Privacy Notice

1. Who we are

designdex.org operates designdex.org and is the data controller for the personal data described in this notice. Contact us at support@designdex.org.

2. What we collect and why

Account data (name, email address, login credentials or social sign-in identifier) — to create and secure your account and provide the Service. Legal basis: performance of our contract with you.

Subscription status (plan, trial and renewal state, the identifier linking you to your payment) — to give you access to paid features. Legal basis: contract.

Product usage (studies viewed and saved, searches, collections, device and browser information, IP address, approximate location derived from IP) — to operate, secure and improve the Service. Legal basis: legitimate interests in running and improving a reliable product.

Support messages and feedback — to answer you and fix problems. Legal basis: legitimate interests and contract.

Marketing emails, where you have opted in — legal basis: consent, withdrawable at any time via the unsubscribe link.

Records we must keep for accounting, tax or dispute purposes — legal basis: legal obligation.

3. Who we share it with

Service providers acting on our instructions: hosting and database infrastructure, authentication, email delivery, error monitoring and analytics.

Our payment provider, who acts as Merchant of Record for sales and handles subscription management, payments, tax compliance and invoicing. Card details are entered with them and never reach our servers.

Professional advisers (legal, accounting) and authorities where we are legally required to disclose.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account and subscription data for as long as your account is active and for up to 24 months afterwards, except where a longer period is required for tax or legal reasons. Usage logs are kept for up to 12 months. After that, data is deleted or anonymised.

6. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent. Email support@designdex.org and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection authority.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls on our database, and restricted administrative access. No system is perfectly secure, but we will notify you and any regulator where required if a breach affects your data.

8. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and remember preferences — these cannot be turned off without breaking the Service. We also use limited analytics and advertising measurement tags to understand traffic and campaign performance. You can block or clear cookies in your browser settings.

9. Changes

We may update this notice; the current version is always posted here. Last updated 22 August 2026.