Privacy Policy.

Who we are

Level UI is the trading name of DenverWorld S.R.L., a company registered in Romania (registration number J23/3477/10.05.2024, VAT ID 50060912), with its registered office in Bucharest (Str. Sfanta Agnes 306, Popesti-Leordeni, 077160, Ilfov, Romania). We also operate an office in Berlin (Greifswalder Straße 215, 10405 Berlin, Germany).

For the purposes of data protection law, DenverWorld S.R.L. is the data controller for the personal data described in this policy. You can reach us about any privacy matter at office@levelui.com, or through our Help & Support page.

What personal data we collect

We only collect what you actively give us through this website, plus a small amount of technical data needed to keep the site secure and working. Specifically:

• Enquiry, quote and cart forms — the email address, budget range, project description and selected services you type in when you contact us, request a quote or send a package request.
• Support requests — your name (optional), email address, the type of request you select and your message.
• Client Portal — if you become a client, your email address and the access code we issue you, plus the project briefs, milestones, files and messages tied to your account, so we can deliver and track your project.
• Guide feedback — an anonymous "helpful / not helpful" vote on our resource guides, together with a cookie that remembers which guides you already voted on. This is not linked to your name or email.
• Technical data — your IP address, processed automatically and temporarily to prevent spam and abuse (see "Cookies & local storage" below). It is never linked to your identity or stored permanently by us.
• Hosting-level data — our hosting provider processes standard connection data (such as IP address, browser type and request timestamps) as part of ordinary web server operation, independently of us.

What we don’t collect

We deliberately keep this list short. This site does not use analytics, advertising or tracking cookies of any kind, does not run ad pixels, does not use social-login sign-in, and does not process online card payments — package prices are a starting point for a conversation, and any resulting engagement is invoiced separately.

Why we process your data, and our legal basis

We rely on the following legal bases under the EU General Data Protection Regulation (GDPR):

• Responding to your enquiry, quote request or support request — necessary steps prior to entering into a contract with you (Art. 6(1)(b) GDPR).
• Delivering and managing an active client project through the Client Portal — performance of a contract (Art. 6(1)(b) GDPR).
• Preventing spam, abuse and fraudulent submissions (honeypot fields, rate limiting) — our legitimate interest in keeping the site and our inbox usable (Art. 6(1)(f) GDPR).
• Counting guide "helpful" votes to improve our content — our legitimate interest in understanding what is useful to readers (Art. 6(1)(f) GDPR).
• Keeping business records (e.g. invoices) for as long as required by law — compliance with a legal obligation (Art. 6(1)(c) GDPR).

Who we share your data with

We do not sell your data, and we do not share it with advertisers, analytics vendors or data brokers, because we don’t use any. We do rely on a small number of service providers strictly to operate the site and deliver our services:

• Google (Gmail SMTP) — used to deliver the emails generated by our forms to our inbox, and to reply to you.
• Hostinger — our hosting provider, which serves this website and stores Client Portal data on our behalf.

International data transfers

Where a service provider such as Google processes data outside the European Economic Area, that transfer relies on the safeguards available under GDPR (such as the EU–U.S. Data Privacy Framework or Standard Contractual Clauses), as maintained by that provider.

Cookies & local storage

We do not use a cookie consent banner, because every cookie and local storage value on this site is strictly necessary or purely functional — none are used for advertising, tracking or profiling. Here is exactly what we set:

• portal_session — set only when you log in to the Client Portal. HttpOnly, expires after 7 days. Needed to keep you logged in.
• guide_rated — set only if you vote on a resource guide. HttpOnly, expires after 1 year. Remembers which guides you already voted on so you can’t vote twice; contains no personal identifier.
• theme — stored in your browser’s local storage (not a cookie) to remember your light/dark mode preference. Never sent to our servers.
• Scroll position — stored in your browser’s session storage to restore your scroll position on this same visit; cleared automatically when you close the tab.

How long we keep your data

Enquiry and support emails are kept in our mailbox for as long as reasonably needed to handle your request and for legitimate business record-keeping, then deleted. Client Portal data is kept for the duration of our working relationship, plus any period required by applicable tax and accounting law. IP addresses used for spam and rate-limit protection are held in server memory only, typically for minutes, and are never written to disk or linked to a person.

Your rights under GDPR

If you are located in the EU/EEA (or covered by GDPR), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format, where applicable.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your national data protection authority — for our registered office, this is Romania’s Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

How to exercise your rights

To make any of the requests above — including asking us to delete your personal data — use our Help & Support page and choose "Data privacy request (GDPR)" as the request type, or email us directly at office@levelui.com. We will respond within one month, as required by GDPR.

Children

This site is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy from time to time, for example if we change a tool or service we rely on. The "last updated" date at the top of this page always reflects the current version.