Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

If you have any questions about how we handle your data or wish to exercise any of your rights, please contact us at the email address above.

2. What Data We Collect

When you submit our waitlist / contact form, we collect:

• Name — to address you personally in communications.
• Email address — to send you product updates and marketing communications.
• Message content — any information you voluntarily provide in the message field.
• Consent record — the timestamp and state of your marketing consent checkbox at submission.

We do not collect sensitive personal data (special category data) through this form.

3. How We Use Your Data

We use your personal data for the following purposes:

• Waitlist management — to register your interest in HOST and notify you when information, early access, or launch details become available.
• Marketing communications — with your explicit consent, to send you updates, news, and promotional material about HOST and related UNIOS GROUP LTD products.
• Product testing — with your explicit consent, to invite you to participate in user research, beta programmes, or product testing initiatives.
• Responding to enquiries — to reply to any specific questions or messages you have submitted.

We will not use your data for any purpose beyond those listed above without first obtaining your consent or notifying you of a change in purpose where legally required.

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR Article 6:

• Consent (Art. 6(1)(a)) — for marketing communications and product testing invitations. You may withdraw your consent at any time (see Section 9).
• Legitimate interests (Art. 6(1)(f)) — for responding to direct enquiries and managing the HOST waitlist, where our interest in building and communicating about our product is not overridden by your privacy rights.

5. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes described in this policy, or until you withdraw your consent or request deletion, whichever comes first. In practice:

• Waitlist and marketing data is retained until HOST launches or you unsubscribe, and for no more than 3 years from the date of collection absent renewed engagement.
• Message content is retained for up to 12 months after the relevant enquiry is resolved.

When we no longer have a lawful basis to hold your data, it will be securely deleted or anonymised.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share it only with trusted third-party service providers who process data on our behalf (e.g. email delivery, CRM, hosting), under written data-processing agreements that require them to protect your data to at least the same standard as this policy.

We may also disclose your data where required by law, a court order, or regulatory authority.

Where any third-party processor is based outside the UK, we ensure appropriate safeguards are in place (such as the UK International Data Transfer Agreement or equivalent adequacy decisions) before transferring your data.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These include access controls, encryption in transit (TLS), and limiting data access to staff who need it to perform their role.

No method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, notify you directly.

8. Cookies and Tracking

This waitlist page does not currently use analytics cookies or third-party tracking scripts. If this changes, we will update this policy and, where required by law, obtain your consent before setting any non-essential cookies.

9. Your Rights

Under UK GDPR you have the following rights in relation to your personal data. To exercise any of them, contact us at kieran@unios.co.uk. We will respond within one calendar month.

• Right of access — to receive a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure(“right to be forgotten”) — to request deletion of your data where there is no compelling reason for us to continue processing it.
• Right to restriction — to ask us to pause processing while a dispute is resolved.
• Right to data portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object — to object to processing based on legitimate interests, including direct marketing. We will stop processing your data for direct marketing purposes immediately upon receipt of your objection.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority:

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at kieran@unios.co.uk.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The “Last updated” date at the top of this page will always reflect the most recent version. Where changes are material, we will take reasonable steps to notify you (for example by email if we hold your address).