Privacy Policy

Who we are

This site is operated by Ultimation Direct (UMD Technical), a UK supplier of gates, barriers, turnstiles and access controls. Contact us at tech@ultimationdirect.co.uk.

What we collect

• Your name, company and email address, given when you request access.
• Your sign-in details, stored securely; passwords are never visible to us.
• The questions you ask the assistant and the answers returned.
• Any documents or screenshots you upload, including feedback attachments.

Our legal basis for processing

We process your data on the basis of legitimate interests — providing you with the technical support service you've requested access to — and, where relevant, to perform our contract with you or your employer. We do not use your data for marketing or advertising, and we do not carry out automated decision-making that produces legal or similarly significant effects on you.

Who else is involved

We use the following service providers to deliver this service. They process data on our instructions only, under their own data processing agreements:

• Lovable — the platform hosting this application and its infrastructure. Lovable publishes its subprocessor list and ISO 27001 / SOC 2 reports at trust.lovable.dev.
• Supabase — our database and authentication provider, hosted in the EU.
• Google (Gemini) — generates the assistant's answers via Lovable's AI infrastructure. Document search and matching is handled by Lovable's own text-matching service, not a third-party AI call.

A Data Processing Agreement covering these arrangements is available on request — email tech@ultimationdirect.co.uk.

International transfers

Your account and document data is held in the EU via Supabase. Questions sent to the assistant may be processed by Google's Gemini model as part of generating an answer; where this involves a transfer outside the UK/EU, appropriate safeguards (such as Standard Contractual Clauses) are in place through our provider agreements.

How long we keep it

Account details, questions, and uploads are kept while your account is active. When an account is closed, your data is automatically and permanently deleted. If you'd like your account and data deleted sooner, email us and we'll action it directly.

Cookies

We use only essential storage needed to keep you signed in. There are no advertising or tracking cookies.

Your rights

Under UK GDPR, you can ask for a copy of your data, have it corrected, or have it deleted. Email tech@ultimationdirect.co.uk and we will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been handled incorrectly.