Email updates privacy notice

1. Who collects this data

Simple Online Systems Limited, company number 16877030, registered in England and Wales. Registered office: Kilcollum House, Pickard Crescent, Sheffield S13 8EY, United Kingdom.

For any question about this notice, write to hello@simpleonlinesystems.co.uk. We are the controller of your personal data for the purposes of UK GDPR.

2. What we collect

• The email address you typed into the signup form.
• The date and time you submitted it.
• The two-letter country code your network resolved to at the time of submission (we do not store the IP address itself).
• The version string of this notice you agreed to (so we have a record of which wording you saw when you ticked the consent box).

We use Cloudflare Turnstile to check that submissions come from a real browser. Your IP address is processed briefly in memory by Cloudflare and our own anti-abuse rate limit, with a one-hour time-to-live, and is never written to our database or linked to your email.

3. Why we use it

To send you a one-off confirmation email at signup, and then a single notification when SOS is ready for you to try. No newsletters, no promotional drip campaigns, no sharing with anyone else.

4. Lawful basis

We rely on your consent under UK GDPR Article 6(1)(a). You give that consent by ticking the box on the signup form and clicking the confirmation link in the email we send you. You can withdraw your consent at any time, with no questions asked, using the unsubscribe link in every email we send and on the unsubscribed page on this site.

5. Who else sees it

We use three external service providers, all of which are bound by data processing agreements with us:

• Supabase, which stores the row in a Postgres database in London.
• Resend, which sends the confirmation and launch emails on our behalf, in the EU region.
• Cloudflare, which runs the website edge, the form endpoint, and the Turnstile anti-abuse check, primarily in the UK and EU.

All three are sub-processors. None of them sell or onward-share your data, and none of them are permitted to use it for their own purposes. We will keep our full sub-processor list current on the live product site once it launches.

6. How long we keep it

• Unconfirmed signups are deleted automatically after 14 days. If you signed up but did not click the confirmation link, we will not hold your email longer than that.
• Confirmed signups are kept until you unsubscribe or until we decide to retire the launch list, whichever comes first.
• After you unsubscribe, we keep a record that your address asked not to be contacted, so we do not accidentally re-add you in the future.

7. Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you,
• ask us to correct anything inaccurate,
• ask us to erase your data,
• withdraw your consent at any time, and
• complain to the Information Commissioner's Office at ico.org.uk if you believe we have mishandled your data.

To action any of those, email hello@simpleonlinesystems.co.uk. We will respond within 30 days, usually much sooner.

8. Changes to this notice

We may update this notice as we get closer to launch. When we do, we will bump the version string at the top of the page and date it. The version string against your record will not change retroactively, so we always know exactly what you agreed to.

If we ever want to use your data for something materially different from telling you when SOS launches, we will ask for your consent again. We will not just quietly change the rules.

9. A note on our company structure

SOS is run today by Simple Online Systems Ltd (UK), which remains your data controller. Our software and intellectual property are being transferred to a Cyprus company, Synedrion Software Ltd, which licenses the software back to Simple Online Systems Ltd. This changes who owns the software, not who runs the service or handles your data. We will update this notice with the new registered company details once that completes. Nothing about how your data is handled will change without your renewed consent.