Privacy Policy

Uprising Agency
Last updated: 12 June 2025

1. Introduction

Uprising Agency (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://uprising.agency/ and use our services.

This policy applies to all personal data processing activities carried out by Uprising Agency in accordance with:

• European Union: General Data Protection Regulation (GDPR)
• United Kingdom: UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
• United States: California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and other applicable state privacy laws
• International: Other applicable data protection laws in jurisdictions where we operate

2. Data Controller Information

Company Name: Uprising Agency
Website: https://uprising.agency/
Email: service@uprising.agency
Address: Aleksei Belikov, Solec 24 / 034-1, 00-403, Warsaw, Poland
EU Representative: [To be appointed if required]
UK Representative: [To be appointed if required]

3. Information We Collect

3.1 Information You Provide to Us

• Contact Information: Name, email address, phone number, company name
• Project Information: Details about your requirements, preferences, and specifications
• Communication Data: Records of our correspondence and communications
• Payment Information: Billing details and transaction records (processed securely through third-
  party payment processors)

3.2 Information Automatically Collected

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage Data: Information about how you use our website and services
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity and store certain information (see our Cookie Policy)

3.3 Information We Do Not Collect

We do not knowingly collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health information, or criminal history unless specifically required for a project and with your explicit consent.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

For EEA and UK Residents:

• Contract: Processing necessary for the performance of a contract with you
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Where you have given clear consent for us to process your personal data
• Legal Obligation: Processing necessary to comply with legal obligations

For US Residents:

• We process your personal data based on:
• Your Consent: With your permission for specific purposes
• Contract Performance: To fulfill our services to you
• Business Purposes: As described in applicable privacy laws

5. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Process and manage your projects
• Communicate with you about services, updates, and promotional materials
• Improve, personalise, and expand our services
• Understand and analyse how you use our services
• Develop new products, services, features, and functionality
• Process transactions and send related information
• Send administrative information and updates
• Respond to inquiries and provide customer support
• Comply with legal obligations and protect our legal rights

6. Sale of Personal Information

We do not sell your personal information to third parties for monetary consideration. We do not

share your personal information for cross-context behavioral advertising.

7. Disclosure of Your Information

We may share your information in the following circumstances:

7.1 Service Providers

We may share your data with third-party service providers who assist us in operating our business,

Including:

• Hosting and IT service providers
• Payment processors
• Professional advisors (lawyers, accountants, consultants)
• Marketing and analytics providers

7.2 Legal Requirements

We may disclose your information where required by law or in response to valid requests by public Authorities.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business assets.

7.4 Your Consent

We may disclose your information for any other purpose with your consent.

8. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence.

When we transfer data internationally, we ensure appropriate safeguards are in place:

From the EEA/UK:

Standard contractual clauses approved by the European Commission or UK authorities

Adequacy decisions where applicable. Your explicit consent where required

From the US:

We comply with applicable requirements for international data transfers under US state privacy laws.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data

against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These

measures include:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Active client data: Duration of the business relationship plus 6 years
• Marketing contacts: Until consent is withdrawn or 3 years of inactivity
• Website analytics: 26 months
• Financial records: 7 years (as required by law)

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

11.1 European Economic Area (EEA) and UK Residents

Under GDPR/UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data in certain circumstances
• Right to Restrict Processing: Request limitation of processing 
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent

11.2 California Residents

Under CCPA/CPRA, you have the following rights:

• Right to Know: Request information about personal data collected, used, disclosed, or sold
• Right to Delete: Request deletion of personal data
• Right to Opt-Out: Opt-out of the sale or sharing of personal data
• Right to Correct: Request correction of inaccurate personal data
• Right to Limit Use: Limit use and disclosure of sensitive personal data
• Right to Non-Discrimination: Not be discriminated against for exercising privacy rights

11.3 Other US State Residents

Residents of Virginia, Colorado, Connecticut, Utah, and other states with privacy laws may have similar rights including access, deletion, correction, and opt-out rights.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within the timeframe required by applicable law (generally 30-45 days).

12. Verification Process

To protect your privacy and security, we may take steps to verify your identity before granting access to personal data or complying with your request. The verification process may vary depending on your relationship with us and the sensitivity of the request.

13. Marketing Communications

We may send you marketing communications if you have:

• Requested information from us
• Purchased services from us
• Opted in to receive marketing
• You can opt out of marketing communications at any time by:
• Clicking the “unsubscribe” link in our emails
• Contacting us directly

Note: Even if you opt out of marketing communications, we may still send you transactional or administrative messages.

14. Cookies

Our website uses cookies to distinguish you from other users and provide a better experience. For detailed information about the cookies we use and their purposes, please see our Cookie Policy.

15. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to read their privacy policies.

16. Children’s Privacy

Our services are not directed to individuals under 18 years of age (or 16 in the EEA). We do not knowingly collect personal data from children. If you are under the applicable age, please do not provide any ersonal data through our website or services.

If we learn that we have collected personal data from a child without parental consent, we will delete that information as quickly as possible. If you believe we have collected data from a child, please contact us immediately.

17. California Privacy Rights

Shine the Light

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the information below.

Do Not Track

We do not currently respond to Do Not Track browser signals or similar mechanisms.

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. For significant changes, we may also notify you by email or through a prominent notice on our website.

19. Complaints

Depending on your location, you have the right to lodge a complaint with the relevant supervisory Authority:

European Union Residents

You may lodge a complaint with your local data protection authority. Find your authority at: https://edpb.europa.eu/about-edpb/board/members_en

UK Residents

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/

US Residents

You may contact your state Attorney General’s office. For California residents: California Privacy Protection Agency

Website: https://cppa.ca.gov/

20. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: service@uprising.agency

Address: Aleksei Belikov, Solec 24 / 034-1, 00-403, Warsaw, Poland

For privacy-specific requests, you may also email us with “Privacy Request” in the subject line.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.