Legal

Privacy notice

This notice explains how Udal processes personal data when you visit our site, use our services, or communicate with us.

  • UK-based operations
  • Data protection by design
  • Controller: Udal Ltd

Last updated: 9 September 2026

1. Who we are

Udal Ltd (“Udal”, “we”, “us”) is the controller for personal data collected through this website and our sovereign AI control plane services. We are registered in the United Kingdom. Our registered office address and company number should be confirmed with us before being published.

2. What data we collect

We collect only the personal data needed to operate our business and provide our services. This may include:

  • Contact details such as name, work email, job title and organisation.
  • Account and authentication data if you access our platform.
  • Technical data such as IP address, browser type and device information.
  • Communication records when you contact us for demos, support or security reviews.

3. How we use your data

We use personal data to respond to enquiries, provide access to the Udal platform, manage security and support, improve our services, and meet legal obligations. We do not sell personal data. Marketing communications are sent only where permitted and can be stopped at any time.

4. Lawful basis

We rely on lawful bases under UK GDPR, including contract performance, legitimate interests, consent and legal obligation. The basis depends on the context in which the data is collected and used.

5. Data sharing

We share personal data only with trusted service providers who help us operate our business, such as cloud hosting, analytics and communication platforms. All processors are bound by appropriate contractual protections. We may also disclose data where required by law or to protect our rights.

6. International transfers

Udal is designed to keep customer workloads and data inside the customer’s own environment. Where any personal data is transferred outside the UK, we use appropriate safeguards such as UK-approved standard contractual clauses.

7. Data retention

We keep personal data for as long as necessary for the purposes described, or as required by law. Account data is retained while the relationship continues and for a reasonable period afterwards in line with our retention schedule.

8. Your rights

Under UK data protection law, you have rights including access, correction, erasure, restriction, objection and data portability. To exercise these rights, contact us using the details below. We will respond within one month.

9. Security

We apply administrative, technical and physical safeguards to protect personal data. Details of our security controls are available in our Security & Data Protection Overview, which can be requested through the Contact page.

10. Contact us

For privacy questions or to contact our Data Protection Officer, please email privacy@udal.io or write to us at our registered office.