Privacy Policy

Version 0.5.0 · Last updated 2026-10-13

Who we are

What this policy covers

This policy explains how we use your personal information when you visit our website, zolop.co.uk, join the Zolop waitlist, or email us. The Zolop app is not yet available, and this policy does not cover it. Before anyone can create a Zolop account, we will publish the app's own privacy information and terms.

Waitlist

If you join the Zolop waitlist on zolop.co.uk, we store your email address (trimmed and in lower case), the version of the consent wording you agreed to, the time you joined and, if the link you followed to zolop.co.uk included a campaign label (a short code such as "tiktok-bio"), that label. We do not store your name, IP address or browser details with your waitlist entry, although our website host processes your IP address when you visit (see Data sharing and processors). Joining the waitlist does not create a Zolop account. If you join again with the same email address, we keep your original entry. Giving us your email address is voluntary, but you cannot join the waitlist without giving it and ticking the consent box. We use your email address only to contact you about Zolop's launch and early access. We rely on your consent, which you give by ticking the unticked box on the form, and you can withdraw it at any time. Joining the waitlist is consent only to emails about Zolop's launch and early access, not to any other marketing emails. We use the campaign label only to understand which of our posts and links people join the waitlist from, and not for behavioural advertising, profiling or unrelated analytics. For that we rely on our legitimate interests, and you can object at any time by emailing zolopofficial@gmail.com, in which case we will remove the label from your entry. We have not sent any waitlist emails yet, and we will not send marketing or bulk email to the waitlist until this policy names the email service we use to send waitlist emails, and every email includes a way to unsubscribe. To leave the waitlist or withdraw your consent, email zolopofficial@gmail.com and tell us the email address you joined with. Until a self-service unsubscribe option exists, an authorised member of our team removes your entry from our database by hand, following a documented procedure, and we aim to do this within 7 days of receiving your request. This target does not replace any of your rights or any deadline under UK data protection law. We keep your waitlist entry until the earlier of you asking to leave or 12 months after Zolop's public launch. If we close the waitlist for good without launching Zolop, we will delete every entry within 30 days of closing it. Waitlist entries are stored in our Supabase database in London, in the United Kingdom. The website you join through is hosted by Vercel, so your sign-up passes through Vercel's servers, which may be outside the UK, including in the United States, before it is stored (see Data sharing and processors and International data transfers).

Data we collect

We collect the information you give us when you join the waitlist (your email address and a record of your consent), the campaign label in the link you followed to join, if there was one, the emails you send us and our replies, and the technical request data, such as your IP address, that our website host processes when you visit zolop.co.uk. The Waitlist and Data sharing and processors sections explain each of these.

Cookies and your device

On our website, zolop.co.uk, including the waitlist, we do not use analytics or advertising tools, and we do not set cookies or store other information on your device.

Purposes of processing

We use your information to contact you about Zolop's launch and early access if you join the waitlist, understand which of our posts and links people join the waitlist from, operate, deliver and protect our website and the waitlist (including stopping fake or automated sign-ups), reply to messages you send us, and respond to data protection requests and meet our legal obligations. We do not make any decision about you based solely on automated processing that has a legal or similarly significant effect on you.

Legal basis for processing

Under UK data protection law, we rely on the following lawful bases, where they apply. Consent: to keep your email address on the waitlist and email you about Zolop's launch and early access, as described in the Waitlist section. You give consent by ticking the unticked box on the waitlist form, and you can withdraw it at any time. Withdrawing consent does not affect processing that happened before you withdrew it. Legitimate interests: to operate, deliver, secure and protect our website and the waitlist, including the technical request data, such as IP addresses, that this involves; to prevent fraud and abuse, such as fake or automated sign-ups; to understand which of our posts and links people join the waitlist from, using the campaign label described in the Waitlist section; to reply to messages you send us; and to enforce our Terms and protect Zolop and the people who use it. We rely on these interests only where they are not overridden by your rights and interests. Legal obligation: where applicable, to respond to data protection requests and to comply with the law, including keeping the records we need to show that you consented, that you withdrew your consent, or how we handled your request.

Data sharing and processors

We share information with service providers who help us run our website and the waitlist. They handle personal information for us to provide their services, except where we say otherwise below. We do not sell your personal information. Vercel hosts zolop.co.uk. It delivers the website through its global network and runs the code that receives your waitlist sign-up and passes it to our database, so it processes what you submit and technical request data such as your IP address. Vercel also uses some technical and usage data for its own purposes, such as security and improving its service, under its own privacy notice. Supabase is our database provider and stores waitlist entries in its London region in the United Kingdom. Google provides the Gmail inbox for zolopofficial@gmail.com: emails you send us there, and our replies, are handled by Google under its own terms and privacy policy, and we do not have a data processing agreement with Google for that inbox.

International data transfers

We are based in the United Kingdom, and waitlist entries are stored by Supabase in London. Some of our providers process personal information outside the UK: Supabase may process some data outside the UK to run, support and secure its service: it stores service logs in the European Union, its support staff, who are located around the world, may access data when needed to support the service, and it transfers data to Singapore and the United States. Its data processing addendum includes the EU Standard Contractual Clauses with the UK International Data Transfer Addendum. Vercel is a US company whose primary processing facilities are in the United States, and it delivers the website through a global network. Its data processing addendum includes the EU Standard Contractual Clauses with the UK International Data Transfer Addendum, and Vercel states that it is certified under the UK Extension to the EU-US Data Privacy Framework. Google may process emails sent to our Gmail inbox in the United States and other countries. Google LLC states that it is certified under the UK Extension to the EU-US Data Privacy Framework. Where personal information is transferred outside the UK, we rely on a transfer mechanism recognised by UK data protection law: UK adequacy regulations, including the UK-US data bridge for US organisations certified under the UK Extension to the EU-US Data Privacy Framework, or the EU Standard Contractual Clauses with the UK International Data Transfer Addendum in the provider's data processing terms. You can ask us for more information, or for a copy of the relevant safeguard, at zolopofficial@gmail.com.

Data retention

Waitlist: we keep your waitlist entry until the earlier of you asking to leave or 12 months after Zolop's public launch. If we close the waitlist for good without launching Zolop, we will delete every entry within 30 days of closing it. After we delete an entry, a copy may remain in our database provider's backups until they are overwritten in its normal backup cycle. Website request data: technical request data processed by our hosting provider when you visit zolop.co.uk, such as your IP address, is kept for the periods set by that provider's service, which depend on the hosting plan in use. We do not keep our own copy of it. Privacy requests: we keep emails about data protection requests, including your request to withdraw your consent or to be removed from the waitlist, and our replies, for as long as they are needed to respond and to show that we complied with the law. Other emails: we keep other emails you send us, and our replies, for as long as we need them to deal with your message and any follow-up.

Your rights

Under UK data protection law you have the following rights, where they apply: to access the personal information we hold about you; to have inaccurate information corrected (rectification); to have your information erased; to restrict how we use it; to object to how we use it; to receive it in a portable format (data portability); and, where we rely on consent, to withdraw your consent at any time. Not every right applies in every situation. Your right to object: where we rely on legitimate interests, you can object at any time by emailing zolopofficial@gmail.com. To make a request, email zolopofficial@gmail.com. We will normally respond within one month, subject to UK data protection law. If you are unhappy with how we have used your personal information, you can complain to us by emailing zolopofficial@gmail.com. We will acknowledge your complaint within 30 days of receiving it, look into it, keep you updated, and tell you the outcome without undue delay. Where applicable, you can also complain to the Information Commission, the UK's data protection regulator, which is known as the ICO (see Contact and regulator information).

Children's privacy

The waitlist is only for people aged 13 or over. The waitlist is not intended for children under 13, and we do not knowingly add anyone under 13 to it. If we learn that a child under 13 has joined, we will delete their entry; if you think this has happened, email zolopofficial@gmail.com. The minimum age for the Zolop app will be set out in the app's own terms.

Security

We use industry-standard measures to help protect your information, including encrypted connections and access controls. No system is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy. When we do, we will publish the new version on this page with a new version number and date. If we want to use your waitlist information for a new purpose, we will tell you before we do and, where the law requires it, ask for your consent.

Contact and regulator information

Zolop is a product operated by AFTER THE BUILD LTD, a company registered in England and Wales (company number 17499681), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. AFTER THE BUILD LTD is the controller of your personal data. For privacy questions or requests, or to leave the waitlist, email zolopofficial@gmail.com. General information is available at zolop.co.uk. Where applicable, you can complain to the Information Commission, the UK's data protection regulator, which is known as the ICO, at ico.org.uk.