Data & privacy
Your customers' data, hosted in the UK
uForge is built so that the data you collect stays yours, stays in the UK and carries the consent it was collected under.
UK hosting, UK email
UK customer data is hosted in AWS London (eu-west-2), and platform email is sent through Amazon SES in London - separate from uForge's Thailand region.
First-party by default
Sadang collects data on your own site for your account. It is not an ad network and does not pool your visitors with anyone else's.
Consent on every event
Each event and session records the consent tier it was captured under, and attribution is reported per tier.
Consent records
Consent receipts with versioned proof of what the visitor saw and chose, exportable as CSV.
Lawful-basis matrix
Document the lawful basis for each type of processing alongside the consent you capture.
Role-based access
Access to records and reports is controlled by role and scope, so people see only what they need.
What the law expects, and what uForge does
Under UK GDPR and PECR, non-essential tracking needs the visitor's consent, and you need to be able to show what they agreed to. The Data (Use and Access) Act 2025 relaxes this only for narrow, aggregate analytics - most marketing setups still need consent.
uForge's approach is to make consent part of the data: identifying tracking waits for consent, consent is stored with each event, and the record of what each visitor agreed to is kept and exportable. Emails sent from uForge honour tracking consent too: opens and clicks are tied to a person only while their tracking consent stands; otherwise only an anonymous count per message is kept.
Talk to us about your data
Bring your questions about hosting, processing and consent - we will answer them plainly.