UK GDPR Notice and UK Privacy Rights

Overview

This Notice describes how Upmos processes the personal data of individuals in the United Kingdom, in compliance with the UK GDPR (the assimilated form of EU Regulation 2016/679) and the Data Protection Act 2018 (“DPA 2018”).

Legal Bases for Processing

We rely on one or more of the following lawful bases under Article 6 of the UK GDPR:

• Contract — to provide the Services you have requested (account, orders).
• Consent — for marketing communications and non-essential cookies.
• Legitimate interests — for fraud prevention, security, analytics, and service improvement, subject to balancing against your rights.
• Legal obligation — for tax, accounting, and regulatory reporting.

Your Rights Under UK GDPR

You have the following rights, exercisable through Account > Privacy or by emailing privacy@upmos.com:

Right of Access (Article 15)

You may request a copy of the personal data we hold about you. We respond within one month, free of charge for reasonable requests, with up to a 2-month extension permitted for complex cases.

Right to Rectification (Article 16)

You may request correction of inaccurate personal data and completion of incomplete data. Most profile, address, and payment details can be self-edited; for system-recorded data, contact our DPO.

Right to Erasure (Article 17)

Often called the “right to be forgotten,” this allows you to request deletion of your personal data when:

• The data is no longer needed for the original purpose.
• You withdraw consent (and there is no other lawful basis).
• You object to processing and there is no overriding legitimate interest.
• The data was unlawfully processed.
• Legal compliance requires erasure.

Note: certain financial, tax, and fraud-prevention records are retained for legally required periods (typically 6-7 years).

Right to Restriction of Processing (Article 18)

You may request that we temporarily stop processing your data while we verify accuracy or investigate an objection.

Right to Data Portability (Article 20)

Where processing is based on consent or contract and carried out by automated means, you may receive your personal data in a structured, commonly used, machine-readable format (CSV/JSON), or request transmission directly to another controller where technically feasible.

Right to Object (Article 21)

You may object at any time to processing based on legitimate interests, including profiling. You may always opt out of direct marketing.

Automated Decision-Making & Profiling

Upmos uses automated systems for fraud detection, recommendation, and risk scoring. None of these systems produce legal or similarly significant effects without human review. You have the right to request human review of any decision you believe was made solely by automated means.

Complaints to the ICO

If you believe we have not complied with UK data-protection law, you may complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by phone at 0303 123 1113. We would appreciate the chance to address concerns directly first via our DPO.

International Data Transfers

Personal data of UK residents is transferred internationally only when:

• The destination country has UK Adequacy regulations (e.g., U.S. for organizations under the UK Extension to the EU-U.S. Data Privacy Framework).
• Standard Contractual Clauses (with the UK Addendum) are in place.
• Binding Corporate Rules approved by the ICO apply.
• An applicable derogation under Article 49 is engaged with informed consent.

Contact Our DPO

Our designated Data Protection Officer for UK matters is reachable at dpo@upmos.com or by writing to the mailing address at the bottom of this Notice.

Contact

Email: uk-privacy@upmos.com

How Can You Contact Us About This Policy?

If you have any further questions or comments or wish to report any problematic Content or Contribution, you may contact us by:

General Contact

• Phone: 1(855)637-2433 (Mon–Fri, 7 AM–8 PM CT)
• General Support: support@upmos.com
• Report Issue: upmos.com/report
• Send Feedback: upmos.com/feedback

Department Directory

Mailing Address

Upmos Inc.
9896 Bissonnet St
Houston, TX 77036
United States