Data & privacy

Your customers' data, hosted in the UK

uForge is built so that the data you collect stays yours, stays in the UK and carries the consent it was collected under.

UK hosting, UK email

UK customer data is hosted in AWS London (eu-west-2), and platform email is sent through Amazon SES in London - separate from uForge's Thailand region.

First-party by default

Sadang collects data on your own site for your account. It is not an ad network and does not pool your visitors with anyone else's.

Consent on every event

Each event and session records the consent tier it was captured under, and attribution is reported per tier.

Consent records

Consent receipts with versioned proof of what the visitor saw and chose, exportable as CSV.

Lawful-basis matrix

Document the lawful basis for each type of processing alongside the consent you capture.

Role-based access

Access to records and reports is controlled by role and scope, so people see only what they need.

What the law expects, and what uForge does

Under UK GDPR and PECR, non-essential tracking needs the visitor's consent, and you need to be able to show what they agreed to. The Data (Use and Access) Act 2025 relaxes this only for narrow, aggregate analytics - most marketing setups still need consent.

uForge's approach is to make consent part of the data: identifying tracking waits for consent, consent is stored with each event, and the record of what each visitor agreed to is kept and exportable. Emails sent from uForge honour tracking consent too: opens and clicks are tied to a person only while their tracking consent stands; otherwise only an anonymous count per message is kept.

Talk to us about your data

Bring your questions about hosting, processing and consent - we will answer them plainly.

Book a demo

Questions we get asked

Where exactly is UK data stored?
In AWS London (eu-west-2) - the platform, its databases and the email it sends on your behalf, which goes out through Amazon SES in London. uForge runs a separate Thailand region for Thai customers; UK accounts are not served from it.
Who is the controller of my customers' data?
You are. When your website and CRM run on uForge, you decide what is collected and why, and uForge processes it on your behalf. Read our data processing agreement.
Does uForge sell or share my data?
We do not sell it. Data is shared only with the providers needed to run the service, and with platforms you choose to switch on - for example, conversions you send to Meta or Google Ads. Sadang is first-party tracking: it is not an ad network, and your visitors' data is not pooled with other customers'.
Does any data leave the UK?
Core platform data and platform email stay in AWS London. Features you switch on can send data elsewhere by design - server-side conversions go to the ad platforms you connect, and SEO and AI features call specialist providers. We list these in our data processing agreement.
Does using uForge make my site compliant?
uForge gives you the tools - consent capture, consent-gated tracking, consent records and role-based access - but compliance also depends on how you configure and use them. We will not tell you a tool makes you compliant on its own.