SOVA concept validation · 30 September 2026

Privacy notice

SOVA is testing interest in a proposed product. Joining the research waitlist is free and is not a purchase or reservation.

Who is responsible

The data controller is JC, trading as SOVA. For privacy questions or requests, email ukdirectory25@gmail.com.

What we collect

When you submit the form, we collect your email address; any optional answer about how you would use SOVA and your expected price; your optional marketing choice; and the source, medium, campaign and creative tags in the link you followed, if present. If you opt in to marketing, we also record the consent time and wording version. We record simple page-view, form-start and form-completion counts, the displayed price variant, and whether optional questions were answered. These validation events do not contain your email address, a cookie ID or a device ID. Our hosting provider may process ordinary technical request logs.

Why we use it and our lawful bases

We use waitlist and optional research responses to assess demand for the SOVA concept and administer the list. Our lawful basis is our legitimate interest in conducting this limited product-validation study and responding to people who choose to join. We use minimal, cookie-free validation events to understand page and form performance on the same basis. We use basic technical logs to keep the site secure on the basis of our legitimate interest in protecting the service.

Marketing is separate: only if you tick the optional box will we use your email to send SOVA product-development and launch updates. Our lawful basis for those emails is your consent. An unticked box does not prevent your research response from being saved and does not authorise promotional emails. Any receipt message to a non-consenting person will only confirm their submission.

Analytics and cookies

SOVA’s validation tracking uses first-party events without analytics cookies, persistent identifiers or advertising pixels. We do not use behavioural profiling. If optional cookies or similar tracking are added later, we will update this notice and provide any consent controls required before they run.

Service providers and transfers

We plan to host the website, content delivery and server-side form handling with Netlify, which may process ordinary technical request logs. We plan to store waitlist and research data with Supabase in a London (AWS eu-west-2) production database. These providers and their subprocessors may process limited data outside the UK under appropriate contractual transfer safeguards. No marketing-email provider is connected for this validation launch. We do not sell waitlist responses.

How long we keep it

We keep identifiable waitlist and research-response data for no more than 12 months from collection. We delete it sooner if you request deletion or if the validation project is abandoned and the data is no longer needed, unless a specific legal reason requires a limited record for longer. We keep marketing suppression or consent records only as necessary to evidence consent and respect opt-outs.

Your rights and choices

You can request access to, correction of or deletion of your data, and ask us to restrict its use. Where applicable, you may also request portability. You can withdraw marketing consent at any time by contacting ukdirectory25@gmail.com and, once emails are sent, using the unsubscribe link in every marketing email. Withdrawal does not affect processing before it. Email ukdirectory25@gmail.com for any request.

Your right to object: You can object to our legitimate-interest processing, including the research use of your response.

You can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.