PRIVACY POLICY

Last updated: 7th August 2026

This Privacy Policy explains how UTDS Optimal Choice sh.p.k. (“UTDS”, “we”, “us” or “our”) collects, uses, shares and protects personal data.

UTDS Optimal Choice sh.p.k. is established in the Republic of Albania.

Business address:
Rruga Asim Vokshi
Tirana
Albania

Email: contact@utds.al

Website: utds.al

For the personal data described in this Privacy Policy, UTDS Optimal Choice sh.p.k. is the data controller, unless we are processing personal data on behalf of one of our clients.

1. Who This Policy Applies To

UTDS is a business-to-business digital and technology services company. We do not market our services to consumers.

This Privacy Policy applies to personal data relating to people who:

  • visit our website;

  • submit an enquiry;

  • contact us by email, telephone or another communication channel;

  • represent prospective or existing clients;

  • represent suppliers or business partners; or

  • otherwise interact with UTDS in a business or professional capacity.

Business contact information can constitute personal data where it identifies an individual, such as an employee, director, sole trader or other business representative.

2. Personal Data We Collect

Information You Give Us

When you contact UTDS or enquire about our services, we may collect:

  • your name;

  • business email address;

  • business telephone number;

  • company or organisation;

  • job title or professional role;

  • country or general location;

  • details of your enquiry;

  • information about the services you are interested in;

  • information contained in emails, telephone calls, meetings or other correspondence; and

  • other information you choose to provide to us.

We do not request sensitive or special-category personal data through our website and ask that you do not provide such information unless it is genuinely necessary.

Technical Website Information

When you access our website, limited technical information may be processed for the operation and security of the website.

This may include:

  • IP address;

  • browser and device information;

  • operating system;

  • date and time of access;

  • pages or resources requested; and

  • server and security logs.

Analytics and Advertising Information

Where you provide the relevant cookie consent, we may also collect information about how you use our website and how you arrived at it.

This may include website interactions, traffic source, advertising campaign information, device information, approximate location and conversion activity.

We use CookieYes to manage consent. Non-essential analytics and advertising tracking is blocked unless you provide the appropriate consent.

Detailed information about these technologies, including Google Analytics 4, Google Ads and other technologies we may use, is provided in our Cookie Policy.

3. Information We Receive From Other Sources

We may receive business contact information from sources other than directly from you.

These may include:

  • another person within your organisation;

  • business referrals and introductions;

  • publicly available company websites;

  • professional networking platforms;

  • business directories;

  • clients, suppliers and professional partners; and

  • business technology platforms used by UTDS.

We only use such information where we have a lawful basis for doing so.

We do not sell personal data and do not purchase consumer marketing databases.

4. How and Why We Use Personal Data

We may process personal data for the following purposes.

Enquiries and Prospective Clients

We use information to:

  • respond to enquiries;

  • understand business requirements;

  • arrange calls or meetings;

  • prepare proposals or quotations;

  • discuss potential projects; and

  • take steps towards establishing a client relationship.

Existing Clients

We may process business contact information to:

  • manage our client relationship;

  • communicate with client representatives;

  • provide contracted services;

  • manage projects and support;

  • prepare reports;

  • manage invoices and payments; and

  • maintain appropriate business records.

Business Administration

We may use personal data to:

  • maintain records of clients, prospects, suppliers and partners;

  • manage correspondence and meetings;

  • operate our business;

  • protect our legal interests;

  • maintain appropriate financial and accounting records; and

  • comply with applicable legal and regulatory requirements.

B2B Marketing

We may use relevant business contact information to communicate about UTDS services where permitted by applicable law.

We may contact existing clients, previous clients, prospective business customers and other relevant professional contacts where we have an appropriate lawful basis.

Where consent is legally required for a particular form of communication, we will obtain consent.

You can object to direct marketing at any time. Marketing emails sent through automated marketing systems will contain an appropriate unsubscribe mechanism.

Website Analytics and Advertising Measurement

Where you have provided the relevant consent, we use analytics and advertising information to understand website performance, measure marketing activity, attribute enquiries and improve our website and advertising.

Further information is provided in our Cookie Policy.

5. Lawful Bases for Processing

Depending on the circumstances, we rely on one or more of the following lawful bases.

Contract

We may process personal data where necessary to take steps at your request before entering into a contract or to perform our obligations under an existing contract.

Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These legitimate interests may include:

  • responding to business enquiries;

  • developing and maintaining business relationships;

  • operating and protecting our business;

  • promoting relevant B2B services;

  • improving our services;

  • maintaining appropriate business records;

  • preventing fraud or misuse; and

  • establishing, exercising or defending legal rights.

Consent

We rely on consent where required, including for non-essential analytics and advertising technologies on our website.

You can withdraw consent at any time.

Legal Obligation

We may process or retain personal data where necessary to comply with legal, tax, accounting, regulatory or court requirements.

6. Who We Share Personal Data With

We do not sell personal data.

We may provide personal data to service providers where reasonably necessary to operate our business or provide our services.

These may include providers of:

  • website hosting and infrastructure;

  • email and communications;

  • cloud storage;

  • customer relationship management systems;

  • analytics and advertising platforms;

  • project management and productivity systems;

  • accounting and financial services;

  • IT and security services; and

  • legal, accounting or other professional advice.

Depending on the services involved, these providers may include organisations such as Google and Salesforce, as well as other technology suppliers used by UTDS.

Where appropriate, providers processing personal data on our behalf are subject to contractual and data protection requirements.

We may also disclose information where required by law, by a competent regulator or court, to protect our legal rights, or as part of a legitimate corporate sale, acquisition or restructuring.

7. When UTDS Processes Data for Clients

In some areas of our work, UTDS processes personal data on behalf of our clients rather than for our own purposes.

This can occur when we work with client systems such as:

  • Salesforce and other CRM systems;

  • marketing automation platforms;

  • advertising accounts;

  • analytics and conversion tracking systems;

  • websites and online forms;

  • customer or prospect databases; and

  • other client-controlled technology.

In these circumstances, the client will normally be the data controller and UTDS will act as a data processor.

Our processing will be governed by the relevant client agreement, data processing terms and the client’s instructions.

If your request relates to personal data controlled by one of our clients, you should normally contact that organisation directly.

8. International Data Transfers

UTDS is established in Albania and works with businesses and technology providers internationally.

Personal data may therefore be processed in or transferred between Albania, the United Kingdom, the European Economic Area and other countries.

Some of our technology providers may also process personal data in other countries, including the United States.

Where applicable data protection law restricts international transfers, we use an appropriate lawful transfer mechanism or safeguard.

Depending on the circumstances, this may include:

  • an applicable adequacy decision;

  • approved Standard Contractual Clauses;

  • the UK International Data Transfer Agreement or UK Addendum where applicable;

  • contractual safeguards recognised under Albanian data protection law; or

  • another legally recognised transfer mechanism.

9. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, contractual or regulatory requirements.

As a general approach:

Enquiries and prospective clients: We may retain records for up to 24 months following the last meaningful interaction, unless a business relationship develops or there is another lawful reason to retain the information.

Client and project records: We retain relevant information throughout the client relationship and for an appropriate period afterwards for contractual, legal, accounting and dispute purposes.

Financial, tax and accounting records: These are retained for the period required by applicable Albanian law.

Marketing records: We may retain relevant business contact information while we have an appropriate lawful basis to communicate with you.

If you opt out of marketing, we may retain limited information on a suppression list so that we can continue to respect your request.

Analytics and cookie data: Retention depends on the relevant technology, configuration and your consent choices. Further information is available in our Cookie Policy.

Information may be retained for longer where necessary to establish, exercise or defend legal claims or where required by law.

When personal data is no longer required, it will be deleted, anonymised or securely disposed of.

10. How We Protect Personal Data

We apply reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

Access to personal data is restricted to employees, contractors and service providers who require it for legitimate business purposes.

No electronic system can guarantee absolute security, but we take measures appropriate to the nature of the information and the risks associated with its processing.

11. Your Data Protection Rights

Depending on the law applicable to you and the circumstances of the processing, you may have rights including:

  • access to personal data held about you;

  • correction of inaccurate or incomplete information;

  • deletion of personal data in certain circumstances;

  • restriction of processing;

  • objection to certain processing;

  • objection to direct marketing;

  • data portability where applicable;

  • withdrawal of consent where processing is based on consent; and

  • rights relating to certain forms of automated decision-making.

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, contact:

contact@utds.al

We may ask for sufficient information to verify your identity before fulfilling a request.

12. Direct Marketing

You can object to the use of your personal data for direct marketing at any time.

You can unsubscribe using the link contained in an applicable marketing communication or contact us at:

contact@utds.al

Opting out of marketing does not prevent us from sending communications necessary to respond to an enquiry, administer a client relationship, provide contracted services or comply with legal requirements.

We may retain limited information on a suppression list after you opt out to ensure that your marketing preference continues to be respected.

13. Children

Our website and services are intended exclusively for businesses and professional users.

We do not knowingly market our services to or seek to collect personal data from children.

If we become aware that personal data relating to a child has been collected without an appropriate legal basis, we will take reasonable steps to delete it.

14. Automated Decision-Making

UTDS does not currently use solely automated processing to make decisions about website visitors or prospective clients that produce legal or similarly significant effects.

Analytics, advertising and business systems may use automated processes to measure or categorise activity, but these systems do not independently make legally significant decisions about individuals on behalf of UTDS.

15. Applicable Data Protection Law and Complaints

UTDS Optimal Choice sh.p.k. is established in Albania and processes personal data in accordance with applicable Albanian data protection legislation, including Law No. 124/2024 “On the Protection of Personal Data”.

Where our activities fall within the territorial scope of UK or European data protection legislation, applicable requirements of the UK GDPR, UK Data Protection Act 2018 or EU GDPR may also apply.

If you have concerns about how we process your personal data, please contact us first at:

contact@utds.al

You also have the right, where applicable, to raise a complaint with the competent data protection supervisory authority.

For matters subject to Albanian data protection law, the supervisory authority is the Commissioner for the Right to Information and Protection of Personal Data of the Republic of Albania.

Individuals whose personal data is subject to UK GDPR may have the right to complain to the UK Information Commissioner’s Office (ICO).

Individuals whose personal data is subject to EU GDPR may have the right to complain to the competent supervisory authority in the relevant EEA member state.

Your right to contact an applicable supervisory authority is not affected by contacting UTDS first.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business, processing activities, technology or applicable legal requirements.

The date at the top of this page indicates when it was last updated.

Where a material change significantly affects how we process personal data, we will provide further notice where required by applicable law.

17. Contact Us

For questions about this Privacy Policy, how we process personal data or to exercise your data protection rights, contact:

UTDS Optimal Choice sh.p.k.
Rruga Asim Vokshi
Tirana
Albania

Email: contact@utds.al

Website: utds.al