Privacy at Ubered Social

Last updated: February 2026

Ubered Social (a trading style of Level Up North Ltd) is committed to protecting personal data in line with UK GDPR and the Data Protection Act 2018. This page explains what we collect, why we process it, how we share it, and how you can exercise your rights.

Who We Are

Data controller and processor details

Legal entity: Level Up North Ltd, trading as Ubered Social. Registered in the United Kingdom. We act as Data Controller for our own operations and, when managing social accounts for clients, typically as a Data Processor under contract. Contractual roles are described in client agreements.

  • Registered legal entity: Level Up North Ltd

  • Trading as: Ubered Social

  • Data protection role: Data Controller for our own operations, and Data Processor when providing services on behalf of clients under contract

What This Policy Covers

This policy applies whenever you interact with Ubered Social or use our services, including visits to our websites, communications, webinars, demos, and use of our social media management tools. It does not replace third-party platform privacy terms when you publish directly on social networks.

  • Using our social media management services

  • Visiting our websites or landing pages

  • Communicating with us (email, phone, chat)

  • Attending webinars, demos, or trainings

  • Interacting with our marketing and advertising

Our Services (Plain English)

Ubered Social provides tools and services that help businesses, charities, and organisations:

  • Connect and manage multiple social media accounts

  • Schedule and publish posts

  • Monitor engagement and performance

  • Collaborate with team members

  • Analyse social media activity and trends

  • Manage messages and interactions across platforms

Information We Collect and Why

Clear categories and purposes

We collect information you provide, data generated through use of our platform, and limited data from trusted third parties. We use each category only to deliver and improve services, process payments, maintain security, and comply with legal obligations.

A. Information You Provide

  • Account & contact details – Name, email, business name, address, timezone. Purpose: Account creation, authentication and communications.

  • Billing & payment details – Billing address, payment method. Purpose: Payments, invoicing and fraud prevention.

  • Social media account details – Usernames, page IDs. Purpose: Connecting and managing social accounts.

  • Content & communications – Posts, images, captions, messages, comments. Purpose: Delivering the service (scheduling, publishing, messaging).

  • Support communications – Emails, tickets, feedback. Purpose: Support, troubleshooting and service improvement.

B. Information Collected Automatically

  • Usage data – Login times, features used. Purpose: Service improvement and product decisions.

  • Device & log data – IP address, browser, device type. Purpose: Security, fraud prevention and diagnostics.

  • Analytics data – Page views, engagement metrics. Purpose: Platform optimisation and reporting.

  • Cookies & similar – Session cookies, preference cookies. Purpose: Functionality, analytics and marketing.

Further details are provided in our Cookie Policy.

C. Information from Third Parties

  • Social platforms – Data you grant when connecting accounts. Purpose: Delivering social features through platform APIs.

  • Payments & analytics – Payment provider confirmations, analytics feeds. Purpose: Billing and service performance.

  • Public business information – Company details from public registries. Purpose: Account enrichment and verification.

We use third‑party data only to provide and improve services.

Lawful Bases for Processing (UK GDPR)

We process personal data under one or more of the following lawful bases:

  • Contractual necessity – to provide our services

  • Legitimate interests – improving services, security, marketing

  • Consent – where required (e.g. marketing emails, cookies)

  • Legal obligation – tax, accounting, regulatory compliance

You may withdraw consent at any time where consent is the legal basis.

Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent (where applicable)

  • Lodge a complaint with the ICO

To exercise your rights, contact us using the details below. We aim to respond within 30 days.

How We Share Data & International Transfers

We do not sell personal data. We may share information with:

A. Employees & Authorised Contractors

Access is restricted to those who need it and subject to confidentiality obligations.

B. Service Providers

Trusted providers who help us operate our business, such as:

  • Hosting and infrastructure providers

  • Payment processors

  • Email and communication tools

  • Analytics and security providers

All providers are contractually required to protect your data.

C. Social Media Platforms

When you connect accounts (e.g. Facebook, Instagram, X, LinkedIn), data is processed in accordance with those platforms’ own terms and policies.

D. Legal & Regulatory Authorities

Where required by law, court order, or to protect our legal rights.

E. Business Transfers

If Level Up North Ltd undergoes a merger, sale, or restructuring, data may be transferred subject to appropriate safeguards.

All providers are contractually required to protect your data.

C. Social Media Platforms

When you connect accounts (e.g. Facebook, Instagram, X, LinkedIn), data is processed in accordance with those platforms’ own terms and policies.

D. Legal & Regulatory Authorities

Where required by law, court order, or to protect our legal rights.

E. Business Transfers

If Level Up North Ltd undergoes a merger, sale, or restructuring, data may be transferred subject to appropriate safeguards.

International Data Transfers

Some service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations

  • International Data Transfer Agreements (IDTAs)

  • Standard contractual clauses

Social media platforms may also process data globally under their own policies

Data Security

We implement appropriate technical and organisational measures, including:

  • Encrypted data transmission where appropriate

  • Access controls and role-based permissions

  • Secure hosting environments

  • Regular security reviews

  • Staff training on data protection

Payment information is handled only by PCI-compliant providers.

Data Retention

We retain personal data only for as long as necessary to:

  • Provide our services

  • Meet legal, accounting, and regulatory obligations

  • Resolve disputes and enforce agreements

When no longer required, data is securely deleted or anonymised.

Note: Content published on social media platforms may remain visible on those platforms even after deletion from our systems.

Marketing Communications

We implement appropriate technical and organisational measures, including:

  • You may opt out of marketing emails at any time using the unsubscribe link

  • Service-related communications will still be sent where necessary

  • Cookie-based marketing preferences can be managed via our Cookie Policy

Children’s Data

We retain personal data only for as long as necessary to:

Our services are intended for business use only and are not directed at children under 18.
We do not knowingly collect children’s personal data.

Contact Details

Privacy enquiries / Data Protection:
📧 [email protected]

If you are unhappy with our response, you may contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Changes to This Policy

We may update this Privacy Policy from time to time.
Material changes will be highlighted on our website. Continued use of our services indicates acceptance of the updated policy.