TrendSwypePrivacy policy
This policy explains how TrendSwype collects and uses personal data through this website, as required by Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. The TrendSwype app will have its own privacy policy, published here before the app launches.
1. Who we are
The controller of your personal data is TrendSwype, Dublin, Ireland. You can contact us about anything in this policy, including your rights, at info@trendswype.com. We are not required to appoint a Data Protection Officer; questions about data protection go to the same address.
2. What we collect, why, and our legal basis
| Personal data | Purpose | Legal basis (GDPR Article 6(1)) |
|---|---|---|
| Name, email address, whether you are a shopper, brand, retailer, creator or press, country (optional) and message (optional), from the waitlist and contact form | To tell you when the app launches and to reply to your enquiry | (a) Your consent, given by ticking the box on the form. You can withdraw it at any time. |
| Your email address and the content of emails you send us | To answer your email and keep a record of the conversation | (f) Our legitimate interest in replying to people who contact us |
| Technical data processed by our hosting provider when you visit, such as IP address, browser type and time of request | To deliver the website, keep it secure and protect it from attacks | (f) Our legitimate interest in running a secure website |
Where we rely on legitimate interests, we have checked that they are not outweighed by your rights. You can object at any time (section 6).
You don't have to give us any personal data. If you don't fill in the form, we simply can't add you to the waitlist or reply to you.
We don't use this data for automated decision-making or profiling, we don't use it for advertising, and we don't sell it.
3. Who we share it with
We share personal data only with service providers that process it on our behalf, under written contracts that meet Article 28 GDPR:
- Cloudflare, Inc.: website hosting and security.
- Supabase, Inc.: the database that stores waitlist and contact form entries. The database is hosted in Ireland (AWS eu-west-1).
- Our email service provider: to send and receive email at info@trendswype.com.
We may also disclose personal data where the law requires it, for example to a court or regulator.
4. Transfers outside the European Economic Area
Some of these providers are based in the United States or may access data from outside the EEA for support or security. Where personal data is transferred outside the EEA, the transfer is protected by an adequacy decision of the European Commission (including the EU–US Data Privacy Framework, where the provider is certified) or by the Commission's standard contractual clauses. You can ask us for details at info@trendswype.com.
5. How long we keep it
- Waitlist and contact form entries: until you ask us to delete them or withdraw your consent, and in any case no longer than 24 months after our last contact with you.
- Emails: up to 24 months after the conversation ends, unless we need them longer to deal with a legal claim.
- Hosting and security logs: kept by Cloudflare for its standard short retention period.
6. Your rights
Under the GDPR you have the right to:
- access your personal data and get a copy (Article 15);
- have inaccurate data corrected (Article 16);
- have your data erased (Article 17);
- restrict how we use it (Article 18);
- receive it in a portable format (Article 20);
- object to processing based on our legitimate interests (Article 21); and
- withdraw your consent at any time, without affecting what we did before you withdrew it (Article 7(3)).
How to make a request. Email info@trendswype.com, ideally from the address you gave us, and tell us what you'd like us to do. If we need to confirm your identity, we'll ask. We'll respond within one month of receiving your request. If a request is complex, we may extend this by up to two further months, and we'll tell you why within the first month. When we erase your data, we delete it from our database and mailbox and confirm by email. Making a request is free, unless it is manifestly unfounded or excessive.
7. Complaints
If you're unhappy with how we've handled your data, please contact us first. You also have the right to lodge a complaint with the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland (dataprotection.ie), or with the data protection authority in the EU country where you live or work.
8. Security
The website uses HTTPS encryption. Form entries are stored in a database that the public can add to but cannot read, change or delete; only TrendSwype can access them.
9. Age
TrendSwype is for adults. Please don't use the form if you are under 18.
10. Changes to this policy
If we change this policy, we'll update the date at the top of this page. If a change is significant, we'll tell people on the waitlist by email.