If you become aware that a child has provided us with personal data, please contact us and we will delete it promptly.
11. Links to Other Sites
Our Service may contain links to third-party websites. We have no control over and assume no responsibility for their content, privacy policies, or practices. We strongly advise you to review the privacy policy of every site you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by posting a prominent notice on the Site and/or by email, prior to the change becoming effective. The “Last updated” date at the top of this page will always reflect the most recent revision.
13. Contact Us & Supervisory Authority
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
If you are not satisfied with our response, you have the right to lodge a complaint with the competent data protection supervisory authority.
For EU/EEA residents: you may contact your local national data protection authority. A full list is available at edpb.europa.eu ↗
Ready to take control of your IT contracts?
Book a free consultation →U-NEGO helps global B2B companies turn IT and Telecom supplier contracts into strategic assets.