Privacy policy

Updated 15 October 2026

This notice explains how information is handled when you browse ugc.ba, build a creator package or send UGC.ba Studio a project enquiry.

Contact for privacy questions

For questions about your information or to make a privacy request, email info@ugc.ba or info@gordondm.com.

Information you provide

Our enquiry forms require only your name and email address. Brand or company, website, requested service, project description, budget, timing, video quantity, usage requirements and selected creators are optional. Please do not include sensitive personal information in your message.

Why we use it

We use enquiry details to answer your questions, assess a potential project, prepare a proposal and communicate about the services you request. We do not use an enquiry as a newsletter subscription. Where applicable, this processing supports steps you request before a contract and our legitimate interest in answering business enquiries and protecting the website.

Where your enquiry goes

Submitted enquiries are emailed to info@ugc.ba and info@gordondm.com. Hosting and email providers process information as needed to run the site and deliver messages. The form does not save a separate copy of your message in a website database. Relevant details may be shared with a selected creator or production collaborator when needed to discuss or deliver your project.

Preferences and cookies

Your light/dark theme preference is saved in your browser’s local storage. Your package selections are included when you send a package enquiry. You can remove them through your browser’s site-data settings. We do not use advertising pixels, marketing cookies or persistent visitor identifiers in your browser. Our private statistics dashboard uses a necessary session cookie only for its signed-in administrator. Hosting infrastructure may use technical cookies and logs for security and operation.

Website statistics

We collect first-party website statistics across ugc.ba and ugc.gordon.ba, including visited pages, clicked and opened creator profiles, approximate active time, referring website, campaign source tags, IP address, approximate country and device, operating system and browser category. Collection is handled on our own ugc.gordon.ba hosting. IP-to-country lookup is performed locally using the DB-IP Country Lite database; visitor IP addresses are not sent to a geolocation service. We do not record form contents in analytics or collect full query strings. Full IP addresses and visit paths are accessible only through the authenticated statistics dashboard. Statistics are retained for up to 30 days and older records are removed during routine collection. A server-generated identifier estimates repeat visits within the same calendar month; it does not establish a person’s identity. We respect the browser’s Do Not Track and Global Privacy Control signals. Country and device estimates may be inaccurate, including when using a VPN or a shared connection.

Security and spam protection

The form checks submissions and limits repeated requests. A hashed network address and submission timestamps are temporarily stored outside the public web directory for this purpose; entries older than 24 hours are removed when the form is used again. Hosting providers may maintain separate access and security logs. No online service can guarantee absolute security.

Retention

We retain enquiry correspondence while responding to your request and as reasonably needed for a resulting project, follow-up, legal obligations or dispute handling. You can ask us to remove correspondence that is no longer required. Provider logs and backups may follow separate retention schedules.

Your choices and rights

Depending on the law that applies to you, you may request access, correction, deletion, restriction or portability of your information, or object to certain processing. Contact us using either email above. We may need to verify your identity. You may also contact the relevant data-protection authority.

External links and international processing

External websites have their own privacy practices. Hosting and email services may process information in the locations where their infrastructure operates. Contact us if you need more information about the handling of a particular enquiry.

Changes to this notice

We may update this notice when the website or its services change. The date above identifies the current version.