Fan Waitlist Privacy Notice

Who is responsible?

VyuMee Ltd is the controller of your waitlist information. We are registered in England and Wales under company number 17439372. Our registered office is 167–169 Great Portland Street, 5th Floor, London, W1W 5PF.

For privacy questions or requests, email legal@vyumee.co.uk or write to our registered office.

Information we use

• Your email address, supplied by you.
• Your declaration that you are aged 18 or over and live in the UK, and the date and wording of that declaration. This is a declaration, not age verification.
• Your signup and confirmation times, email permission wording and version, delivery status, and expiry dates.
• Protected confirmation and unsubscribe link identifiers, and limited information used to prevent repeated or abusive requests.
• Any messages you send us about the waitlist.

Our hosting and email providers also process connection and security information, such as IP addresses, browser information, request times and delivery logs. Our waitlist application uses a keyed hash of the connection IP address for short-term rate limiting; it does not store the raw IP address in your waitlist entry.

We do not use email-open pixels or marketing click tracking in waitlist emails. Loading the VyuMee logo may cause your email service to request an image from our website. We do not use that request to measure whether you opened the email. We record confirmation and unsubscribe actions so we can carry out your choices.

Why we use it and our lawful bases

With your consent, we send a confirmation email and, once you confirm, one email when fan access opens. This permission does not cover newsletters, unrelated promotions or marketing by creators or other organisations.

We rely on our legitimate interests in administering a secure waitlist to check the eligibility declaration, prevent misuse, maintain permission records while an entry is active, handle delivery problems and respond to enquiries. We use information where necessary to meet legal obligations, including responding to data-protection requests.

Joining is voluntary. Without an email address, the eligibility declaration and email permission, we cannot register your request. Joining does not create an account or guarantee early access. We do not profile you or make decisions with legal or similarly significant effects using automated processing.

Who receives information?

Access is limited to authorised people working for VyuMee and providers needed to run the service:

• Supabase stores the waitlist and operates its server functions. Our database is hosted in London.
• Resend delivers emails and processes message content, delivery logs and delivery restrictions.
• Vercel hosts and protects the website and serves its assets.
• Google Workspace handles messages sent to our company inboxes, including privacy enquiries.

These providers use infrastructure and support suppliers under their data-processing arrangements. We do not sell the list, provide it to creators for marketing, or export it into spreadsheets or another mailing list. We may disclose information where the law requires it.

Processing outside the UK

A UK database does not mean all processing stays in the UK. Resend stores email content and logs in the United States; its Ireland sending region controls email routing, not storage. Supabase support and operations, and our other providers, may also process information outside the UK, including in the US and Singapore.

For restricted transfers, providers’ data-processing arrangements use applicable adequacy arrangements or contractual safeguards, including standard contractual clauses with the UK Addendum. You can ask us for information about the safeguards relevant to your data at legal@vyumee.co.uk.

Provider information: Resend privacy and retention, Supabase processing locations, Vercel data-processing terms and Google Workspace data-processing terms.

How long we keep information

• Unconfirmed requests: expire 7 days after signup. Confirmation links expire after 48 hours; requesting another link does not extend the original 7-day limit.
• Confirmed entries: expire 12 months after confirmation or 30 days after the launch email is sent, whichever comes first.
• Unsubscribing: deletes the live waitlist entry immediately, including its consent record and link identifiers. We do not retain a separate permanent copy of the waitlist.

Expired entries cannot receive the launch email. An hourly cleanup job removes them from the live database. Rate-limiting IP hashes expire after one hour and are removed at the next cleanup; the daily send counter contains no email address.

Deleting a waitlist entry does not immediately erase separate provider records. Resend retains email content and delivery logs for 30 days on our current plan, with recovery backups persisting for 7 days. Provider suppression records may remain while needed to block delivery after a bounce or complaint; they are not a list for further marketing.

Hosting providers retain operational and security records under their service retention arrangements for troubleshooting, abuse prevention and legal obligations. Any recovery copies are subject to their backup expiry processes. We handle requests concerning these records with the relevant provider. We keep correspondence about an enquiry or rights request for as long as needed to resolve it and complete necessary follow-up, or longer where a legal obligation or legal claim requires it.

Leaving the waitlist and your rights

Use the cancellation or unsubscribe link in our email to leave the list, or contact legal@vyumee.co.uk. You can withdraw consent at any time. This does not affect processing that was lawful before withdrawal or any separate VyuMee account.

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your information. You can object to processing based on legitimate interests, and you have an absolute right to object to direct marketing.

If you have a concern, please contact us. You may also complain directly to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Changes to this notice

We will update the version and date if our arrangements change. We will not treat your waitlist permission as consent for a different marketing purpose.