Privacy and analytics notice

Keystra is a pre-launch UK project operated by Richard William WINKER, trading as Keystra, trading as Keystra. The data controller is Richard William WINKER, trading as Keystra. Contact address: 23 Peacock Way, Workington, CA14 3FG. Email hello@getkeystra.com for privacy questions or requests.

• the name, business name, trade and email address entered in the form;
• your numbered interest-list position, registration source and time, status, and optional marketing choice, including its wording/version and time where the database migration has been applied;
• emails sent, delivery information, replies, unsubscribe requests and a minimal suppression record;
• security and network information generated when the site is used, such as IP address, device/browser details, request times and error logs, held by the hosting and infrastructure suppliers;
• optional page-view and device information described below, but only after analytics is accepted.

• Requested pre-launch registration: to record the interest you submit, send the one-off confirmation and contact you only where genuinely necessary to administer that registration.
• Consent: for optional product news, research invitations and launch marketing, and for Google Analytics if it is configured. Consent can be withdrawn at any time without affecting earlier lawful use.
• Legitimate interests: to operate, secure and troubleshoot the website, prevent misuse, understand aggregate demand through privacy-oriented, cookie-free analytics, and keep necessary business records. We balance these interests against your rights.
• Legal obligation or legal claims: where records must be kept or used to establish, exercise or defend legal rights.

Information is shared only as needed with: Vercel for website hosting, network/security logs and optional Web Analytics; Supabase for the Founding Member database; and Resend for confirmation and opted-in emails. If accepted, optional analytics may also be sent to Plausible Analytics and Google Analytics when those integrations are configured. We may also disclose information where required by law or to protect legal rights.

Supplier account regions and contractual safeguards must be checked by the founder. Some suppliers may process information outside the UK. Where UK law requires a transfer safeguard, Keystra must use an adequacy regulation or approved contractual safeguards and make information about it available on request.

Founding Member records are kept while the pre-launch programme remains active and while they are needed to respond to the registration. Records should be reviewed at least every 12 months and deleted or anonymised when no longer needed. If you unsubscribe, a minimal email suppression record may be kept so that marketing is not restarted. Hosting, email and analytics suppliers retain logs and events under their configured service periods. The founder must confirm and operate the final retention schedule.

Marketing is optional and the box is unticked by default. Not choosing it does not prevent registration or a one-off confirmation. Each marketing email must include an unsubscribe route; you can also email hello@getkeystra.com. Unsubscribe requests should be actioned promptly, although service or legal messages may still be sent when genuinely necessary.

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time. Email the address above; identity may need to be verified. You can complain to the UK Information Commissioner's Office.

This notice will be updated if Keystra incorporates, changes operator, adds suppliers, changes the form, begins a beta or processes customer operational data. Material changes affecting opted-in contacts should be brought to their attention.