Privacy Policy

This Privacy Policy explains how Vestry ("Vestry", "we", "us", "our") collects, uses, stores and protects personal information you provide when joining our pre-launch waitlist or otherwise interacting with our website. We are committed to protecting your privacy and handling your data in line with the UK GDPR and Data Protection Act 2018.

1. Who we are

Vestry is a pre-launch venture run by [Vestry — entity TBC], registered in England and Wales. For the purposes of UK and EU data protection law, we are the data controller of your personal information.

Contact for any privacy-related queries: [contact@vestry.placeholder]

2. What we collect

When you join our waitlist or express investor interest, we collect:

• Name
• Email address
• Invite code used (where applicable)
• Investor type (where applicable)
• Any optional message you send us
• Technical data such as IP address, browser type and timestamps, collected automatically by our hosting infrastructure for security and abuse prevention

3. Why we collect it

• To manage our waitlist and prioritise access at launch
• To contact you about Vestry's launch and related product updates
• To verify and prevent misuse of invite codes
• To respond to enquiries about investing in Vestry
• To comply with legal obligations

Our lawful basis is your consent (which you give by submitting a form) and our legitimate interest in operating and securing the waitlist.

4. Where your data is stored

Your data is stored securely on infrastructure provided by Lovable Cloud (powered by Supabase), hosted within the European Union. Access is restricted to authorised personnel only.

5. Who we share it with

We do not sell your personal data. We do not currently share your information with any third-party marketing or analytics providers. If we add an email-marketing or analytics provider in future, we will update this policy and, where required, seek your consent.

6. How long we keep it

We retain waitlist data until Vestry launches and for a reasonable period thereafter to contact you about your access. You may request deletion at any time. Investor enquiry records may be kept longer where we have a legitimate business interest in doing so.

7. Your rights

Under the UK GDPR you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Request a portable copy of your data
• Withdraw your consent at any time
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email [contact@vestry.placeholder].

8. Cookies

We use only essential cookies required for the site to function. We do not currently use analytics, tracking or advertising cookies. See our Cookie Notice for details.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS) and access-controlled databases. No method of transmission over the internet is 100% secure, but we work continuously to protect your information.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when changes were last made. Significant changes will be communicated to waitlist members by email.