Privacy Policy

Last updated: 27 July 2026.

This Privacy Policy describes how Uncrossable Rush (hereinafter, the "Website", "we", "our" or the "Company"), accessible via the domain uncrossable-rush.co, collects, uses, stores and protects the personal data of users (hereinafter, the "User" or "you") within the framework of applicable data protection legislation, including the General Data Protection Regulation (GDPR) of the European Union and the Data Protection Act 2018 in the United Kingdom.

We recognize the importance of your privacy and are committed to ensuring the security and confidentiality of the personal information you provide to us. Please read this policy carefully before using our services or interacting with our platform.

Identity and Contact Details of the Data Controller

• Website Owner: Uncrossable Rush.
• Website: uncrossable-rush.co.
• Contact and Privacy Email: [email protected].
• Reference Supervisory Authority (UK): Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (www.ico.org.uk).

Data Protection Principles

In accordance with Article 5 of the GDPR, the processing of your personal data by Uncrossable Rush shall be governed by the following guiding principles:

• Lawfulness, fairness and transparency: Your data will always be processed lawfully, fairly and in a transparent manner in relation to you.
• Purpose limitation: Data will be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
• Data minimisation: The data collected will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
• Accuracy: Data will be accurate and, where necessary, kept up to date.
• Storage limitation: Data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
• Integrity and confidentiality: Data will be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

Personal Data We Collect

We collect personal information when you interact directly with us, register, use our digital services, carry out financial transactions or contact our customer support team via [email protected].

3.1. Categories of Data Collected

• Identification and contact details: First name, surname, email address, phone number and postal address (where strictly necessary).
• Account and profile data: Access credentials, username and configuration preferences within the platform.
• Transaction and payment data: Information related to common payment methods used in the UK territory (such as Visa and Mastercard debit/credit cards, bank transfers or digital wallets like PayPal, Apple Pay, Google Pay or other authorized digital payment services). Important note: Your full card or bank account details are processed in an encrypted manner by external payment gateways certified under PCI-DSS standards; we do not store your full credit card numbers.
• Technical and browsing data (Cookies and connection logs): IP address, browser type, operating system, pages visited, session duration, date and time of access, and data derived from the use of analytical or preference cookies.

Purposes of Data Processing

We process your personal information for the following legitimate purposes:

• Platform management and service provision: Allowing the proper functioning of the website, the creation and management of user accounts, and access to interactive service features.
• Payment processing and commercial management: Managing billing, processing payments securely using available methods in the UK, and preventing any type of financial fraud.
• Customer service and technical support: Responding to your enquiries, requests, complaints or technical issues submitted via [email protected].
• Commercial and promotional communications: Sending newsletters, service updates, special offers and promotions, provided we have obtained your prior and explicit consent, or where there is a prior contractual relationship allowing us to send communications regarding similar products (with the option to opt out at any time).
• Regulatory compliance and legal obligations: Complying with tax, commercial and data protection regulations in force in the UK and the European Union, as well as addressing requests from competent authorities.

Legal Basis for Data Processing

The processing of your personal data is based on the following legal grounds stipulated in Article 6 of the GDPR:

• Performance of a contract: Processing is necessary for the performance of the service contract or terms of use that you accept when registering or using Uncrossable Rush.
• Consent of the data subject: For sending personalized commercial communications, the use of certain non-essential cookies and the processing of sensitive data (if any), we request your explicit, free and unambiguous consent.
• Compliance with a legal obligation: Processing necessary to comply with accounting, tax and security regulations required by UK legislation.
• Legitimate interest: For the continuous improvement of our services, fraud prevention, network security and internal administrative management.

Recipients of Data and International Transfers

Your personal data will not be transferred, sold, rented or made available to third parties, except in the following cases necessary for the operation of the service:

• Technological service providers: Companies responsible for web hosting, IT maintenance, email delivery platforms and payment gateways. These providers act as data processors and are subject to strict confidentiality agreements and GDPR compliance obligations.
• Public authorities, law enforcement agencies or judicial bodies: When there is an imperative legal obligation or a legitimate judicial request within the framework of UK legislation.

International Transfers

In the event that any of our technological service providers are located outside the United Kingdom or the European Economic Area (EEA), we guarantee that such international data transfers are carried out under the highest security guarantees required by the GDPR, such as the signing of Standard Contractual Clauses (SCCs) approved by the European Commission or relying on adequacy regulations recognized in the destination country.

Data Retention Periods

We will retain your personal data only for as long as strictly necessary to fulfill the purposes for which it was collected:

• Account and service data: These will be kept while the user maintains an active account or until deletion is requested. Following deactivation, data will be blocked during the applicable legal limitation periods.
• Tax and transaction data: These will be retained for a minimum period of 5 to 7 years in accordance with applicable UK commercial and tax regulations (for example, tax obligations and anti-money laundering requirements where applicable).
• Commercial communication data: These will be retained until the user revokes their consent or exercises their right to object or erasure.

User Rights

As a data subject, current legislation (GDPR and the Data Protection Act 2018) grants you the following rights which you may exercise at any time:

• Right of access: To know what personal data we process about you and obtain a copy of it.
• Right of rectification: To request the correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): To request the deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
• Right to restriction of processing: To request that we suspend the processing of your data under certain legally established circumstances.
• Right to data portability: To receive your data in a structured, commonly used and machine-readable format, and to transmit them to another data controller.
• Right to object: To object to the processing of your data based on grounds relating to your particular situation (including objection to direct marketing).
• Right to withdraw consent: To withdraw consent given at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

How to exercise your rights?

You can exercise any of these rights by sending a written and signed request to our privacy department via email: [email protected].

To ensure security and verify your identity, we may ask you to provide proof of your identity, such as a copy of your valid passport or driving licence.

Furthermore, if you consider that your rights have not been properly addressed, you have the right to lodge a formal complaint with the competent supervisory authority in the UK, the Information Commissioner's Office (ICO), via their official website (www.ico.org.uk).

Information Security Measures

At Uncrossable Rush we apply appropriate technical and organisational security measures to guarantee a level of security appropriate to the risk of processing, in accordance with Article 32 of the GDPR. These measures include:

• Encryption of data in transit using secure protocols (SSL/TLS).
• Strict physical and logical access controls to our databases and servers.
• Periodic procedures for evaluation, analysis and assessment of the effectiveness of technical and organisational measures implemented to ensure processing security.
• Confidentiality commitments and ongoing training for staff with access to personal data.

Minors

Our services and interactions on uncrossable-rush.co are aimed exclusively at adults in accordance with UK legislation (aged 18 and over). We do not knowingly or intentionally collect personal data from minors. If we become aware that a minor has provided us with personal information without proper parental authorization or legal representation, we will proceed to immediately delete such records from our systems. If you detect any case of registration by a minor, please notify us immediately at [email protected].

Changes to the Privacy Policy

We reserve the absolute right to modify, update or adapt this Privacy Policy at any time to adapt it to legislative developments, case law, guidance from the Information Commissioner's Office or technical changes in our services.

Any substantial modification will be duly notified to registered users through our website or via email prior to its entry into force, and we strongly recommend that you review this section periodically to stay informed about how we protect your information.