Legal

Privacy Policy

This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it.

Last updated 30 July 2026

Who we are

UXBOX Company Limited (“UXBOX”, “we”, “us”) is a product design studio registered in Vietnam at 85 Le Van Huan, Phuong Tan Binh, Ho Chi Minh City, Vietnam, company number 0318496164.

We are the data controller for the personal data described in this policy. For any question about it, contact us at hello@uxbox.org.

Information we collect

We collect personal data in two circumstances.

When you contact us. Our contact form collects your name, company name, email address and the project type you select. If you email us directly, we hold the information contained in your message.

When you browse the site. If you consent to analytics, we collect information about your visit, including pages viewed, approximate location derived from your IP address, referring website, and device and browser information.

We do not collect special category data such as health, biometric or political information, and we ask that you do not send it to us.

How we use it, and our legal basis

We process personal data on the following bases:

  • To respond to your enquiry and discuss a possible engagement — our legitimate interests, and steps taken at your request prior to entering a contract.
  • To deliver services you have engaged us to provide — performance of a contract.
  • To measure how the site is used — consent, which you may withdraw at any time.
  • To meet accounting and tax obligations — compliance with a legal obligation.

We do not sell personal data, and we do not use it for advertising or profiling.

Analytics and cookies

No analytics cookies are set unless you consent to them. No analytics script is loaded, and no identifier is created, before consent is given.

Where you consent, we use Google Analytics and Microsoft Bing analytics to measure site traffic. These services are provided by Google LLC and Microsoft Corporation, who act as processors on our behalf and may transfer data outside your country, including to the United States, subject to the safeguards set out in their terms.

You can review or change your choice at any time on our cookie settings page. Changes take effect immediately.

Who we share it with

Personal data may be shared with:

  • Our hosting and email providers, so that the site operates and messages reach us.
  • The analytics providers named above, where you have consented.
  • Our accountants and professional advisers, where required.
  • Public authorities, where we are legally required to disclose it.

We do not share personal data with any other third party, and we do not disclose the contents of client work or enquiries.

How long we keep it

Enquiries that do not result in an engagement are deleted after 24 months.

Records relating to completed work — contracts, invoices and related correspondence — are retained for as long as we operate, to meet accounting, tax and audit obligations. Where those records contain personal data that is no longer required for that purpose, we remove it.

Analytics data is retained for 14 months, the period configured with the provider.

Your rights

Subject to your jurisdiction, you may have the right to request access to your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing carried out before it.

To exercise any of these rights, contact hello@uxbox.org. We will respond within one month. There is no charge.

If you believe we have not handled your personal data properly, you may lodge a complaint with the data protection authority in your country of residence.

Security

The site is served over HTTPS, and access to systems containing enquiries is restricted to those who require it. No system can be guaranteed secure. Where a breach affects your rights, we will notify you and the relevant authority as required by law.

Changes to this policy

We update this policy when our practices change, and revise the date shown above. This version is dated 30 July 2026.