UKNav Logo

Privacy Policy

Last Updated: May 2026

Data Controller: Сulturalinks
Contact Email: uknav@hrnexus.ai

1. Introduction

Welcome to UKNav. We respect your privacy and are committed to protecting your personal data in accordance with the UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018. This policy informs you how we look after your personal data when you visit our website and tells you about your privacy rights.

2. The Data We Collect

We collect and process the following personal information to provide our services:

  • Identity & Contact Data: Your email address (provided during registration or via contact forms).
  • Pathway Personalization Data: To generate your custom onboarding plan, we collect details you provide in our questionnaire, including:
    • Relocation Details: Visa type, planned arrival date to the UK.
    • Family & Household: Marital status, whether you have children (to identify schooling needs), and information about pets.
  • Consultation & Booking Data: Email, booking times, meeting links, and optional notes provided via our scheduling integration.
  • Authentication Data: Identifiers provided by Google or Facebook when using Social Auth.
  • Security & Technical Data: IP addresses, browser types, and signals processed via Cloudflare Turnstile to prevent automated abuse.

3. Storage, Infrastructure, and Third-Party Processors

  • Database: Your profile, progress data, and consultation metadata are stored on secure servers located within the United Kingdom (Supabase).
  • Scheduling & Consultations (Cal.id): We use Cal.id as a third-party scheduling service. When you book a meeting, your scheduling details are processed and stored directly by Cal.id on their secure servers. Our own database only retains essential booking metadata (such as your email, appointment time, and notes) necessary to manage your appointments. You can review Cal.id’s privacy practices at cal.id/privacy-policy.
  • Email Correspondence: Emails sent to us are managed via Google Workspace. We delete these emails once the inquiry is resolved or after one (1) year of inactivity.
  • Email Delivery: We use MailerLite to process outgoing system notifications and subscriptions. MailerLite may log metadata about these transmissions for security purposes.
  • Hosting: Our application is hosted on Vercel. While Vercel handles the delivery of the site, it does not serve as a permanent database for your personal information.

4. AI Disclosure and Third-Party Sub-processors

We integrate Artificial Intelligence tools, including services provided by OpenAI (e.g., via platform.openai.com), to generate content, assist with inquiries, and provide information.

  • Data Processing & Retention: When you interact with our AI features, the text of your queries or messages may be processed by OpenAI. OpenAI retains API data (prompts and completions) for a maximum of 30 days strictly for abuse and misuse monitoring purposes, after which it is deleted.
  • Model Training: We use enterprise/API tiers of these AI services. Your data, queries, and messages are NOT used by OpenAI to train their foundational AI models.
  • Data Minimization: We strongly advise you not to submit sensitive personal information (such as financial details, passport numbers, or health data) into any AI-powered chat or prompt boxes on our platform.

5. Cookies and Analytics

We use cookies to improve your experience and protect our service:

  • Functional Cookies: Essential for site operations (e.g., keeping you logged in). This includes Cloudflare Turnstile, which is necessary for bot protection.
  • Analytical Cookies: We use Google Analytics (and potentially Facebook Pixel) to understand how users interact with our site.
  • Opt-Out: You can manage your preferences or opt-out of non-essential cookies via our Cookie Consent Banner.

6. Age Requirement

UKNav is intended for individuals aged 18 and over. By registering an account, you confirm that you meet this age requirement. We do not knowingly collect or store data from minors.

7. Your Data Rights

Under the UK GDPR, you have the following rights:

  • Right of Access: You can request a copy of the data we hold about you.
  • Right to Portability: You can export your user data directly from your account settings.
  • Right to Erasure: If you delete your profile, we erase your personal data (including consultation records stored on our servers) immediately and permanently from our active production database. (Note: Data processed by third parties like Cal.id may require a separate deletion request in accordance with their policies).

8. Changes to This Policy

We may update this policy from time to time to reflect changes in our services (such as the addition of payment providers). We will notify users of any significant updates.

9. Contact Us

For any questions regarding this policy or your data, please contact:

Culturalinks

Email: uknav@hrnexus.ai