UTOMAT

Legal

Privacy Policy

Last updated: 29 June 2026

This policy explains what personal data I collect when you use utomat.com, why I collect it, and what I do with it. I'm Mario Lucas, trading as Utomat, based in Paphos, Cyprus. I'm the data controller for everything described below.

If you have any questions, email me at mario@utomat.com.

What data I collect and why

Email address (waiting list and newsletter)

When you submit the join form on this site, I collect your email address. I use it to send you updates about Utomat — product launches, build notes, community access. The legal basis is your consent. You can withdraw that consent at any time by clicking unsubscribe in any email I send you.

Usage data (analytics)

I use Google Analytics 4 to understand how people use this site — which pages they visit, how they arrived, and how long they stay. This data is aggregated and anonymised where possible. The legal basis is legitimate interests (understanding whether my content is useful). You can opt out using a browser extension such as the Google Analytics Opt-out Add-on.

I also use Hotjar for heatmaps and session recordings, and Apollo.io and LinkedIn Insight Tag for understanding the professional background of visitors. These tools may place cookies on your device. You can manage cookies through your browser settings.

Data I do not collect

I don't collect payment information. I don't collect names unless you provide one directly. I don't sell your data to anyone, ever.

Who I share your data with

I use a small number of third-party services to run this site. Each acts as a data processor on my behalf:

  • Brevo — email delivery and list management (EU-based)
  • Vercel — website hosting (US-based, EU data transfer covered by Standard Contractual Clauses)
  • Sanity — content management (US-based, SCCs apply)
  • Google Analytics / Hotjar / Apollo.io / LinkedIn — analytics and audience insight

I don't share your personal data with any other third parties without your explicit consent.

How long I keep your data

I keep your email address on the mailing list until you unsubscribe. Analytics data is retained according to each platform's default retention periods (Google Analytics: 14 months). If you'd like me to delete your data at any point, email me and I'll do it promptly.

Your rights under GDPR

You have the right to:

  • Access the personal data I hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing based on legitimate interests
  • Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
  • Lodge a complaint with the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy)

To exercise any of these rights, email me at mario@utomat.com. I'll respond within 30 days.

Cookies

This site uses cookies placed by third-party analytics tools (Google Analytics, Hotjar, LinkedIn). These are used purely for understanding site performance and audience. You can block or delete cookies through your browser settings at any time.

Changes to this policy

I'll update this page if anything material changes. The "last updated" date at the top will always reflect the current version.