Privacy Policy

Who is responsible

UP-TO-DATE Web Design, established in Belgium, is the controller for personal data processed through UP-TO-DATE Catalog. Questions, requests or complaints: hello@uptodatewebdesign.be.

One distinction matters throughout: data about you, our customer, and data about your readers, which you collect using our tools. For the second kind you're the controller and we act on your instructions.

What we collect about you

• Account. Email address, name if you give one, a hashed password (or your UP-TO-DATE SSO identity), and your plan.
• Your content. Catalogs, uploaded images and PDFs, branding, and the address of any site you ask us to import.
• Billing. If you subscribe, Stripe processes your payment details — we never see your card. We store your Stripe customer id, subscription status and renewal date.
• Technical. Server logs and, for abuse prevention, a record that a given IP address made a given kind of request within a time window.

What we collect about your readers

When someone opens one of your catalogs we record a view: a random visitor id kept in their browser's local storage, a session id, time spent per page, the furthest page reached, the referring site, a coarse device type (mobile, tablet or desktop) and clicks on hotspots, products and downloads. We don't store their IP address against those views, and we don't use advertising or cross-site trackers.

If you switch on enquiries, lead capture or comments, whatever your readers type into those forms — name, email, phone, company, message — is stored for you and emailed to you. That data is yours; we only process it to deliver the feature.

Cookies and similar storage

• Sign-in cookie — keeps you logged in. Strictly necessary.
• Preview cookie — identifies a catalog you built before signing up, so it can be handed to your account when you do. Expires after seven days.
• Access cookies— remember that a reader entered a catalog's password or left their email at a gate, so they aren't asked again straight away.
• Local storage — the random visitor and session ids used for reading analytics, plus reader preferences like bookmarks.

None of these are used for advertising or sold to anyone.

Why we're allowed to process it

To perform our contract with you (running the service, billing), because we have a legitimate interest (keeping the service secure and working, understanding aggregate usage), or because you or your readers consented (for example, leaving an email at a gate). You can withdraw consent at any time.

Who else processes it

• Amazon Web Services — database and file storage, hosted in the EU.
• Resend — delivery of transactional email (enquiries, notifications, password resets).
• Stripe — subscription payments.
• DeepSeek— when we import a website, the readable text of the pages you asked us to read is sent to this AI provider so products can be identified. Your account details are not sent with it. If you'd rather that never happen, import by CSV or PDF instead.
• UP-TO-DATE accounts — if you sign in with UP-TO-DATE SSO.

Some of these providers operate outside the EU. Where that's the case we rely on the European Commission's standard contractual clauses or an equivalent safeguard.

How long we keep it

• Account and catalogs: until you delete them or close your account.
• Catalogs built before signing up: seven days, then deleted automatically.
• Reader analytics: kept while the catalog exists; how far back you can look depends on your plan.
• Abuse-prevention records: a couple of days.
• Invoices and tax records: as long as the law requires.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to processing, or ask us to hand it to another provider. Email hello@uptodatewebdesign.beand we'll respond within a month. You can also complain to your local data protection authority.

If your request is about data a customer of ours collected through their catalog, ask them — we'll pass the request along and help them act on it.

Security

Passwords are stored hashed, traffic is encrypted in transit, uploads go to access-controlled storage, and public catalogs can be locked with a password, kept private, or restricted to domains you name. No system is perfect; if a breach affects you we'll tell you and the regulator as the law requires.

Changes

We'll update this page when the service changes and note the date at the top. Material changes are announced by email or in the app. Our Terms of Service explain the rest of the relationship.