Your privacy, respected.

Optional website analytics

Only if you accept analytics, we use Google Analytics 4 to understand visits to our public pages and accepted UK launch signup requests. Analytics consent is separate from permission for launch emails. You can browse, contact us and join the waitlist without accepting analytics.

Google receives public page paths, a limited public search or AI referral origin, technical browser/device information, activity timestamps and random first-party cookie identifiers. Its servers also receive connection information when contacted. We do not send email addresses, form contents, dog information, Klaviyo identifiers or confirmation tokens to Analytics. Query strings, URL fragments and unknown page paths are excluded from our measurement. An accepted signup request is not proof of email confirmation or confirmed membership.

We use consent as the basis for this optional processing. Google Analytics is provided under our UK service agreement with Google Ireland Limited. Google and its subprocessors may process information outside the UK. The Google data processing terms describe applicable transfer safeguards; see how Google uses information from sites using its services and Analytics data safeguards. We do not enable advertising personalisation, Google signals, enhanced conversions or user-provided data collection.

Your choice and the Analytics cookies used here expire after no more than 90 days. We use the shortest standard user/event retention setting of two months; this setting does not impose the same expiry on aggregate reports or Google’s operational records. You can reject or withdraw using Cookie settings. Withdrawal stops future collection, removes this installation’s Analytics cookies and reloads the page. It does not undo processing already carried out. For data-rights requests, contact hello@wildryn.dog.

First-party anti-spam protection

When you press Join waitlist, our website runs a short automated proof-of-work check using the self-hosted, open-source ALTCHA library. The code and challenge are served by WILDRYN. We do not use ALTCHA Cloud, contact an ALTCHA service, or load Cloudflare Turnstile for this form. The check does not set cookies, save browser identifiers, fingerprint your device or grant permission for analytics.

Our server signs a challenge, ties it to the requested email using a keyed hash, and checks the solution before contacting Klaviyo. Challenges expire after five minutes. Upstash Redis holds short-lived random challenge identifiers, keyed hashes of email addresses and IP addresses, and request counters to reject reused checks and limit repeated submissions. We do not send raw form email addresses or visitor IP addresses to Upstash in these records. Keyed hashes are pseudonymous information, not a claim of anonymisation. These security records expire automatically within ten minutes.

The Redis database is configured in London. Upstash, Inc. is a US provider; support, security logs, backups and subprocessors may involve international processing. See its privacy policy and data processing addendum for processing and transfer safeguards. Vercel still receives connection information when hosting the website. We rely on our legitimate interest in securing the requested signup service for this limited anti-spam processing, not on optional advertising or analytics consent.

No extra security checkbox is required. If the check cannot complete, you can retry or email hello@wildryn.dog to request launch emails instead. We do not log raw email addresses, proof payloads, connection addresses or private keys in the website’s application logs.

Who is responsible

WILDRYN LTD, company 17423314, registered in England and Wales, is the controller for this launch website and its UK launch waitlist.

Registered office and postal contact: 66 Paul Street, London, EC2A 4NA, United Kingdom. For privacy questions or requests, contact hello@wildryn.dog.

What we collect and why

The waitlist asks only for your email address. Pressing Join waitlist is your affirmative request for WILDRYN’s UK launch emails, as explained immediately below the button; no checkbox is pre-selected or needed. Klaviyo records your subscription status, confirmation, consent wording/version, source and purpose, and the signup action. Service providers also receive technical information needed to handle requests, such as IP address and browser information.

With your consent, we use your email to send a confirmation request and emails about WILDRYN’s UK launch only. Joining does not subscribe you to a general newsletter, reserve stock or place an order. Confirm your email before receiving launch emails.

If you email us, we use your address, message and any information you choose to provide to answer your enquiry, based on our legitimate interest in responding. Please do not send unnecessary sensitive information. Essential hosting and security processing supports our legitimate interest in operating a reliable, secure website. Where necessary, we also process limited information to comply with legal obligations or establish, exercise or defend legal claims.

Who processes your information

Authorised WILDRYN personnel and necessary service providers have access for their respective tasks. Vercel hosts the website; Klaviyo manages the waitlist, confirmation and launch emails; Google Workspace handles messages sent to our contact mailbox. No payment or shipping information is collected by this launch website. We do not sell waitlist addresses.

Klaviyo stores customer data in the United States and uses subprocessors. Its data processing agreement is incorporated into its service terms and provides international-transfer safeguards, including the UK Addendum to standard contractual clauses where applicable. See its privacy FAQs.

Vercel and Google may process data internationally through their infrastructure and subprocessors, not exclusively in the UK. Their contractual transfer safeguards are described in the Vercel DPA and Google Workspace data processing terms. Contact us for information about applicable safeguards or a copy.

How long information is kept

We will remove launch-only waitlist data no later than six months after the UK launch, unless you separately give new permission for another purpose. Unconfirmed requests will also be cleared by that deadline. You can withdraw earlier. A minimal opt-out record may be retained only as needed to respect your objection and avoid contacting you again; it is not permission to market to you.

Simple email enquiries are deleted no later than 12 months after resolution. Order records, supplier contracts, disputes and information subject to legal retention obligations are outside that enquiry schedule and are handled according to the applicable purpose and obligation.

Technical logs and backups have provider-specific retention cycles. We do not intentionally log form email addresses in the website’s application logs. Hosting logs are reviewed only for operation, security or troubleshooting; any information needed for a specific incident is retained only while necessary to investigate or address the incident. Provider security and backup records may remain for their documented operational or legal retention periods.

Your choices and rights

You can leave at any time using the unsubscribe link in an email or by contacting hello@wildryn.dog. Withdrawing consent does not affect processing already lawfully carried out. Unsubscribing may apply to all WILDRYN marketing email through Klaviyo, not just one list.

Subject to applicable conditions, you can request access, correction, erasure, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent. We may ask for proportionate verification. We normally respond within one month, with any lawful extension explained. There is no automated decision-making or profiling producing legal or similarly significant effects in this waitlist.

You may complain to the UK Information Commissioner’s Office (ICO). Where EU data-protection law applies, you can also contact the supervisory authority where you live, work or believe a breach occurred, including the CNIL in France. You do not need to contact us first.