Privacy Policy
Last updated: 14 June 2026
This Privacy Policy explains how [LEGAL ENTITY NAME] (“Shutl”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you visit shutl.co.uk (the “Site”) or join our waitlist. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller responsible for your personal data is [LEGAL ENTITY NAME], a [company registered in England & Wales, company no. XXXXXXXX / sole trader] with a registered/contact address at [REGISTERED ADDRESS].
If you have any questions about this policy or how we handle your data, contact us at hello@shutl.co.uk.
2. The data we collect
We only collect the data we need. Depending on how you use the Site, this includes:
- Waitlist data — the email address you provide when you join our waitlist.
- Technical data — when you visit the Site, our hosting and infrastructure providers may automatically log your IP address, browser type, device information, and pages accessed, for security and to keep the Site running.
- Communications — if you email us, we keep a record of that correspondence.
We do not intentionally collect special category data (such as health, ethnicity, or political opinions), and we do not knowingly collect data from anyone under 16.
3. How and why we use your data
| Purpose | Data used | Lawful basis (UK GDPR) |
|---|---|---|
| Add you to the waitlist and email you launch, product, and availability updates | Email address | Consent (Art. 6(1)(a)) |
| Operate, secure, and maintain the Site | Technical data | Legitimate interests (Art. 6(1)(f)) |
| Respond to your enquiries | Communications | Legitimate interests (Art. 6(1)(f)) |
You can withdraw your consent at any time by clicking the unsubscribe link in any of our emails, or by emailing hello@shutl.co.uk. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
4. Who we share your data with
We never sell your personal data. We share it only with trusted service providers (“processors”) who help us run the Site and our waitlist, under contracts that require them to protect your data:
- Supabase — database hosting, where waitlist email addresses are stored.
- Vercel — website hosting and content delivery.
- [EMAIL PROVIDER, e.g. Resend / Mailchimp] — to send waitlist and launch emails (add once configured).
We may also disclose data where required by law, or to protect our legal rights.
5. International transfers
Some of our providers (such as Supabase and Vercel) may process data on servers outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries with UK ‘adequacy’ status.
6. How long we keep your data
We keep your waitlist email address until you ask us to remove it, or until we close the waitlist and no longer need it — whichever comes first. Technical logs are kept for a short period for security and diagnostics. We keep email correspondence only for as long as needed to handle your enquiry and any follow-up.
7. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to erase your data (“right to be forgotten”);
- restrict or object to our processing of your data;
- ask us to transfer your data to another provider (data portability);
- withdraw consent at any time.
To exercise any of these rights, email hello@shutl.co.uk. We will respond within one month.
8. Cookies
The Site currently uses only essential cookies needed to function. For full details, see our Cookie Policy.
9. How to complain
If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be communicated where appropriate.