1. Who we are
Werva Ltd is the data controller responsible for the personal information covered by this notice. Werva is our public product name.
For privacy questions, requests or complaints, email privacy@werva.app or use our secure contact form and choose “Privacy request or complaint”. Our registered company details are in the Company information section of our Terms.
Werva Ltd is registered with the Information Commissioner’s Office under registration reference ZC267987.
This notice applies to the current pre-launch website, waitlist, contact forms and related administration. It does not describe all future Werva app processing. We will provide appropriate privacy information before app features collect richer personal or life information.
2. Information we collect
Waitlist
Your email address and a normalised copy used to avoid duplicate registrations, signup and update dates, the launch-update wording you agreed to, the Privacy Notice version, the homepage message and example cards shown when you joined, and your waitlist status.
Signup sources
When you submit the waitlist form, we record available source and campaign information, including UTM source, medium, campaign and content, the landing-page address and the referring website. This helps us understand which sources and homepage experiences lead to signups. It is recorded with the signup whether or not you allow optional Google Analytics; it does not depend on analytics cookies.
Contact form
Your email address, optional name, selected topic, message, submission date, Privacy Notice version and the status of our response.
Security and administration
Our forms use temporary security identifiers derived from network and browser information, single-use form tokens and recent submission times to help prevent abuse. The forms database stores an IP-derived identifier rather than the underlying IP address. Website infrastructure may separately process connection information, including IP addresses, in operational or security logs.
For authorised administrator and reviewer accounts, we also process account details, access permissions, login and session information, and records of administrative actions. These help us control access and investigate misuse.
Browser preferences
Your browser stores your cookie choice on your device. If you allow analytics, it also stores the homepage message variant so your experience stays consistent. These preference values alone do not identify you.
Basic Werva site statistics
We collect limited first-party statistics solely to understand and improve this website: daily page-view totals for public pages and aggregate Google Analytics choices. Where trusted request information is available, a temporary pseudonymous value helps avoid repeatedly counting the same approximate visitor within a UTC day. It changes each day and is kept separately from page totals.
We do not store raw IP addresses, full browser User-Agent strings, emails, referrers or URL parameters in our statistics tables. We do not create visitor profiles or individual page journeys, link the temporary value to waitlist membership, or use this system for advertising or identifying you. Individual visitor information from this system is not shared with Google or other third parties for their own use; our hosting providers process it only to operate the service.
Optional Google Analytics
If you allow analytics, Google Analytics may collect page views, sessions, traffic sources, approximate location, browser and device information, and interaction events. This can include the homepage variant and example cards shown and whether a waitlist signup succeeds.
We do not send your name, email address, contact message or other directly identifying form fields to Google Analytics. Our implementation disables Google Signals and advertising-personalisation features.
You choose whether to join the waitlist or contact us. We need an email address to send requested launch updates, and an email address, topic and message to handle a form enquiry; your name is optional. Please do not include sensitive personal information in the contact form. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
3. Why we use information
Waitlist consent and Google Analytics consent are separate. Refusing Google Analytics does not affect your place on the waitlist or turn off basic Werva statistics. You can turn basic statistics off separately in Cookie settings. You can withdraw consent or object to processing as explained below.
4. Protecting your email address
We do not sell personal information or rent waitlist or contact information.
We do not provide full waitlist email addresses to investors, endorsing bodies, prospective funders, commercial partners or similar external organisations merely to prove demand, traction or signup numbers.
Where we need to demonstrate genuine waitlist activity to authorised professional reviewers, advisers or prospective funders, we use aggregate, pseudonymous or deliberately privacy-minimised evidence as appropriate. This can include Werva references, limited email hints, signup dates and source or status information. A pseudonymous reference replaces the email address with a code; it does not mean that every record is anonymous.
Reviewer access to our Evidence Console and its privacy-minimised exports does not provide complete waitlist email addresses. Selected service providers may still process full addresses on our instructions where needed to operate, secure or communicate through the service. Legal disclosures and genuine business transactions are explained in the next section.
7. How long we keep information
We keep information only for as long as needed for its purpose. When deciding how long, we consider whether the waitlist or enquiry is still active, your requests, the need to demonstrate consent or honour an unsubscribe, and any security, legal or dispute-resolution requirement.
- Waitlist records: while needed to manage the pre-launch waitlist and requested launch communications. If you withdraw, we stop those communications and remove information no longer needed. A minimal suppression or consent record may remain where needed to honour your choice or meet a legal obligation.
- Contact messages: while needed to answer and follow up your enquiry, with relevant records kept longer only where needed for a legal duty or claim.
- Temporary form-security records: tokens become eligible for deletion after approximately 30 minutes and rate-limit records after 24 hours. Cleanup takes place as forms are used.
- Basic site statistics: temporary daily deduplication values are deleted after the UTC day ends, at the next hourly cleanup while the application is running (normally within 25 hours of collection). If the service is interrupted, cleanup resumes when it starts. Aggregate daily totals may be retained to understand changes and improve the website; they contain no visitor identifiers.
- Cookie preference: stored on your device until you update or clear it. Google Analytics consent expires after 180 days; the saved basic-statistics preference is kept to remember your choice. The saved homepage variant remains until analytics is withdrawn or your browser storage is cleared.
- Analytics, operational and access records: for as long as reasonably needed to measure website performance, manage access, investigate security issues or meet legal requirements. Provider retention settings apply to provider-held data; aggregate reports may be kept longer than individual event records.
To leave the waitlist or withdraw launch-update consent, email privacy@werva.app or use the contact form. Once marketing emails begin, each will include an unsubscribe link. Withdrawing consent does not affect the lawfulness of earlier processing.
8. How we protect information
We limit access to people who need it and use safeguards designed to protect information in transit and reduce unauthorised access and automated abuse. We review these measures as Werva develops. No online service can promise absolute security.
9. Your rights
Depending on the circumstances and the lawful basis, you may ask for access, correction, deletion, restriction or portability of your information, or object to processing based on legitimate interests. Not every right applies in every situation.
Your right to object: you can object to direct marketing at any time and we will stop it. You can also object to uses based on legitimate interests; we will consider your circumstances and the applicable legal requirements.
Where we rely on consent, you may withdraw it at any time. For Google Analytics, use “Cookie settings”, switch “Google Analytics” off and save. To object to basic site statistics, switch “Basic site statistics” off and save; “Turn both off” stops both. For other privacy requests, email privacy@werva.app or choose “Privacy request or complaint” on the contact form. We may need to verify your identity and will respond without undue delay within the period required by law.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You can contact us first so we can try to resolve the issue, but you do not have to do so to exercise your right to complain.
10. Children
This pre-launch website is not directed at children under 13 and we do not knowingly collect their personal information. A separate assessment and appropriate privacy information will be provided before any future app features intended for younger users are offered.
11. Changes to this notice
We will update this notice when our website practices change and provide appropriate information before the Werva app processes additional categories of information. Material changes will be highlighted here and, where appropriate, communicated to affected people.