European Union, EEA and United Kingdom: GDPR / UK GDPR
If you are in the EU/EEA or UK, the GDPR or UK GDPR applies to our processing of your personal data as described in this policy. Under the joint-controller arrangement on the main page, Cuesoft Nigeria Limited leads GDPR/UK GDPR compliance (transparency, rights handling and security) and you may nonetheless exercise your rights against either entity through hello@cuesoft.io.
Legal bases, per activity
| Processing | Legal basis |
|---|---|
| Application and contact forms | Steps at your request prior to a contract: Art. 6(1)(b) |
| Cueprise™ demo requests | Legitimate interest in answering a business enquiry: Art. 6(1)(f). The licence that may follow is with your organisation, not with you, so contract performance cannot cover your own details: see cueprise.cuesoft.io |
| Storefront™ enquiries | Legitimate interest in answering a business enquiry: Art. 6(1)(f). The engagement that may follow is with your organisation, not with you, so contract performance cannot cover your own details: see storefront.cuesoft.io |
| Cuelearn™ demo requests | Legitimate interest in answering a business enquiry: Art. 6(1)(f). The agreement that may follow is with your institution, not with you, so contract performance cannot cover your own details: see cuelearn.cuesoft.io |
| Infrastructure and security logs | Legitimate interest in operating secure websites: Art. 6(1)(f) |
| Performance and error monitoring on the websites and the documentation sites | Legitimate interest in keeping the pages working: Art. 6(1)(f), objection honoured on request |
| Cookieless aggregate analytics | Legitimate interest in understanding site usage: Art. 6(1)(f), no cookies or identifiers involved |
| Ace, the assistant | Legitimate interest in providing the assistant you choose to use: Art. 6(1)(f) |
| Website analytics and advertising tags, including Google signals | Consent: Art. 6(1)(a), withdrawable at any time |
| Contributor display on CueLABS™ (public GitHub data) | Legitimate interest in accurate attribution: Art. 6(1)(f), objection honoured on request |
| Programme administration under a signed agreement | Contract: Art. 6(1)(b) |
Where we rely on legitimate interests, we have balanced them against your rights, and you may object at any time.
Your rights
You hold every right in Arts. 15 to 21 GDPR: access, rectification, erasure, restriction, portability, and objection, including an unconditional right to object to direct marketing, and the right to withdraw consent under Art. 7(3) as easily as you gave it. The rights page explains how to exercise them and our response times, which follow Art. 12.
Complaints
You may lodge a complaint with your local supervisory authority (the list is at edpb.europa.eu) or, in the UK, with the Information Commissioner’s Office (ico.org.uk). You may also seek a judicial remedy. We would appreciate the chance to resolve your concern first.
Representative
Our processing of EU/UK personal data is occasional and low-risk, and we rely on the exemption in Article 27(2) GDPR (and its UK equivalent) from appointing an EU/UK representative. You can reach the controllers directly at hello@cuesoft.io; this page will name a representative if our processing ever grows past the exemption.
Transfers
Transfers of data handled by our processors are safeguarded by SCCs (with UK Addendum/IDTA) and, where the processor is certified, the EU-US Data Privacy Framework. The advertising platforms are not processors, so those clauses are not what covers them: a transfer to a certified recipient rests on the Framework’s adequacy decision, and one to any other platform rests on your explicit consent as a derogation, with the risks that carries spelled out on international transfers. Declining means no such transfer happens at all.
Cookies and ePrivacy
Two things we use require consent. The analytics and advertising setup on our nine websites with these tags (CueTA™, CueLABS™, CueHIRE™, Cueprise™, Storefront™, Cuelearn™, cuesoft.io, Client Work and account.cuesoft.io) is off until you accept and listed provider-by-provider on each site’s collection page. Separately, on cuesoft.io the Spotify player for The CueShow™ loads only if you click it and may then set Spotify’s own cookies under Spotify’s policy; the click is the consent, and the site’s banner does not govern it: see cuesoft.io. The documentation sites store a theme preference locally; it identifies nothing and leaves your browser never. The websites and the documentation sites also load Datadog’s performance and error monitoring, which the banner does not govern: see what every site collects and the documentation sites.
Last updated 4 October 2026.