How we look after your data

Ensomble Ltd ("Ensomble", "we", "us") is the data controller for personal data collected through this website. We are registered in England and Wales.

For any question about this policy or your data, contact us at letsensomble@gmail.com.

Waitlist details. When you join the waitlist we collect your name, email address, whether you are signing up as a customer or a creative, and, optionally, your location. We also record the date and time you signed up.

Messages to us. If you email us, we keep your message and email address so we can reply.

Website usage data. We use Vercel Web Analytics to understand how the site is used (for example, which pages are visited and what type of device and browser is used). Our hosting provider also keeps standard server logs, which include IP addresses.

We do not ask for payment details, and we do not collect any special category data.

• To add you to the waitlist and keep a record of your sign-up.
• To contact you about Ensomble's launch and your early access.
• To understand which kinds of customers and creatives want to use Ensomble, and where.
• To reply to your messages.
• To keep the website secure, working and improving.

We do not use your data for automated decision-making or profiling that affects you.

Under UK GDPR we rely on:

• Consent — for waitlist details and for contacting you about launch. By submitting the form you ask us to hold your details for this purpose. You can withdraw consent at any time.
• Legitimate interests — for website analytics, security and replying to enquiries, balanced against your rights and expectations.

We use a small number of service providers to run the website. They process data on our behalf:

• Supabase — hosts the database that stores waitlist sign-ups.
• Google (Google Sheets) — each sign-up is also copied to a private spreadsheet that our team uses to manage the waitlist.
• Vercel — hosts the website and provides web analytics.

We may also disclose data where the law requires it. We do not sell your personal data and we do not share it with advertisers.

Some of our providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK GDPR, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

We keep waitlist details until we have contacted you about launch and early access, or until you ask us to delete them, whichever comes first. We review the list periodically and remove details we no longer need.

We keep emails you send us only for as long as needed to deal with your enquiry.

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it;
• receive your data in a portable format; and
• withdraw your consent at any time, which will not affect anything we did before you withdrew it.

To use any of these rights, email letsensomble@gmail.com. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We do not use advertising or cross-site tracking cookies. Vercel Web Analytics is designed to measure site usage without using cookies to follow you across websites.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and restricted access to the database and waitlist spreadsheet. No system is completely secure. If you spot a vulnerability, please tell us at letsensomble@gmail.com.

This website is not directed at children under 18, and we do not knowingly collect their data. If you think a child has joined the waitlist, email us and we will delete the entry.

We may update this policy as Ensomble launches and grows. The effective date at the top shows when it was last changed. If we make a material change, we will tell waitlist members by email.