Privacy Policy

1. Who we are

This website is operated by Knighton Ventures Limited, a company registered in England and Wales (Company No. 17217728), trading as Sundae Society.

Registered office: 50 Russet Close, Wellington, Somerset, TA21 9BJ

Contact: [email protected]

Knighton Ventures Limited is the data controller for personal data processed through this website. We take your privacy seriously and are committed to processing your personal data lawfully, fairly, and transparently.

2. What data we collect and why

2.1 Founding Member & Waitlist sign-up (email list)

When you sign up via our website, we collect:

• First name
• Email address
• Birthday (month and day only) — optional, Founding Members only
• Sign-up timestamp
• Whether you signed up as a Founding Member or waitlist member

Lawful basis: Consent (UK GDPR Article 6(1)(a)). You give explicit consent by ticking the checkbox on the sign-up form. You can withdraw consent at any time by clicking the unsubscribe link in any email we send, or by emailing us.

Purpose: To send you updates about Sundae Society, notify you when pre-orders open, and provide members-only communications. Birthday information is used solely to send Founding Members a birthday treat — we collect month and day only and never store a full date of birth.

Third-party processor: We use Klaviyo to manage our email list and send communications. Klaviyo processes your data on our behalf as a data processor. See Klaviyo's Privacy Policy.

2.2 Analytics (Google Analytics 4)

Lawful basis: Consent (UK GDPR Article 6(1)(a)). GA4 only fires after you accept analytics cookies via our consent banner.

We use Google Analytics 4 (GA4) to understand how visitors use our site. GA4 collects pseudonymous usage data (pages visited, interactions, device type, approximate location). We have enabled IP anonymisation. No personally identifiable information is sent to Google through GA4.

Data transfers: Google Analytics data may be transferred to and processed in the United States. Google LLC is certified under the EU-US Data Privacy Framework (which the UK recognises as providing adequate protection). See Google's Privacy Policy.

2.3 Behaviour analytics (Microsoft Clarity)

Lawful basis: Consent (UK GDPR Article 6(1)(a)). Clarity only fires after you accept analytics cookies.

Microsoft Clarity records anonymised session replays and heatmaps to help us improve the user experience. Clarity uses "Balanced" masking mode, which automatically masks form inputs and sensitive content. See Microsoft's Privacy Statement.

2.4 Cookies

We use cookies as described in our Cookie Policy.

3. How long we keep your data

4. Who we share your data with

We do not sell your personal data. We share data only with:

• Klaviyo Inc. — email platform (data processor)
• Google LLC — analytics (data processor, consent-gated)
• Microsoft Corporation — Clarity analytics (data processor, consent-gated)
• Cloudflare Inc. — website hosting and infrastructure (data processor)

All processors are bound by data processing agreements and handle data in accordance with UK GDPR.

5. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Objection — object to certain types of processing
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any right, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority: 0303 123 1113.

6. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted via HTTPS (TLS 1.2+). Our email platform (Klaviyo) uses industry-standard security practices.

7. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated to subscribers via email. The "last updated" date at the top of this page reflects the most recent revision.

8. Contact us

For any privacy-related questions, contact:
Knighton Ventures Limited t/a Sundae Society
50 Russet Close, Wellington, Somerset, TA21 9BJ
[email protected]