Privacy Policy

Who We Are

This Privacy Policy explains how Limaria Ltd ("Limaria", "we", "us" or "our") collects, uses, stores and protects your personal information when you visit our website, join our waitlist or contact us.

Limaria Ltd is the data controller for the personal information described in this policy.

• Email: data-request@limaria.co
• Registered address: [Insert registered office address]
• Company number: [Insert company registration number]

Information We Collect

We collect personal information when you interact with our website.

When you join our waitlist

We collect:

• Your name.
• Your email address.
• Your answer to "What is the most stressful part of travelling for you?"
• Your answer to "How did you hear about Limaria?"
• Your marketing and research communication preferences, including whether you have opted in and when consent was given.

We use your answers to understand travellers' needs, identify common travel frustrations and inform Limaria's product development. Our questions are intended to collect general feedback about travel experiences, rather than medical or other sensitive personal information. Please avoid including sensitive personal information in your responses.

When you contact us

We collect your name, your email address, and the message you submit.

When you visit our website

Depending on your analytics preferences and applicable consent requirements, we may collect limited technical and website usage information, including pages visited and interactions with website features, referring websites and marketing campaign information (including UTM parameters), approximate visitor location such as country or region, and device type and browser information. We use this information to understand how visitors discover and interact with Limaria and to improve our website.

How We Use Your Information

Waitlist administration

We use your name and email address to register your interest in Limaria, manage and administer the waitlist, and send you a confirmation email.

Product research and development

If you have opted in to marketing and research communications, we may contact you individually to share product development updates, invite you to surveys, ask whether you would like to participate in user interviews, discuss your feedback and travel experiences, share information about new features and developments, and announce the launch of Limaria. We personally review feedback submitted through our website to understand potential users' needs and improve Limaria.

Responding to enquiries

We use information submitted through our contact form to respond to your questions and messages. Contact form submissions are not automatically added to our marketing or research communications.

Website analytics

Where permitted by applicable law and in accordance with your analytics preferences, we use website analytics to understand visitor numbers and page views, traffic sources and referring websites, marketing campaign performance, interactions with website features, and general visitor locations and device information. This helps us understand how people discover Limaria and which marketing activities generate interest in the waitlist.

We do not sell your personal information or use it to create advertising profiles for third parties.

Legal Basis for Processing

Legitimate interests

We may rely on legitimate interests to manage and administer the waitlist, send essential waitlist confirmation emails, respond to contact form enquiries, maintain website security, and review feedback submitted to us for the purpose of developing Limaria.

Our legitimate interests include operating and developing Limaria, understanding potential users' needs and responding to people who contact us. We consider these activities necessary and proportionate while respecting your rights and expectations, and we assess our interests against the potential impact on your privacy.

Consent

We rely on your consent to send optional product updates, research invitations, survey requests, interview invitations and launch announcements. This consent is optional and is not a condition of joining the waitlist.

You can withdraw your consent at any time by emailing data-request@limaria.co or using the unsubscribe link in applicable emails. Withdrawing consent stops future communications covered by that consent. It does not automatically delete information we may need to retain for other lawful purposes, such as maintaining an unsubscribe record.

Analytics consent

Where required by applicable data protection and electronic privacy laws, we obtain your consent before activating analytics technologies that store information on or access information from your device. You can change or withdraw your analytics preferences through our website's privacy settings, where available.

Who Processes Your Information

We use third-party service providers to operate our website, store information, analyse website usage and deliver emails. These providers process personal information on our behalf where necessary to provide their services.

Supabase

We use Supabase to store and manage waitlist and contact form submissions. Our primary database is hosted in Paris, France (EU region).

Cloudflare

We use Cloudflare to host and deliver our website and to run the functions that handle waitlist and contact form submissions. Cloudflare may process technical information associated with website requests, including IP addresses and server logs, as part of its infrastructure and security services.

Umami

We use Umami, self-hosted by us, for website analytics, including traffic sources, page views and interactions with website features. Umami does not use cookies and is designed to avoid collecting personal data.

Resend

We use Resend to send automated waitlist confirmation emails and contact form notifications. Resend processes information such as email addresses, names, email content and delivery information to provide this service, under a data processing agreement incorporating Standard Contractual Clauses and the UK International Data Transfer Addendum.

Google Workspace

We use Google Workspace to receive contact form notifications, manage business correspondence and communicate personally with people who contact us or join our waitlist. We manually review and respond to enquiries and feedback through our business email account.

We do not authorise these providers to use personal information processed on our behalf for their own independent advertising purposes.

International Data Transfers

Our primary database is hosted in Paris, France. Some of our other service providers may process personal information outside the United Kingdom or European Economic Area, depending on their infrastructure, service configuration and subprocessors.

Although we aim to use European data hosting where available, this does not necessarily mean that all processing takes place exclusively within the UK or EU. Where personal information is transferred internationally, we use applicable legal transfer mechanisms and safeguards, such as adequacy decisions, Standard Contractual Clauses and the UK International Data Transfer Addendum, where required.

You can contact us at data-request@limaria.co if you would like further information about international data transfers and the safeguards we use.

Data Storage, Security and Retention

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure. We retain personal information only for as long as necessary for the purposes for which it was collected.

Our intended retention periods are:

Waitlist information

We retain waitlist information while the waitlist is active and until 12 months after the public launch of Limaria. After this period, we delete or anonymise waitlist information unless you have opted in to continued communications and we still have a valid reason to retain the necessary contact information.

Marketing and research preferences

If you have opted in to continued communications, we retain the necessary contact information and preferences until you withdraw your consent or we determine that the information is no longer necessary following periodic reviews.

Contact form submissions

We retain contact enquiries for up to 12 months after the enquiry has been resolved, unless a longer period is reasonably necessary to address an ongoing matter or legal obligation.

Consent and unsubscribe records

We retain appropriate records of consent and withdrawal to demonstrate compliance and respect your communication preferences. Where someone withdraws consent or objects to marketing, we may retain the minimum information necessary to ensure that we do not contact them again.

Analytics and email records

Analytics information is retained according to the retention settings and terms of our analytics provider. Our email providers may retain delivery records and related information according to their own documented retention periods.

When information is no longer required, we delete or anonymise it where reasonably possible. Some information may remain temporarily in backups or service-provider records until their normal deletion cycles are completed. You can request earlier deletion of your personal information by emailing data-request@limaria.co.

Cookies and Website Analytics

We aim to use privacy-conscious analytics that minimise the collection of personal information. Our analytics setup uses Umami, self-hosted by us, to understand website visits and page views, approximate visitor locations, referring websites, marketing campaign performance, and interactions with website features.

We do not use analytics to create individual advertising profiles or track visitors across unrelated websites. Umami does not use cookies, so no cookie consent banner is needed for it.

Where applicable law requires consent for cookies or similar technologies, we will request consent before activating them. You can manage your analytics preferences through our website's privacy settings, where available.

Your Data Protection Rights

Under applicable UK and EU data protection laws, you may have the right to:

• Access: request a copy of the personal information we hold about you.
• Rectification: ask us to correct inaccurate or incomplete information.
• Erasure: request deletion of your personal information.
• Restriction: ask us to restrict certain processing activities.
• Objection: object to processing based on legitimate interests.
• Data portability: request a copy of information you provided to us in a commonly used electronic format, where the legal conditions apply.
• Withdraw consent: withdraw consent at any time where we rely on consent.

You have an absolute right to object to the use of your personal information for direct marketing.

To exercise your rights, contact us at data-request@limaria.co. We will respond within the applicable legal timeframe.

Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue.

If you are based in the United Kingdom, you also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. If you are based in the European Union, you may also complain to the relevant data protection supervisory authority in your country.

Changes to This Privacy Policy

We may update this Privacy Policy as Limaria develops, our website changes or our data processing practices evolve. Any updates will be published on this page with a revised "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, contact Limaria Ltd.

• Email: data-request@limaria.co
• Registered address: [Insert registered office address]