Privacy Policy
How we handle the personal data of visitors to ulalo.io and the people who contact us. We take privacy seriously — it is foundational to what we build.
1. Data controller
For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, the data controller for this website is:
Ulalo SRL
Rue Joséphine Rauscent 90, 1300 Limal, Belgium
Email: legal@ulalo.io
Ulalo operates as a group of affiliated entities. Depending on the nature of your inquiry, your personal data may also be processed by one of our group entities:
| Entity | Registered address |
|---|---|
| Ulalo SRL (HQ) | Rue Joséphine Rauscent 90, 1300 Limal, Belgium |
| Ulalo France | 1 Rue de Stockholm, 75008 Paris, France |
| Ulalo Inc. | 3000 Pegasus Park Dr, Suite 1330, Dallas, TX 75247, United States |
All group entities operate under common data-protection policies and internal data-transfer arrangements consistent with the GDPR.
2. Scope
This Privacy Policy applies to personal data we collect when you:
- visit ulalo.io or any subdomain;
- submit our contact or partnership form;
- correspond with us by email;
- interact with us at events, on professional networks, or through investor or partner channels.
It does not cover personal or patient data processed inside Ulalo's enterprise products on behalf of healthcare customers. That processing is governed by:
- a HIPAA Business Associate Agreement (BAA) with US covered entities, where Ulalo Inc. acts as a Business Associate handling Protected Health Information (PHI); and
- a GDPR Data Processing Agreement (DPA) with EU/EEA controllers, where Ulalo SRL or Ulalo France acts as a processor.
3. Data we collect
Information you give us
- Name, work email, organization, and the message you send via our contact form.
- Any other information you choose to share in correspondence with us.
Information collected automatically
- Technical data such as IP address, browser type, device type, and approximate location (city/country level).
- Usage data such as pages viewed, time on page, and referring source.
We do not knowingly collect special category data (such as health, biometric, or genetic data) through this website.
4. Purposes of processing
- To respond to your inquiry and route it to the appropriate team.
- To assess partnership, pilot, and investment opportunities.
- To maintain and secure the website.
- To measure aggregate website usage and improve content.
- To comply with legal and regulatory obligations.
5. Legal basis (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Responding to inquiries | Pre-contractual steps at your request & legitimate interests |
| Operating and securing the website | Legitimate interests |
| Analytics | Consent (where required) or legitimate interests |
| Compliance with law | Legal obligation |
7. International data transfers
Where personal data is transferred outside the European Economic Area (EEA), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), supplemented where required by additional technical and organizational measures.
8. Retention
We keep personal data only as long as needed for the purpose for which it was collected, plus any period required by law. Inquiry correspondence is typically retained for up to 24 months, unless an ongoing relationship requires longer retention.
9. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion of your data;
- restrict or object to certain processing;
- data portability;
- withdraw consent (where processing is based on consent);
- lodge a complaint with a supervisory authority, including your local data protection authority in the EU.
To exercise any of these rights, contact legal@ulalo.io. We will respond within one month.
11. Security
We apply industry-standard technical and organizational measures to protect personal data, including encryption in transit, access controls, and logging. No system is perfectly secure; we continuously review and improve our controls.
12. Changes to this policy
We may update this policy from time to time. Material changes will be flagged on this page and dated at the top. Continued use of the website after changes take effect indicates acceptance of the updated policy.
13. Contact
For questions about this policy or your personal data, contact: