Your data, treated with care.

ISUS LDN LIMITED, Company number 17435650, registered in England and Wales, is the data controller. Questions about this policy or your personal data can be sent to info@isusldn.com.

Depending on how you interact with us, we may collect:

• Your name, email address and marketing preferences when you join The List.
• Order, delivery, payment status and customer-service information when you buy from us.
• Your email address in person at pop-ups through Shopify POS or SumUp when you ask for an electronic receipt.
• If you choose to add your mobile number and agree to texts, your mobile number and the date you agreed.
• Referral codes and referral activity connected to The List.
• Technical information needed to keep the site secure and working.

• To process purchases, issue receipts, fulfil orders and provide customer support.
• To operate The List, calculate queue positions and recognise referrals.
• To send launch and product marketing where you have agreed to receive it.
• To send you a few text messages about Drop 001, such as when your invitation is ready. Texts are optional and only sent if you agree.
• To prevent fraud, protect the site and improve our products and service.
• To meet accounting, tax and other legal duties.

Transactional receipts are sent from noreply@isusldn.com. Marketing is sent from drop@isusldn.com. Receipt collection does not automatically opt you into marketing.

We rely on the following lawful bases under UK data protection law:

• Consent for optional marketing communications.
• Legitimate interests to operate and protect the business, answer enquiries, understand demand and improve our service, where those interests do not override your rights.
• Legal obligation where we must keep records, including transaction and tax records required by HMRC.
• Contract where processing is needed to complete and fulfil your order.

We keep personal data only for as long as it is needed for the purpose collected. HMRC-related transaction and tax records are normally retained for six years. Marketing records are kept until you unsubscribe or withdraw consent, subject to a minimal suppression record so we respect that choice.

We use trusted service providers to run the business. These include Shopify for online and point-of-sale commerce, Zoho Mail for business email, Lovable for website hosting and the database that stores The List sign-ups, and Resend for delivery of our emails. SumUp processes relevant in-person payment and receipt information at participating pop-ups. Providers process data under their own contractual and legal obligations and may use approved international transfer safeguards where required.

A text-message provider, which we will name here before we send any texts.

We do not sell your personal data.

We do not use advertising or analytics cookies or trackers on this website. Shopify and our hosting provider may use cookies that are strictly necessary to run the site and process checkout securely, which do not need your consent. If we add analytics or advertising tools in future, we will ask for your consent first and update this policy.

You may ask to access, correct or delete your personal data, restrict or object to certain processing, or receive a portable copy where applicable. You can withdraw marketing consent at any time.

Email info@isusldn.com or use our data deletion form. We aim to respond within 30 days. We may need to confirm your identity, and some records must still be retained where the law requires it.

You can withdraw text consent at any time using the unsubscribe link or by emailing info@isusldn.com.

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.