Due Owl waitlist privacy notice (UK)
Last updated: 13 November 2026
This notice explains what we do with your details when you join the Due Owl waitlist on dueowl.app. It covers the waitlist only. It does not cover the Due Owl app, which will have its own privacy policy before it launches.
1. Who we are
The company responsible for your details (the "controller") is:
Springboard Marketing & Communications Limited, trading as Due Owl Company number 08471484 Registered office: The Old Police Station, 82 High Street, Golborne, Warrington, England, WA3 3DA
We are registered with the Information Commissioner's Office (ICO). Our registration number is ZA935155.
To ask us anything about your details, email privacy@dueowl.app.
2. What we collect
When you join the waitlist we keep:
- your email address
- your country, taken from the language version of the page you used
- the price option you chose on the page
- whether you qualify for the founding offer
- the date and time you signed up
We do not keep your IP address in the waitlist record. Our hosting and security providers (Cloudflare and Supabase) may process your IP address and briefly log it for security and abuse prevention. They keep those logs under their own retention rules. We do not ask for your name, and we do not ask for payment details.
To stop automated sign-ups, the form uses a bot check called Turnstile, run by Cloudflare. Turnstile looks at your IP address and some signals from your browser to decide whether you are a person. That check is done by Cloudflare. We only receive the pass or fail result.
We also count visits to our pages using Cloudflare Web Analytics. It gives us totals, such as how many people viewed a page. It does not use cookies and does not build a profile of you.
To show the version of our logo for your country (a £ or $ sign), Cloudflare tells our website which country your connection appears to come from. We use it only to choose that logo. We don't keep it, and it isn't part of your waitlist record.
3. Why we use your details, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Keep your email, country and price option | To tell you when Due Owl launches and to honour the founding price if you qualify | Your consent (UK GDPR Article 6(1)(a)) |
| Email you once, at launch (marketing email) | To send the launch announcement | Your consent |
| Reply to your requests, and send a short notice before any material change to this notice | To answer you, and to keep you informed | Our legal obligations and our legitimate interest in dealing with your requests (Article 6(1)(c) and (f)) |
| Bot check on the form | To keep fake sign-ups out | Our legitimate interest in keeping the form secure (Article 6(1)(f)) |
| Count page visits | To see how many people look at each page | Our legitimate interest in understanding how the site is used (Article 6(1)(f)) |
| Show the logo for your country | To show the right version of our logo (a £ or $ sign) | Our legitimate interest in showing the page correctly (Article 6(1)(f)) |
Joining is optional. You don't have to give us your email, but we can't add you to the waitlist without it. You can withdraw your consent at any time (see section 8). Withdrawing does not affect anything we did before you withdrew.
We do not make decisions about you by automated means, and we do not sell your details.
4. Who we share your details with
We use these providers to run the waitlist. They act on our instructions (they are our "processors").
| Provider | What they do for us | Where |
|---|---|---|
| Cloudflare | DNS, website hosting, the Turnstile bot check and cookieless Web Analytics | Global network. Your request is handled in a data centre near you. |
| Supabase (which uses Amazon Web Services, AWS, as its sub-processor) | Stores the waitlist database | London, UK |
| Mailgun, part of Sinch | Sends the launch announcement (the only marketing email), replies to your requests, and any notice of a material change to this notice | EU region |
All waitlist sign-ups are stored in London, including sign-ups from visitors outside the UK.
We do not share your details with anyone else, except where the law requires it.
5. Sending your details outside the UK
Cloudflare, Supabase, AWS and Mailgun/Sinch are, or are owned by, companies based outside the UK, including in the United States. Some handling of your details may therefore happen outside the UK.
Where that happens, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on UK adequacy regulations where they apply. These are built into the data processing terms of each provider we use, as listed in section 4: Cloudflare, Supabase (which passes the same protections on to its sub-processor AWS), and Mailgun/Sinch.
You can ask us for a copy of these safeguards (see section 8).
6. Cookies and similar storage
Our site's own code sets no cookies and stores nothing in your browser. We checked this with an automated browser test of the site.
Cloudflare hosts our site and runs the Turnstile bot check. To protect the site, Cloudflare may set strictly necessary security cookies (for example __cf_bm). Cloudflare's cookie policy covers these: https://www.cloudflare.com/cookie-policy/. Turnstile is provided under Cloudflare's own privacy terms: https://www.cloudflare.com/privacypolicy/
We count visits with Cloudflare Web Analytics, which does not use cookies.
7. How long we keep your details
We keep your waitlist details until 12 months after Due Owl launches, or 6 months after we close the waitlist without launching, whichever is sooner. We then delete them.
If you ask us to delete your details sooner, we will.
8. Your rights
Under UK data protection law you can ask us to:
- tell you what we hold about you and give you a copy
- correct anything that is wrong
- delete your details
- limit how we use them
- stop using them, if we rely on our legitimate interest
- give you your details in a form you can reuse (this applies because we rely on consent)
You can also withdraw your consent at any time. Email privacy@dueowl.app and write "remove me" from the address you signed up with. We will reply within one month. The launch email will also include a one-click unsubscribe link.
We may need to check it is really you before we act on a request.
9. Complaints
If you are unhappy with how we have used your details, please tell us first so we can put it right.
You also have the right to complain to the Information Commissioner's Office:
- Website: https://ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
10. Changes to this notice
If we change this notice, we will update the date at the top. Before any material change takes effect, we will send you a short notice by email. This is a service message, not marketing. The launch announcement is the only marketing email we will send.