Last updated: June 09, 2026

Privacy policy

Welcome to Expira. This Privacy policy explains how we collect, use, and protect your personal information when you use our website.

1. Information We Collect

Expira is operated by Unlock Futurix Ltd ("Expira", "we", "our", or "us").

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, applications, and services.

By using Expira, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Data Controller

The data controller responsible for your personal information is:

Unlock Futurix Ltd
71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom

Email: support@unlockfuturix.com

3. Information We Collect

Account Information

When you create an account, we may collect:

  • Name

  • Email address

  • Company name

  • Password (encrypted)

  • Account preferences

Renewal Management Data

When using Expira, you may provide:

  • Asset names

  • Domain names

  • Certificate names

  • License information

  • Subscription information

  • Renewal dates

  • Reminder settings

  • Notes and documentation

  • Renewal links

  • Team assignments

Technical Information

We may automatically collect:

  • IP address

  • Browser type

  • Device information

  • Operating system

  • Usage information

  • Error logs

  • Performance data

Communication Information

When you contact us, join a waitlist, request support, or subscribe to updates, we may collect:

  • Name

  • Email address

  • Message content

4. How We Use Your Information

We use your information to:

  • Provide and maintain the Expira service

  • Create and manage accounts

  • Send renewal reminders

  • Deliver notifications

  • Improve platform performance

  • Respond to support requests

  • Prevent fraud and abuse

  • Comply with legal obligations

  • Communicate important product updates

5. Legal Basis for Processing

Under UK GDPR, we process personal data based on:

Contract Performance

Processing necessary to provide the Expira service.

Article 6(1)(b) UK GDPR

Legitimate Interests

Processing necessary to:

  • Improve product performance

  • Maintain security

  • Prevent abuse

  • Diagnose technical issues

Article 6(1)(f) UK GDPR

Consent

Where required, we rely on consent for:

  • Marketing emails

  • Optional newsletters

  • Certain analytics and cookies

Article 6(1)(a) UK GDPR

Email Communications

We may send:

Service Emails

Including:

  • Account verification

  • Password resets

  • Renewal reminders

  • Security alerts

  • Billing notifications

These emails are necessary for providing the service.

Marketing Emails

We may occasionally send product updates, launch announcements, and educational content.

You can unsubscribe from marketing communications at any time.

7. Cookies and Analytics

We may use cookies and similar technologies to:

  • Maintain login sessions

  • Remember preferences

  • Measure website performance

  • Understand product usage

We may use analytics providers such as:

  • Google Analytics

  • Microsoft Clarity

  • PostHog

  • Plausible

where applicable.

Users may manage cookies through their browser settings.

8. Third-Party Service Providers

We may use trusted third-party providers to operate the service.

Examples may include:

Authentication

  • Clerk

  • Auth0

  • Supabase Auth

Email Delivery

  • Resend

  • Postmark

  • SendGrid

Infrastructure

  • Vercel

  • Railway

  • AWS

  • Microsoft Azure

Payments

  • Stripe

Analytics

  • PostHog

  • Google Analytics

  • Microsoft Clarity

These providers process data only as necessary to deliver their services.

9. Data Retention

We retain personal data only as long as necessary to:

  • Provide the service

  • Fulfil contractual obligations

  • Comply with legal requirements

  • Resolve disputes

  • Enforce agreements

When accounts are deleted, personal data is deleted or anonymised within a reasonable period unless retention is legally required.

10. Security

We implement reasonable technical and organisational measures to protect personal data, including:

  • Encryption in transit (HTTPS/TLS)

  • Access controls

  • Secure authentication

  • Infrastructure monitoring

  • Regular software updates

No internet-based service can guarantee absolute security.

11. International Transfers

Your information may be processed in countries outside the United Kingdom.

Where such transfers occur, we rely on:

  • Adequacy decisions

  • Standard Contractual Clauses

  • Other legally recognised safeguards

to protect personal data.

  1. Your Rights

Under UK GDPR, you may have the right to:

  • Access your data

  • Correct inaccurate data

  • Delete your data

  • Restrict processing

  • Object to processing

  • Withdraw consent

  • Receive a copy of your data

  • Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise these rights, contact: accounts@unlockfuturix.com

  1. Children's Privacy

Expira is intended for business and professional users and is not directed at children under 13 years of age.

We do not knowingly collect personal data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes will be published on this page with an updated "Last Updated" date.

15. Contact

If you have questions about this Privacy Policy or how we process personal data, contact:

Unlock Futurix Ltd
71–75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom