Privacy Policy

Last updated: October 22, 2026

Pulse of UX (“we,” “our,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website at www.pulseofux.com (the “Website”) or participate in Pulse of UX research activities.

This Website is operated by Kathy Toney under the Pulse of UX initiative. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

Please read this Privacy Policy carefully. For any data-protection inquiries, please use the contact details provided at the end of this policy.

Personal Data We Collect and Process

“Personal data” means any information relating to an identified or identifiable natural person. We collect and process different types of personal data depending on how you interact with us.

Data collected directly from you

We may collect the following information when you provide it to us:

  • Name

  • Email address

  • Information you provide through contact forms, survey responses, research activities, or other communications

  • Records of your communications with us

  • Other information you choose to provide

Survey and research participation

When you participate in a Pulse of UX survey, interview, workshop, or other research activity, we collect the information you choose to provide. This may include your professional background, experiences, perspectives, and responses to open-ended questions.

We use this information to analyze experiences across the UX community, identify themes and emerging questions, and share aggregated or anonymized findings. We do not sell personal data.

Participation in Pulse of UX research activities is voluntary. You may withdraw from a survey or request deletion of your responses where technically possible. Anonymized or aggregated data that can no longer be linked to you may be retained for research purposes.

Automated data collection through our Website

When you visit our Website, we may automatically collect information such as:

  • IP address

  • Cookie identifiers and other online identifiers

  • Device and browser information

  • Pages viewed, clicks, scrolling, searches, and timestamps

  • Information about the website you visited before arriving at our Website

This information is used to operate, secure, and improve the Website and to understand how visitors use it.

Special Categories of Personal Data

We do not ask for or intentionally collect special categories of personal data, such as information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person’s sex life or sexual orientation.

Please do not include such information in free-text survey responses unless it is necessary for your participation. If you choose to share such information, we will handle it with additional care and use it only in anonymized or aggregated form where possible.

How We Use Your Personal Data

We use personal data for the following purposes:

  • To operate and maintain our Website

  • To conduct, analyze, and share Pulse of UX research

  • To provide access to research findings through Condens where you have requested it

  • To respond to inquiries and manage participation in Pulse of UX activities

  • To improve our Website, research activities, and services

  • To analyze Website traffic and usage trends through Squarespace analytics

  • To comply with applicable legal requirements

Legal Basis for Processing

We process personal data only where we have a legal basis to do so.

Consent

We process personal data based on your consent when, for example, you:

  • Subscribe to updates or newsletters

  • Request access to research findings through Condens

  • Accept non-essential cookies or analytics

  • Participate in optional research activities where consent is required

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Legitimate interests

We process personal data based on our legitimate interests, provided that these interests are not overridden by your rights and freedoms. These interests include:

  • Operating, securing, and improving our Website

  • Conducting and analyzing community research in a way that respects individuals’ privacy

  • Preventing misuse of the Website

  • Responding to inquiries and maintaining relationships with participants and contributors

Legal obligation

We may process personal data where necessary to comply with applicable legal obligations.

How We Disclose Your Information

We do not sell your personal data. We share personal data only with service providers and partners where necessary to operate the Website, provide requested services, conduct research, or comply with legal obligations.

This may include:

  • Squarespace. Squarespace hosts our Website and processes form submissions, website usage data, and related technical data on our behalf.

  • Condens. If you request access to research findings, we share the information necessary to create your Condens Viewer access.

  • Busch Labs. We use Busch Labs to collect and store survey responses.

  • Other service providers. We may use other trusted providers to support website operations, communications, research, or security.

We may also disclose personal data where reasonably necessary to comply with applicable law, respond to lawful requests, protect our rights or the rights of others, or prevent misuse or security incidents.

Data Retention and Security

We retain personal data for no longer than necessary for the purposes for which it was collected or otherwise processed.

Survey responses and research data are retained for as long as necessary to conduct, analyze, and share Pulse of UX research. Contact details submitted through forms are retained for as long as needed to respond to your inquiry or maintain an ongoing relationship with you.

You may request deletion of your personal data at any time, subject to legal, contractual, or research-record requirements. Where data has been anonymized or aggregated so that it can no longer be linked to you, it may be retained for research purposes.

We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include:

  • Using SSL certificates (HTTPS) to encrypt data shared between the Website and servers

  • Implementing strong password policies for administrative accounts

  • Limiting access to personal data to those who need it for legitimate purposes

  • Minimizing the collection of personal data to what is necessary for our stated purposes

While we strive to protect personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to be informed: To receive clear information about how your personal data is used.

  • Right of access: To obtain confirmation about whether we process your personal data and, where applicable, access that data.

  • Right to rectification: To request correction of inaccurate or incomplete personal data.

  • Right to erasure: To request deletion of your personal data in certain circumstances.

  • Right to restriction of processing: To request that we restrict processing in certain circumstances.

  • Right to data portability: To receive personal data you provided to us in a structured, commonly used, and machine-readable format, where processing is based on consent or contract and carried out by automated means.

  • Right to object: To object to processing based on legitimate interests or to direct marketing.

  • Right to withdraw consent: To withdraw consent at any time where processing is based on consent.

  • Right to lodge a complaint: To lodge a complaint with a supervisory authority, particularly in the EEA Member State of your habitual residence, place of work, or place of the alleged infringement.

To exercise any of these rights, please contact us using the details provided at the end of this policy. We may need to verify your identity before responding to a request.

Squarespace Platform

Our Website is hosted by Squarespace. Squarespace acts as a processor for personal data processed to provide website services to us. Squarespace may also act as an independent controller for certain data relating to your use of its services.

For more information, please see Squarespace’s Privacy Policy: https://www.squarespace.com/privacy

Data Transfers

Because our Website is hosted by Squarespace, a U.S.-based company, certain personal data may be transferred outside the European Economic Area (EEA) and stored in the United States.

Where personal data is transferred outside the EEA, Squarespace relies on appropriate transfer mechanisms, including adequacy decisions, the EU-U.S. Data Privacy Framework, and, where applicable, standard contractual clauses approved under GDPR.

Children’s Privacy

Our Website and research activities are not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information.

Cookies and Analytics

Some information is collected automatically through cookies and similar technologies.

This Website uses cookies and similar technologies, which are small files or pieces of text downloaded to a device when a visitor accesses a website. For specific information about cookies used by Squarespace, visit: https://support.squarespace.com/hc/articles/360001264507-The-cookies-Squarespace-uses

Functional and required cookies are always used to allow Squarespace to securely serve the Website.

Analytics and performance cookies are used only where you acknowledge our cookie banner. They help us understand Website traffic, activity, and usage patterns.

This Website may collect information to power Website analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited before coming to this Website

  • Your IP address

  • Clicks, internal links, pages visited, scrolling, searches, and timestamps

We use this information to learn about Website traffic and activity.

Third-Party Services and External Links

Our Website may contain links to third-party websites or services, including research platforms and partners. These services have their own privacy policies governing their collection and use of personal data.

We encourage you to review the privacy policies of any third-party services before providing personal data through those platforms. This Privacy Policy applies only to data processed through the Pulse of UX Website and research activities.

Fonts

This Website serves font files from and renders fonts using Google Fonts. To display the Website properly, these third parties may receive information such as your browser, network, device, IP address, and information about the page you are viewing.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will post any updated policy on this page and update the “Last updated” date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data-protection rights, please contact:

Kathy Toney
Pulse of UX
Augustenstraße 123
Stuttgart, Germany
Email: kathytoney@gmail.com
Website: www.pulseofux.com