This notice explains how we handle your personal data when you join one of our waitlists at popupfronts.com. POP-UP FRONTS LTD (company № 17104797), registered at 66 Paul Street, London EC2A 4NA, is the data controller. We are registered with the Information Commissioner's Office (ICO) as a data controller, reference number ZC177651.
There are three separate waitlists — one for creators, one for brands, and one for brand strategists. We keep them apart: joining one does not put you on the others.
If you have questions about your data, or want to exercise any of the rights in section 7, email admin@popupfronts.com or write to us at our registered office: POP-UP FRONTS LTD, 66 Paul Street, London EC2A 4NA.
To join our waitlists, we may ask you to voluntarily submit your email address, social media profile(s) and ask you to categorise the type of creative work you do.
On the creator waitlist, that means:
The brand and brand strategist waitlists ask for your email address and nothing else.
Alongside whatever you submit, we record a small set of fields describing how you arrived: the utm_source, utm_medium, utm_campaign, utm_content and utm_term values from the link you clicked (when present), and the address of the website that referred you. Our email provider also records the date your entry was created. These tell us which channel and message brought you here, so we can plan launch outreach.
No cookies, no device identifiers, no tracking pixels — in our emails as well as on the page. We run no analytics product and place nothing on your device to track you. Open tracking and click tracking are switched off on our sending domain, so we cannot tell whether you opened an email or which links you clicked.
Our site is hosted on Netlify. For every visit, Netlify automatically keeps standard server logs, including your IP address, device and browser type, the pages you request, and timestamps, for security and operations. Section 6 covers how long.
This page does not use cookies: none for tracking, advertising, or analytics. We run no analytics product and place nothing on your device to track you. There are therefore no cookie settings for you to manage. This would change only if a third-party script were added later, in which case we would update this notice first.
Different pieces of this rest on different legal grounds, so we have set them out one by one rather than claiming a single basis for everything.
| What | Why we use it | Lawful basis |
|---|---|---|
| Your email address | To tell you when POPUPFRONTS launches, and to send occasional related updates | Consent |
| The kinds of work you do, and the page you signed up from | To understand who the site reaches, and to decide who to invite to the beta showcase | Consent |
| Your social profiles | So we can look at your work when considering that invitation | Consent |
| utm_source, utm_medium, utm_campaign, utm_content, utm_term, referring website | To measure which outreach is working, so we spend our effort where it lands | Legitimate interests — running our own marketing efficiently. These fields describe the link you followed, not you, and we do not use them to build a profile of you |
| Netlify server logs | Keeping the site available, and detecting abuse and attacks | Legitimate interests — the security and operation of our website |
Where the basis is consent, you give it by submitting the form, and you can withdraw it at any time (see section 7). Withdrawing stops the emails and removes you from the list. Where the basis is legitimate interests, you can object — see section 7.
We use single opt-in. You go on the list when you submit the form, and we send one confirmation email straight away. There is no second "confirm your subscription" step, and no marketing is held back waiting for one. Every email we send carries an unsubscribe link.
We do not sell your data or share it for anyone else's marketing. We use the following service providers ("processors") to operate the waitlists, and only for that purpose:
Resend, Airtable, and Netlify are based in the United States, so your data may be processed there. These transfers are protected to UK standards using the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum where applicable.
Everything you submit, and the attribution fields recorded with it, are kept on the same clock: until you unsubscribe, or until the waitlist closes at launch, whichever comes first. After that it is deleted, or migrated to the launched service under a new notice you will be given at that time.
Netlify server logs are kept by Netlify, not by us, and we cannot delete them individually. Netlify retains them for around 30 days, for security and operations.
Under UK GDPR you can ask us to:
To exercise any of these, email admin@popupfronts.com, or write to us at the address at the top of this notice. The simplest way to withdraw consent is the unsubscribe link in any email we send.
If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.
We may update this notice as the platform develops. When the full platform launches, this notice will be replaced by a comprehensive privacy policy covering the whole service, and we'll tell everyone on the waitlists before any material change.