UCD Surf is a browsable design intelligence archive. We collect as little personal information as we can get away with. This page explains what we do collect, why, and what your rights are.
Who we are
UCD Surf is operated by Sprintpilot Limited, a company registered in the United Kingdom (“we”, “us”). We are the data controller for the personal information described on this page. You can contact us at ucdops@icloud.com.
What we collect, and why
Your email address — only if you subscribe.If you sign up for the weekly email, we collect your email address so we can send it to you. That's the only reason. The lawful basis is your consent: you give it by subscribing (with a confirmation step, so nobody can sign you up by mistake), and you can withdraw it at any time using the unsubscribe link in any email. When you unsubscribe, we stop sending and remove your address from the active list.
Anonymous usage analytics. We use privacy-focused analytics (Vercel Analytics) to understand things like which pages are read and roughly where visitors come from. This data is aggregated and anonymous — it does not identify you, and we do not use advertising trackers. The lawful basis is our legitimate interest in understanding whether the site is useful.
Server logs.Like almost every website, our hosting provider (Vercel) keeps short-lived technical logs (such as IP addresses and request details) for security and reliability. We don't use these to identify visitors.
What we don't do. No accounts, no advertising cookies, no selling or sharing of your information for marketing, no profiling. Your theme preference (light/dark) is stored in your own browser, not on our servers.
Who processes your data
We use a small number of service providers to run the site: Vercel (hosting and analytics) and Resend (sending the weekly email). They process data on our instructions. Some providers are based in the United States; where data leaves the UK, it is protected by recognised safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep things
Your email address: until you unsubscribe, or until we retire the newsletter. Analytics: held in aggregate form only. Server logs: retained briefly by our hosting provider on standard rotation.
Your rights
Under UK data protection law you can ask us to access, correct, delete, or stop using your personal information, and you can withdraw consent at any time. Email ucdops@icloud.com and we'll sort it. If you're not happy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes
If we change this policy, we'll update this page and the date at the top. If a change materially affects subscribers, we'll say so in the weekly email.