Privacy policy

This policy explains what personal data Sustena collects through this website, why, and what you can do about it. We collect as little as we can.

Who we are

Sustena is a trading name of [Company name], a company registered in England and Wales (company number [Company number]), registered office [Registered address]. We are the data controller for the personal data described here. ICO registration number: [ICO registration number].

Contact us about anything in this policy at [Privacy contact email].

What we collect

At this stage the website only collects data when you join the waitlist or use the deletion form below.

• Your email address, when you join the waitlist.
• A record of your consent: the date and time you ticked the consent box and the IP address it was submitted from. We keep this so we can show you agreed to hear from us.
• Whether you open or click our emails, which our email provider records as standard.

We don’t ask for your name, health information or anything else, and we don’t buy or receive lists from anyone.

Why we use it, and our lawful basis

We use your email address to send you what you signed up for: launch news, early access and launch pricing, and the research notes behind the formulation. Our lawful basis is your consent, which you can withdraw at any time.

We keep the consent record because we have a legal obligation to be able to show that we had consent to email you.

Who processes it for us

• MailerLite (UAB MailerLite, Lithuania) stores the waitlist and sends our emails.
• Cloudflare runs Turnstile, the security check on our forms that keeps out automated spam. It processes technical information about your browser to do this.
• Vercel hosts the website and processes standard server logs, such as IP addresses, to keep it running and secure.

Some of these providers may process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by the International Data Transfer Addendum to the EU Standard Contractual Clauses.

We never sell your data or share it for anyone else’s marketing.

How long we keep it

We keep your email address until you unsubscribe or ask us to delete it. If you unsubscribe, we keep your address on a do-not-contact list only so we don’t email you again by mistake. [Confirm retention period for inactive subscribers.]

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you
• have it corrected if it’s wrong
• have it deleted
• restrict or object to how we use it
• receive it in a portable format
• withdraw your consent at any time — every email has an unsubscribe link

To use any of these rights, email [Privacy contact email]. We’ll respond within one month.

You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.

Delete your data

Enter the email address you signed up with and we’ll remove it from our list straight away. All data linked to it is then permanently erased from our email provider’s systems within 30 days. For security, we don’t confirm whether an address was on the list.

Email address to delete

Delete my data

Changes to this policy

If we change how we use your data, we’ll update this page and the date at the top. If the change is significant, we’ll email you first.