Privacy Policy

This policy explains how ActApp Limited ("ActApp", "we", "us" or "our") collects, uses and protects personal data when you visit this website, join our waitlist, or otherwise get in touch with us. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What personal data we collect

We only collect personal data that you choose to give us. Depending on how you interact with the site, this may include:

• Your name and email address, when you join the waitlist or submit an enquiry through our form;
• Any other information you voluntarily include in a message to us;
• Standard technical data generated by your browser when you visit the site (such as IP address, device and browser type), which is processed by our hosting provider for security and performance purposes.

We do not knowingly collect any special category data (e.g. health, ethnicity, religion) and ask that you do not include such information in any message to us.

2. How we use your data

We use the personal data described above to:

• Respond to your enquiries and provide the information you requested;
• Notify you about early access, product updates and launch announcements if you joined our waitlist;
• Keep our website secure and understand basic, aggregated site performance.

3. Our legal basis for processing

We rely on the following legal bases under UK GDPR Article 6:

• Consent — waitlist signups are a form of marketing communication, so the Privacy and Electronic Communications Regulations (PECR) require your specific consent before we send you launch notifications or pre-launch updates. We do not rely on legitimate interests for this — when you submit the waitlist form, you are actively consenting to us holding your name and email and contacting you about ActApp's launch;
• Legitimate interests — for basic technical/security logging needed to keep the site running safely. This does not extend to marketing communications.

Where we rely on consent, you can withdraw it at any time by contacting us or unsubscribing — see Section 8 below.

4. Who we share data with, and where it's stored

We do not sell your personal data. We share it only with the third-party service providers ("processors") that help us run this website:

• Tally (tally.so) — powers our waitlist and contact form, and is where your name and email are stored once you sign up. Tally processes and stores this data in the UK/EU, so no international transfer safeguard is currently required for waitlist data;
• Netlify (netlify.com) — hosts this website.

If we change processors, or a processor stores data outside the UK/EEA, we will update this policy and name the safeguard relied on (such as the UK International Data Transfer Addendum or the EU-US Data Privacy Framework's UK extension), as required by UK GDPR.

5. Cookies

This site does not use its own analytics or advertising cookies. Our embedded waitlist/contact form (provided by Tally) may set essential cookies needed for the form to function correctly. If we introduce analytics or marketing cookies in future, we will update this policy and, where required, ask for your consent first.

6. Data retention

We keep personal data submitted through our forms only for as long as necessary to respond to your enquiry or to keep you updated on ActApp's launch. For waitlist signups specifically, we keep your name and email until launch plus a further 12 months, or until you unsubscribe or ask us to delete it sooner, whichever comes first — unless we are required to keep it longer by law.

7. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including relying on reputable providers (Netlify, Tally) that maintain their own industry-standard security controls.

8. Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you and receive a copy of it (right of access);
• Ask us to correct inaccurate data (right to rectification);
• Ask us to delete your data (right to erasure);
• Ask us to restrict or object to certain processing;
• Ask for your data to be moved to another provider (right to data portability);
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email lisa@hoerning.co.uk. We will respond within one month. If you are unhappy with how we handle your data, you also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO).

9. Children's privacy

This website and our waitlist are intended for adults making decisions on behalf of families and children who use the ActApp product. We do not knowingly collect personal data directly from children through this site.

10. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or for legal reasons. The "last updated" date at the top of this page shows when it was last revised. Continued use of the site after changes means you accept the updated policy.

11. Contact us

If you have any questions about this policy or how we handle your personal data, contact us at lisa@hoerning.co.uk.