Privacy Policy

Ultra Labs (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services.

By accessing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please discontinue use of our services.

Information You Provide Directly

• Contact information — name, email address, phone number, and company name when you fill out a contact or order form.
• Project details — any information you share about your project, goals, or requirements.
• Communications — records of emails, messages, or other communications with us.

Information Collected Automatically

• Usage data — pages visited, time spent, referrer URLs, and browser/device information.
• IP address — used for security, fraud prevention, and geographic analytics.
• Cookies and tracking — see our Cookie Policy for full details.

We use the information we collect to:

• Respond to your inquiries and deliver the services you request.
• Send project updates, invoices, and service-related communications.
• Improve our website, products, and service offerings.
• Analyse traffic and usage patterns to optimise the user experience.
• Comply with legal obligations and protect against fraudulent or unlawful activity.
• Send occasional marketing communications — only with your explicit consent, and you may opt out at any time.

We do not sell, trade, or rent your personal information to third parties. We may share data in the following limited circumstances:

• Service providers — trusted partners who assist us in operating our website or conducting our business (e.g., hosting, analytics, email delivery). These providers are contractually bound to keep your information confidential.
• Legal requirements — when required by law, court order, or governmental authority.
• Business transfers — in connection with a merger, acquisition, or sale of all or part of our assets, with appropriate confidentiality protections.
• Consent — in any other case where you have given us explicit permission.

We use cookies and similar tracking technologies to enhance your experience on our website. For a full explanation of the cookies we use, their purpose, and how to manage them, please refer to our Cookie Policy.

We retain your personal information only as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. When data is no longer needed, we securely delete or anonymise it.

Contact form submissions are retained for up to 3 years. Client project data is retained for the duration of the engagement plus 5 years thereafter for legal and accounting purposes.

Job applications follow their own schedule, which is set out in the Job Applications section below.

If you apply for a role with us, we process your application under two different legal bases, and they have different lifetimes. Running the hiring process — reading your application, scheduling interviews, deciding — rests on our legitimate interest in filling the role and on being able to answer questions about how we filled it. Keeping your CV on file for future openings rests on your consent, which is the separate checkbox in the application form and which you can withdraw at any time.

What we hold for an application:

• What you sent us — your name, contact details, date of birth, citizenship, CV file, motivation letter, links, and anything you wrote in the free-text fields.
• What happened to it — the dates it moved between stages, the outcome of each round, and the notes our team wrote while assessing it.
• Interview arrangements — the times, the format, who was on the panel, and the preparation notes we shared with you.
• Messages in the hiring server — anything you wrote in the chat rooms we open for a role. These are personal data like everything else here, and they are deleted with the rest.

Applications are kept for 2 years from the last decision, or 3 years if you asked us to keep your CV on file. A withdrawn application is kept for 90 days and no longer, whatever you ticked. You do not need to email anyone to be removed: sign in, open the application, and use “Delete my data”. It takes effect immediately, we email you a confirmation of exactly what was removed, and all we keep afterwards is one row with no identifiers in it so our hiring statistics stay accurate.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data, subject to legal obligations.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time.
• Delete a job application yourself — if you have applied for a role, you can remove everything we hold about that application from your own dashboard, without asking us first.
• Lodge a complaint — if you believe we have handled your data unlawfully, you can complain to your national data protection authority. In Slovakia this is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava (dataprotection.gov.sk).

To exercise any of these rights, contact us at [email protected].

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For significant changes, we will make reasonable efforts to notify you (for example, via email or a prominent notice on our website).

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us: