How we look
after your data.

This is a teaser site. You're either curious about an app that's coming, or you want to be told when it goes live. Either way, we want you to know what we do with the small amount of data we collect — in plain English first, and then with the legal bits underneath.

Who we are

"We Love Soho" is operated by We Love Soho Ltd (company number TBC, registered in England & Wales), trading from Soho, London W1. For data-protection purposes we are the data controller for the information described in this notice.

You can reach our data team at privacy@welovesoho.co.uk.

What we collect

On this teaser site, we collect a deliberately small amount of information when you sign up to the launch list:

• Your email address. The whole point of the form.
• Your audience choice (resident, visitor, or Soho business). So we can send you the right launch note.
• If you tell us you run a business: venue name and venue type, so we can prepare a founding-member offer that makes sense for you.
• Technical metadata at the moment you submit — IP-derived country, the page you came from, and any UTM tags in the URL. We use this to count signups by source and country; we don't use it to identify you.
• The date and time you signed up, and the date you confirmed your email.

That's it. We don't ask for your name, your phone number, or anything else on the teaser. The full app — when it launches — will collect more (it has to, to do its job), and we'll publish a separate privacy notice for the app at that point.

Why we collect it

We rely on two lawful bases under the UK GDPR:

Consent (for sending you the launch email)

When you submit the form and then click the confirmation link in the email we send, you're giving us your consent to email you when the app launches. We use double opt-in — meaning a confirmation click is required before you're on the list — so that we never email anyone who didn't ask to be emailed. You can withdraw consent at any time using the unsubscribe link in the email, or by emailing privacy@welovesoho.co.uk.

Legitimate interest (for understanding signups in aggregate)

We use the technical metadata above — country, source, audience mix — to understand the shape of pre-launch interest. We balance this against your privacy by collecting the minimum possible (no IP addresses stored, just country), and by never using it to make decisions about you individually.

Who we share it with

The short answer is "almost no-one." Specifically:

• Our email-sending provider (currently Resend, hosted in the EU). They process your email address on our behalf to deliver the confirmation email and, later, the single launch email. They don't use your data for anything else and are bound by a data-processing agreement.
• Our infrastructure providers — Cloudflare (anti-abuse, CDN) and our database host (Cloudways, EU region) — which incidentally process data as it moves through their systems.
• Authorities, if we're required by law (we'll push back where we can).

We do not sell your data. We do not share it with advertisers. We do not hand it to "data partners" or "marketing affiliates." If that ever changes, it'll be because the law forces it, or because we ask you first.

How long we keep it

We hold signup data until the earlier of:

• You unsubscribe, in which case we delete your email from the active list within 14 days and keep a hashed record of the unsubscribe itself (so we don't accidentally re-email you) for 24 months;
• 24 months after the app's general launch, by which point the teaser list has done its job and we'll either migrate confirmed subscribers onto the app's own marketing preferences or delete the record.

Aggregate, non-identifying statistics (e.g. "we had X signups from Y country") may be retained indefinitely.

Cookies and analytics

We try to be one of the few sites that doesn't make you click through a cookie banner. We can do that because we use:

• No advertising cookies.
• No cross-site trackers.
• No social-network pixels (no Facebook pixel, no LinkedIn Insight, no TikTok pixel, etc).
• Plausible Analytics for understanding overall traffic. Plausible is cookieless, GDPR-friendly, and hosted in the EU; it doesn't track individual users and we can't see your browsing history.
• Cloudflare Turnstile for stopping bot signups. Turnstile is privacy-friendly by design and is not used for ad tracking.
• Strictly-necessary first-party cookies for things like preserving your theme choice and keeping the form usable. These are exempt from consent requirements under UK law.

Your rights

You have the rights you'd expect under UK GDPR:

• To access the personal data we hold about you;
• To correct it if it's wrong;
• To delete it (yes, even after you've confirmed — just ask);
• To restrict or object to our processing of it;
• To get a portable copy in a machine-readable format;
• To withdraw consent at any time — the unsubscribe link in any email does this in one click.

If you'd like to exercise any of these, email privacy@welovesoho.co.uk and we'll respond within 30 days (usually much faster). You also have the right to complain to the Information Commissioner's Office, but we'd prefer the chance to make it right first.

Changes to this policy

We'll update this notice as the product evolves — most obviously when the app itself launches, at which point we'll publish a fuller in-app privacy notice. We won't make changes that materially affect existing teaser-list subscribers without telling you in the next email we send (which, given we only plan to send one, will be the launch email).

Getting in touch

For anything privacy-related — questions, requests, complaints, or just to tell us we got something wrong — the email below reaches a real human at We Love Soho.