Privacy Policy
1. Introduction
Welcome to Social Value Bidder. This Privacy Policy explains how Finlay Riggott, trading as Social Value Bidder (“we”, “us”, or “our”), collects, uses, and protects your personal data when you visit our landing page at socialvaluebidder.co.uk (the “Website”) and join our private beta waitlist.
We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. The Data We Collect
As we are currently in a waitlist/pre-launch phase, we collect a minimal amount of data. We may collect, use, store, and transfer the following kinds of personal data about you:
- Technical and Usage Data
- Includes your internet protocol (IP) address, browser type and version, time zone setting and location, operating system, and information about how you use our Website (e.g., page views, button clicks, and session lengths) collected via cookies and similar technologies.
3. Lawful Basis for Processing
Under the UK GDPR, we must have a valid lawful basis to process your personal data. We rely on the following:
- Consent
- We rely on your explicit consent to process your Contact Data when you submit your email address to join our waitlist. You have the right to withdraw this consent at any time.
- Legitimate Interests
- We rely on our legitimate business interests to process Technical and Usage Data to monitor Website performance, analyse user interaction, and improve our upcoming software product. We ensure our interests do not override your fundamental rights and freedoms.
4. Third-Party Processors
We do not sell your personal data. We share your data only with trusted third-party service providers (data processors) required to operate our Website and manage our waitlist. We have agreements in place to ensure they safeguard your data:
- S
Supabase
Used as our secure backend database to store your waitlist Contact Data.
- P
PostHog
Used for product analytics to collect Technical and Usage Data, helping us understand user interactions (page views, clicks) via cookies.
- V
Vercel
Used for web hosting and serving our Website securely.
5. International Data Transfers
Some of our third-party processors may be based outside the United Kingdom (UK) or the European Economic Area (EEA). Whenever we transfer your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- The country has been deemed to provide an adequate level of protection for personal data by the UK Government.
- We use specific contracts approved for use in the UK, such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs), which give personal data the same protection it has in the UK.
6. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for.
- Waitlist Data
- Your Contact Data will be retained until the private beta period concludes and our service officially launches, or until you request to be removed from the waitlist, at which point your data will be securely deleted.
- Analytics Data
- Technical and Usage Data is retained for a limited period in accordance with our analytics provider's standard retention policies, after which it is anonymised or deleted.
7. Your Legal Rights
Under the UK GDPR, you have the following rights regarding your personal data:
- Right to Access
- Request a copy of the personal data we hold about you.
- Right to Rectification
- Request correction of any incomplete or inaccurate data we hold about you.
- Right to Erasure
- Request deletion or removal of your personal data.
- Right to Restrict Processing
- Request the suspension of processing of your personal data.
- Right to Data Portability
- Request the transfer of your personal data to you or a third party.
- Right to Withdraw Consent
- Withdraw your consent at any time where we are relying on consent to process your personal data (e.g., the waitlist).
Complaints: You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
8. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact us at:
Finlay Riggott
trading as Social Value Bidder