ueb.al is responsible for the information we handle about our partners, collaborators, research participants and website visitors. We do not sell, trade or rent this information. Access is limited to our team, contractors working on the relevant project and the services described below.
This policy explains how we use third-party services and handle information from website visits, research and job applications.
For questions about this policy or our practices, email info@ueb.al.
Last updated: 16 September 2026.
Our site and services
The website and its Inter fonts are hosted through GitHub Pages. The hosting service receives connection information when your browser requests these files.
The calculator, quiz and contact form save your selections and draft contact details in your browser’s local storage. Your appearance preference is also saved there when you change it. The contact form prepares an email or WhatsApp message; you must send it from that application to complete the inquiry. Use “Clear” in the saved summary or clear this site’s browser data to remove the locally stored details.
We use session storage to remember dismissed prompts during your visit and a service worker to cache public files for offline use. Clearing the site’s browser data removes these stored files and preferences.
Booking uses Cal.com, which loads when you choose to book a call. Email, WhatsApp and Cal.com handle messages or bookings through their own services. Their privacy policies apply to information you provide there:
This version of the website does not load an analytics script.
Research participants
Research is an important part of our work: it helps us understand people’s needs and build better products and services.
Asking for consent
All research participants are given a consent form that outlines what the research involves, what information will be recorded and how it will be used. If the participant agrees to take part, we ask them to sign the form. We scan signed consent forms and shred paper copies, then store consent forms on our Nextcloud server and keep these for 3 years.
At the moment, we do not conduct any research with people under the age of 18. We do not offer incentives to participants.
Using information from research
Research material is separated from any identifiable information, such as consent forms, while we are working with it.
Any notes we gather during research sessions are stored securely. Any digital files (like audio, photos and videos) are stored on Nextcloud and are only accessed by ueb.al’s team members involved in the research. At the end of the project, all notes and digital files are destroyed or deleted.
Sometimes we may publish quotes from research sessions. We only do this if we have specific consent from the participant and any personally identifiable information has been removed. We will only publish audio, photos and video from a research session if a participant has given consent and has signed a model release form.
Withdrawing your consent
Participants can withdraw their information from a project at any time. To do this, contact info@ueb.al.
Working at ueb.al
Only team members involved in the recruitment process have access to applications, CVs and emails we receive. We don’t collect any special category data or ask for any background checks as part of the application process.
When people join ueb.al, we request information about them needed for tax purposes. We hold information about their role and their professional development at ueb.al. Access to this information is controlled.
Things we don’t do
ueb.al doesn’t participate in the following data processing activities:
- Buying or selling marketing lists
- Entering into data sharing agreements with other organisations
- Telephone marketing
- Postal marketing
- CCTV surveillance
We don’t use “soft opt-in”, meaning you won’t receive any marketing communication from us unless you’ve specifically agreed to it.
Keeping data secure
We carefully choose our services and tools at ueb.al. It’s important that they follow good security practices, like HTTPS, two-factor authentication and the ability to set a strong password. We’ve reviewed the privacy policies and security practices of everything we use.
When a new team member joins ueb.al, we explain best practices for keeping their devices secure and maintaining the security of their online accounts.
Data breaches
In the event of a data breach, we notify Albania’s Information and Data Protection Commissioner (IDP), following their guidance.
Data transfer outside the EEA
We have reviewed the privacy policies of third-party services we use. They provide adequate protections when information is shared outside of the European Economic Area.
Reviewing how we use data
Every quarter, we review our documentation of the data we handle and third-party services we use. The review helps us check our practices and identify changes we need to make. We will update this document as necessary.
Your rights and getting in touch
Albanian data protection law and, where it applies, the GDPR give you rights over your data, including:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights related to automated decision-making, including profiling
To exercise any of these rights, contact us by email at info@ueb.al. You can find information specific to the services we use or our activities in the relevant sections of this document. If you are not satisfied with our response, you can contact the Albanian IDP. If you are in the EU, you can also contact your local data protection authority.