Waitlist Privacy Notice
1. The short version
You've come to our waitlist. If you give us your email, town, and whether you're after romantic or platonic introductions (or either), we'll keep that so we can tell you when Iris opens in your town. That's all this is for right now. We don't send you anything unless you tick the box asking us to, we don't sell your data, and you can ask us to remove you at any time. Questions: privacy@introsbyiris.com.
2. What we collect, and why
| What | Why | Legal basis (UK GDPR) |
|---|---|---|
| Email address | To email you when your town opens (and occasional waitlist updates) | Your consent (the checkbox on the form) |
| Town & county | To know where demand is and plan which towns to open first | Your consent |
| Intent (romantic / platonic / either) | To understand the mix of demand in each town | Your consent |
| Consent record (that you ticked the box, when, and which notice version) | To show your consent was properly given | Our legal obligation (accountability) + legitimate interest |
| Anti-spam check | To stop bots flooding the form | Our legitimate interest in keeping the form usable |
We don't collect anything else on the waitlist — no name, no profile, no sensitive details, no ID. Those only come later, in the app, and only if you choose to sign up and verify (covered by the app's own privacy policy at that point).
3. Who we share it with
We use a few service providers (processors) who act only on our instructions, each under a data-processing agreement:
- Cloudflare — hosts the website and provides the anti-spam check (Turnstile) and privacy-respecting, cookieless visitor analytics.
- Render — hosts our backend in the EU (Frankfurt), where your waitlist entry is processed.
- Supabase — the EU-region managed database that stores the entry.
We do not sell your data, and we don't share it with anyone for their own marketing.
4. Sending data outside the UK
Your waitlist entry is stored in the UK/EU. Some providers (e.g. Cloudflare) operate globally; where data may be processed outside the UK we rely on the UK's approved safeguards (the International Data Transfer Agreement / Addendum) and a transfer risk assessment.
5. How long we keep it
We keep your waitlist entry until the earlier of: you ask us to remove you, [or X months after your town opens / after you join the app], [or X months if your town hasn't opened]. When we remove it, we delete it.
6. Cookies & tracking
The site sets no non-essential cookies, so there's no cookie banner. Our visitor analytics (Cloudflare) is cookieless and doesn't track you across other sites. The anti-spam check may set a strictly-necessary token to tell humans from bots.
7. Your rights
You can ask us to: show you what we hold, correct it, delete it / remove you from the waitlist, withdraw your consent (same as asking to be removed — it doesn't affect anything done beforehand), or give you a portable copy.
Email privacy@introsbyiris.com for any of these. (Because we send nothing until your town opens, "withdraw consent" today simply means we take you off the list.) You can also complain to the Information Commissioner's Office (ico.org.uk; 0303 123 1113) — though we'd like the chance to fix things first.
8. Children
The waitlist and Iris are for adults (18+). We don't knowingly collect data from anyone under 18.
9. Changes
We'll update this notice as things evolve; the effective date shows the current version. When the app launches, the fuller app privacy policy will apply to in-app processing.
10. Contact
Questions or requests: privacy@introsbyiris.com · data-protection lead: [contact] · postal: [address].