Skip to main content

Official portal of the United Human Digital Union

Legal basis
UHDUUnited Human Digital Union
Sign in

Data Protection Act 2026

An Act of the Union, made by the Founding Council under the Charter. See all laws in the statute book.

This Act sets out how the United Human Digital Union handles the data of its members and of everyone who uses its services, and the rights they hold over it.

It is made by the Founding Council under Article 5 of the Charter and gives effect to the right of privacy in Article 3 and to Article 10.

Article 1Principles

  1. 1.1The Union collects only the data it needs to provide its services, uses it only for those services, keeps it no longer than this Act allows and protects it.
  2. 1.2The Union never sells, rents or trades data, never uses it for advertising and does not track people across the web.
  3. 1.3These rules protect people and Digital Members alike.

Article 2What the Union holds

  1. 2.1Account: an account reference, the public keys of your passkeys, recovery codes stored only as one-way hashes, and sign-in sessions stored only as hashes.
  2. 2.2Membership: the chosen names, classes and validity plans in your applications, and the Member IDs and Digital Passports issued.
  3. 2.3Photo: if you upload one, the photo printed on your Digital Passport. It is cropped and saved as a new image without any of the original file's data, such as location or camera details.
  4. 2.4Companies: the names, purposes, Company IDs and certificates of your Digital Companies, and any updates to them.
  5. 2.5Payments: for each invoice, its reference, amount, status and the amount received. The Union collects no card or bank details, and sends no personal details to its payment server.
  6. 2.6Events: a log of account events, such as sign-ins, applications, issuance and deletion, holding only your account reference and the event.
  7. 2.7The Union does not ask for government identity documents, legal names, email addresses, telephone numbers or postal addresses.

Article 3Visits to the website

  1. 3.1The Union uses one cookie, to keep you signed in, and no advertising, analytics or tracking cookies.
  2. 3.2The Union keeps no logs of visits. Your IP address is used only briefly, in memory, to limit abuse.

Article 4Who can see your data

  1. 4.1Member records are private. Anyone holding a document's number and verification code can confirm that document, and nothing more; photos are never shown on verification. A company's name, status, date of incorporation and registration date can be looked up by its exact Company ID; its owner is never shown. The Union keeps no public list of members or companies.
  2. 4.2Within the Union, only the officials who run its services can see member data, and only to do so.
  3. 4.3The Union discloses data to anyone else only if the member asks it to, or where it is legally compelled; in that case it discloses no more than required and, where allowed, tells the member.
  4. 4.4The Union runs its own servers and payment server. Its hosting provider stores them but does not use the data.

Article 5How long data is kept

  1. 5.1Account and membership data is kept while the account exists.
  2. 5.2A photo uploaded with an application is kept only once the fee is paid. An unpaid photo is deleted after one day. When a photo is replaced, the old one is deleted.
  3. 5.3When an account is deleted, its passkeys, recovery codes, sessions and photos are erased. The Union keeps the record that the account existed and was deleted by its holder; the documents it issued, with the names printed on them and their cancelled status, so that verification stays truthful; and its application, payment and event records.
  4. 5.4Copies of the database are kept for 14 days as backups and are then destroyed.

Article 6Your rights

  1. 6.1To know: what data the Union holds about you. Most of it is shown on your account page; the rest is given on request.
  2. 6.2To correct: if the Union made a mistake in a document or record, it corrects it free of charge.
  3. 6.3To delete: you may delete your account at any time, with the effects set out in Article 5.
  4. 6.4To complain: you may petition the Union about how it handles your data and ask the Charter Tribunal to review its response.

Article 7Security

  1. 7.1Accounts are protected by passkeys, without passwords. All connections are encrypted. Union documents are signed with keys held only by the Union.
  2. 7.2If a security breach puts members' data at risk, the Union tells the members affected, through their accounts or on its website, as soon as it can.

Article 8Amendment

  1. 8.1The Founding Council may amend this Act at any time.