Privacy policy

Podkin is operated by an individual founder based in London, United Kingdom. For UK GDPR purposes the founder is the data controller. You can contact the controller at hello@podkin.co.uk.

When you join the waitlist or contact us, we collect a small amount of personal information.

We do not collect IP addresses, device fingerprints, or location data through this site. We do not run advertising trackers (Facebook Pixel, Google Ads, etc.).

Under UK GDPR we process your data on two lawful bases:

• Consent (Article 6(1)(a)) — when you submit the form you give consent for us to email you about Podkin. You can withdraw consent at any time.
• Legitimate interests (Article 6(1)(f)) — to understand demand and respond to your queries. We balance our interest against your right to privacy and only process data minimally.

We keep waitlist data until one of the following:

• You ask us to delete it (we'll do so within 30 days)
• You unsubscribe from our emails (we'll delete within 90 days unless you ask us to keep it)
• The Podkin service shuts down without launching (we'll delete all data within 90 days)
• Two years pass without any contact from you (we'll review and likely delete)

We do not sell your data. We do not share it with third parties for marketing.

We do use third-party services that necessarily process your data on our behalf, listed below. Each is a "data processor" under UK GDPR; we have data processing agreements (DPAs) in place with each as required.

We may also disclose data if required by law (e.g. a court order or regulatory request), but only to the minimum extent required.

Some of our processors (notably Val Town) are based in the United States. Personal data transferred there is protected through Standard Contractual Clauses (SCCs) or equivalent UK-recognised transfer mechanisms. The data we transfer is minimal — typically just an email address and optional free text.

The Podkin website does not currently use cookies, advertising trackers, or similar technologies. We may add basic privacy-respecting analytics in future (e.g. Cloudflare Web Analytics or Plausible) — these don't use cookies, don't track individuals, and don't transmit personal data. If we make any change here, we'll update this policy.

You have the following rights regarding your personal data. To exercise any of them, email hello@podkin.co.uk:

• Right of access — ask for a copy of the data we hold about you
• Right to rectification — ask us to correct anything that's wrong
• Right to erasure ("right to be forgotten") — ask us to delete your data
• Right to restrict processing — ask us to pause certain types of processing
• Right to data portability — ask for your data in a portable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time, with no cost

We aim to respond to all requests within one month, often sooner. There's no charge.

If you're unhappy with how we've handled your data, please email us first — we'd genuinely like the chance to fix it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:

• Website: ico.org.uk
• Phone: 0303 123 1113

We take reasonable steps to protect your data. Form submissions are sent over HTTPS. Data is stored on infrastructure provided by reputable services (Cloudflare, Val Town) with industry-standard security. Access to the data is limited to the founder. We will notify affected people without undue delay if we become aware of a personal data breach.

Podkin is not intended for people under 18. We don't knowingly collect data from children. If you believe a child has submitted information, please email us and we'll delete it.

We may update this policy as Podkin evolves. Material changes will be emailed to people on the waitlist. The "last updated" date at the top of this page shows when the most recent version was published.

Any questions about this policy or how we handle your data, email hello@podkin.co.uk. The founder reads every email personally.