Privacy Policy

1.1 Data Controller

For its own website and business operations, UXArea is generally responsible for determining the purposes and means of processing personal data. For certain enterprise engagements, UXArea may process data on behalf of a client under that client's instructions, in which case the applicable agreement will define the respective roles.

1.2 Personal Data We May Collect

• Identification and contact data, including name, email, phone number, country, company, job title, and business contact details.
• Training data, including course registrations, attendance, learning progress, assessments, certificate eligibility, feedback, and professional background.
• Client and project data, including project requirements, product information, design materials, meeting information, feedback, and information needed to deliver consulting or managed talent services.
• Commercial data, including enquiries, quotations, contracts, invoices, payment status, purchase history, and support correspondence.
• Talent and application data, including CVs, portfolios, skills, experience, education, interview information, and information needed to assess or manage design professionals.
• Technical and usage data, including IP address, device/browser information, pages viewed, referring source, approximate location, log data, and website interactions.
• Marketing preferences and communications data.
• Information voluntarily provided through forms, email, calls, meetings, surveys, or other communications.

1.3 Sensitive Data

UXArea does not generally require sensitive personal data for ordinary website use or course registration. If sensitive or high-risk data becomes necessary for a specific service, UXArea will process it only where permitted by applicable law and with any required consent, safeguards, or authorization.

Please do not submit sensitive personal data through general website forms unless UXArea specifically requests it for a legitimate purpose.

1.4 How We Collect Data

• Directly from you through forms, registrations, enquiries, contracts, emails, calls, meetings, training activities, and service delivery.
• Automatically through website logs, cookies, analytics, and similar technologies, subject to applicable consent requirements.
• From your employer, organization, or authorized representative when they purchase or manage a UXArea service for you.
• From service providers, professional advisers, or other lawful sources where necessary for service delivery, security, compliance, or business administration.

1.5 Purposes of Processing

• Provide and administer premium UX/UI/Product Design training, professional consulting, and managed design talent services.
• Process registrations, enquiries, proposals, contracts, bookings, payments, invoices, certificates, and service administration.
• Match and assign design professionals to client requirements and manage the related service relationship.
• Provide customer support and communicate about services, schedules, changes, deliverables, payments, and account matters.
• Send marketing communications where permitted and where required consent has been obtained.
• Operate, secure, troubleshoot, analyze, and improve the website and services.
• Prevent fraud, abuse, unauthorized access, and security or compliance risks.
• Comply with legal, regulatory, judicial, tax, accounting, and other lawful obligations.

1.6 Lawful Processing and Consent

UXArea will process personal data on a lawful basis available under applicable Jordanian law. Depending on the activity, this may include prior consent, performance of a contract or steps requested before entering a contract, compliance with a legal obligation, or another lawful basis recognized by applicable law.

Where processing is based on consent, you may withdraw consent through the available mechanism or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

1.7 Sharing and Disclosure

UXArea may share personal data with trusted providers and professional advisers where necessary to operate the business or provide services. These may include hosting providers, CRM systems, learning platforms, payment processors, email providers, analytics providers, scheduling tools, cloud-storage providers, professional advisers, employment/payroll providers, and technology or AI providers.

For managed design talent, information may be shared with the relevant client organization where necessary for candidate selection, onboarding, access management, collaboration, performance management, assignment delivery, and related administration. Information should be limited to what is reasonably necessary.

UXArea may also disclose information when required by law or lawful authority, to protect rights or safety, to investigate fraud or security incidents, or in connection with a merger, restructuring, financing, or transfer of business assets.

1.8 Client Data and Data Processing

Where UXArea processes personal data on behalf of an enterprise client under that client's instructions, the applicable client agreement may define UXArea as a processor or service provider for that data. UXArea will process such data according to documented instructions and applicable contractual and legal requirements.

Enterprise clients are responsible for ensuring that they have an appropriate legal basis and notices for personal data they provide to UXArea, unless the parties agree otherwise.

1.9 International Transfers

UXArea may use service providers that process data outside Jordan. Where personal data is transferred or made accessible internationally, UXArea will apply safeguards, approvals, and contractual measures required by applicable Jordanian law and the relevant agreement.

International processing may occur when necessary to deliver services through global cloud, learning, payment, communication, analytics, design, or AI providers.

1.10 Retention

UXArea retains personal data only for as long as reasonably necessary for the relevant purpose, contractual relationship, legitimate business need, dispute resolution, security, or legal and regulatory requirements.

Retention periods may differ for training records, certificates, client contracts, invoices, candidate records, marketing preferences, support communications, and technical logs. When data is no longer required, UXArea will delete, anonymize, or securely dispose of it as appropriate.

1.11 Security

UXArea uses reasonable technical and organizational measures designed to protect personal data from unauthorized access, loss, misuse, alteration, disclosure, or destruction. Measures may include access controls, authentication, secure cloud services, encryption where appropriate, backups, role-based permissions, monitoring, and internal procedures.

No internet transmission or storage method is completely secure. UXArea cannot guarantee absolute security, but will respond to data incidents in accordance with applicable law and contractual requirements.

1.12 Your Rights

Subject to applicable law and lawful limitations, you may have rights relating to access to personal data, correction or updating of inaccurate data, withdrawal of consent, objection or restriction to certain processing, erasure or anonymization where legally available, and other rights established under Jordanian data-protection law.

To exercise a privacy right, contact hello@uxarea.com. We may need to verify your identity before responding. Requests will be handled according to applicable legal procedures and timeframes.

1.13 Complaints

If you have a concern about our processing, please contact us first at hello@uxarea.com. The Jordanian Personal Data Protection Directorate provides a process for privacy complaints and indicates that complaints should first be submitted to the relevant entity before escalation where appropriate.

1.14 Marketing Communications

You may opt out of marketing communications at any time by using the unsubscribe mechanism or contacting us. Essential service, contractual, security, billing, and administrative communications may still be sent where necessary.

UXArea does not intend to sell personal data to third parties.

1.15 AI and Automated Processing

UXArea may use AI-enabled tools in design workflows, training development, research support, documentation, productivity, analytics, and internal operations. AI outputs are subject to human review where appropriate.

We will not intentionally place confidential client information or sensitive personal data into public or consumer AI tools unless authorized and protected by appropriate controls or otherwise permitted by law and contract.

UXArea does not intend to make solely automated decisions through the website that produce legal or similarly significant effects on individuals. If such processing is introduced, applicable notice, consent, human-review, and rights requirements will be addressed.

1.16 Children

UXArea's professional services and courses are primarily intended for adults and professional users. We do not knowingly seek to collect children's personal data through general website forms where such collection would be unlawful.

1.17 Third-Party Links

The website may link to third-party sites and services. Their privacy practices are governed by their own policies. UXArea is not responsible for third-party privacy practices outside our control.

1.18 Changes

We may update this Policy when our services, technology, processing activities, or legal requirements change. The current version will be published with an updated effective date.

1.19 Contact