Privacy Policy
Effective date: July 17, 2026
This policy explains what personal data United We Transform processes when you visit this site, why, and the choices and rights you have. The short version: the interactive tools run entirely in your browser, so what you type into them never reaches our servers. The only personal data we process is Google Analytics usage data, together with hosting and security logs handled by our infrastructure provider.
Who we are
This site is provided by United We Transform, operated by Collaboration.Ai. For the purposes of the European Union General Data Protection Regulation (GDPR) and the United Kingdom GDPR, we are the data controller for the limited personal data described in this policy.
You can reach us about privacy, data protection, or any request under this policy at uwt@unitedwetransform.com. We read every message sent to that address and respond within the timelines the applicable law requires.
What we collect and what we do not
We keep collection deliberately small. Here is the complete picture.
Google Analytics usage data
When analytics is active and, in the EU and UK, when you have consented, Google Analytics 4 processes standard usage data through cookies. This includes your IP address (used to derive an approximate, city-level location and then not stored by us in identifiable form), your device and browser type, the pages you view, the referring page, and on-site interactions such as clicks and scrolling. We use this to understand how the site is used and to improve it. We have enabled IP anonymization.
What you type into the tools stays in your browser
No accounts, no ads, no sale of data
- There are no user accounts on this site, so we do not collect names, email addresses, or passwords to use it.
- We do not run advertising, we do not use advertising cookies, and we do not personalize ads.
- We do not sell or share personal information, as those terms are defined by the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
- If you email us, we receive your email address and whatever you choose to write, and we use it only to respond to you.
Cookies and similar technologies
When analytics is active and permitted, Google Analytics 4 sets a small number of first-party cookies. There are no advertising cookies on this site.
| Cookie | Purpose | Typical duration |
|---|---|---|
_ga | Distinguishes visitors so usage can be measured. | Up to 2 years |
_ga_<container> | Maintains the Google Analytics 4 session state. | Up to 2 years |
_gid | Distinguishes visitors for short-term measurement. | About 24 hours |
In the EU and UK, analytics cookies are set only after you accept them in the consent banner. You can withdraw consent at any time by clearing this site's cookies in your browser, by using your browser settings to block or delete cookies, or by installing the Google Analytics opt-out browser add-on. Reopening the site after clearing cookies presents the consent banner again so you can make a fresh choice.
Legal bases for processing
Under GDPR Article 6, our legal bases are as follows.
- Consent for analytics in the EU, the EEA, the UK, and Switzerland. Analytics runs in these regions only after you opt in, and you can withdraw consent at any time.
- Legitimate interests for analytics elsewhere, namely our interest in measuring and improving the site. Where we rely on legitimate interests you may object, as described below.
- Legitimate interests for keeping brief hosting and security logs to protect the site against abuse and to keep it available.
We do not carry out profiling or automated decision-making that produces legal or similarly significant effects.
Sharing and processors
We do not sell your personal information and we do not share it for cross-context behavioral advertising. We rely on two service providers, each acting as our processor under a data processing agreement.
- Google provides Google Analytics 4, processing the usage data described above on our behalf.
- Cloudflare provides hosting, content delivery, and security. In that role it processes limited technical data such as IP addresses in server and security logs.
We may also disclose information if the law requires it, or to establish, exercise, or defend legal claims.
International transfers
Our providers may process data in the United States and other countries. Where personal data is transferred out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards, including the European Commission Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework and its UK and Swiss extensions.
Data retention
Google Analytics data associated with cookies and identifiers is retained for 14 months and then deleted automatically. Hosting and security logs are kept briefly, only as long as needed for security and reliability, and then discarded. Because the tools run in your browser, we do not retain any of the content you enter into them. If you email us, we keep that correspondence only as long as needed to handle your request.
Your rights
Depending on where you live, you have rights over your personal data. We honor these rights and will not discriminate against you for exercising them.
EU, EEA, and UK (GDPR and UK GDPR)
- Access to the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data.
- Restriction of processing.
- Data portability.
- Objection to processing based on legitimate interests.
- Withdrawal of consent at any time, without affecting processing already carried out.
- Lodging a complaint with your local data protection supervisory authority.
California (CCPA/CPRA)
- The right to know what personal information we collect and how we use it.
- The right to delete personal information.
- The right to correct inaccurate personal information.
- The right to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of.
- The right not to receive discriminatory treatment for exercising these rights.
To exercise any of these rights, email us at uwt@unitedwetransform.com. We will verify your request as needed and respond within the timelines the applicable law sets.
Do Not Track and Global Privacy Control
Where applicable law requires it, we honor a Global Privacy Control signal and browser Do Not Track preferences as a request to opt out. Because we do not sell or share personal information and run no advertising, these signals do not change what we collect, but we treat them as a valid expression of your choice.
Children
This site is intended for a general, professional audience and is not directed to children. We do not knowingly collect personal data from children under 16 in the EU or under 13 in the United States. If you believe a child has provided us with personal data, contact us and we will delete it.
Security
We use technical and organizational measures appropriate to the limited data we process, including encryption in transit and the security controls provided by our infrastructure provider. No method of transmission or storage is perfectly secure, but keeping collection small is itself a core part of how we protect you.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the effective date at the top of the page. The current version is effective as of July 17, 2026. Material changes will be reflected here, so please check back periodically.
Questions about this policy? Email uwt@unitedwetransform.com.