Your data, and what we do with it.
PattnUp is built on the idea that what you record about your life stays yours. This page explains, in plain terms, what we collect today, why, and what you can ask us to do about it.
Who we are
PattnUp is a product of Pleu Ltd, a company registered in England and Wales. Pleu Ltd ("we", "us") is the data controller for the personal data described here.
- Legal entity: Pleu Ltd
- Registered address: 86-90 Paul Street, London, EC2A 4NE
- Company number: 14552522
- Contact: hello@pattnup.com
We are based in the United Kingdom. This notice is written to meet the UK GDPR and the Data Protection Act 2018.
The short version
- Right now, the only thing we collect from most visitors is an email address, and only if you hand it to us.
- We run no analytics. The only tracking on this site is the Meta (Facebook) pixel, which we use to measure our own advertising.
- We never sell your personal data.
- Payments are handled by Stripe. We never see or store your card details.
- You can leave at any time, and ask us to delete what we hold.
What we collect, and why
If you join the waitlist
We collect your email address, plus the date you signed up. We use it to tell you when PattnUp launches, to send occasional notes about how the build is going, and to send the launch-day discount we promised on the pricing section.
Lawful basis: consent. You gave it by submitting the form, and you can withdraw it at any time using the unsubscribe link in any email, or by writing to us. Withdrawing does not affect anything we did while the consent was live.
If you become a founding member
Payment is taken by Stripe on their own checkout pages. Stripe collects your name, email address, billing address and card details, and shares with us the information we need to run the membership - your email address, what you bought, and whether the payment succeeded. Card numbers never reach our systems.
Lawful basis: performance of a contract, and our legal obligation to keep accurate records for tax and accounting.
When you simply visit the site
Our host, Vercel, keeps standard server logs - IP address, the page requested, timestamp, browser type - to serve the site and to protect it from abuse. We do not use these to identify or profile you.
Lawful basis: legitimate interests, namely keeping the site running securely.
Cookies and tracking
We run no analytics product - no Google Analytics, no session recording, no fingerprinting. We do use one advertising tool, and we would rather name it plainly than bury it.
The Meta pixel
This site carries the Meta pixel (Facebook and Instagram). It sets cookies in your browser and tells Meta when you visit the site, and when you join one of our lists. We use it to see whether our advertising is actually reaching people who are interested, and to reach similar people.
When you join a list, the pixel records that a signup happened and which list it was. Meta receives your IP address and cookie identifiers as part of that. We do not send your email address or your name to Meta.
Lawful basis: consent. If you would rather not be measured this way, you can block it with your browser's tracking protection or an ad blocker, adjust your Meta ad settings at facebook.com/adpreferences, or write to us and we will tell you what we hold.
Fonts and code
To display its typefaces the site loads fonts from Google Fonts, and it loads part of its code from unpkg, a public code delivery network. In both cases your browser contacts those services directly, which discloses your IP address to them as a technical necessity of the request. Neither is used by us for tracking.
Who your data is shared with
We use a small number of established suppliers, each of which acts on our instructions and is bound by a contract covering data protection.
| Supplier | What they do | What they receive |
|---|---|---|
| Brevo | Email and waitlist | Your email address and signup date |
| Stripe | Payments | Name, email, billing address, card details |
| Vercel | Website hosting | IP address and server log data |
| Meta | Advertising measurement | IP address, cookie identifiers, pages viewed, and the fact that you joined a list - not your email address |
| Google Fonts | Typefaces | IP address, when your browser requests a font |
| unpkg | Code delivery | IP address, when your browser requests the code |
We may also disclose data where the law requires it, or to establish or defend legal claims. If PattnUp is ever sold or restructured, your data may transfer to the new owner, who would remain bound by this notice.
We do not sell personal data, and we never will.
Where your data goes
Some of our suppliers process data outside the UK, including in the United States and the European Economic Area. Where that happens, the transfer is covered by UK adequacy regulations, or by the International Data Transfer Agreement or Addendum together with appropriate safeguards.
How long we keep it
| Data | Kept for |
|---|---|
| Waitlist email address | Until you unsubscribe or ask us to delete it, or until two years after launch if you never engage |
| Membership and payment records | Seven years from the end of the relevant tax year, as UK tax law requires |
| Server logs | Short-term only, per our host's standard retention |
Your rights
Under UK data protection law you have the right to:
- be told what we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have your data erased, in the circumstances the law allows;
- restrict or object to how we process it;
- receive your data in a portable, machine-readable form;
- withdraw consent at any time, where consent is what we rely on.
To exercise any of these, email hello@pattnup.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
Complaints
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the UK's supervisory authority:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline 0303 123 1113 · ico.org.uk
Children
PattnUp is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Security
The site is served only over HTTPS. Payment data is handled entirely within Stripe, a certified PCI Service Provider Level 1. Access to the waitlist is limited to people who need it. No system is perfectly secure, but we take this seriously, and we will tell you and the ICO about any breach that meets the legal threshold.
The PattnUp app
This notice covers this website as it exists today. The app itself is not yet released and collects nothing from you at this stage.
The app is designed to record sleep, mood, fitness, faith and journal entries. Under Article 9 of the UK GDPR, information about your health and about your religious beliefs is special category data, and carries stricter protections than ordinary personal data.
So before you are ever asked to record anything, we will ask for your explicit consent, and replace this notice with one that covers the app in full. You will not be opted in to any of it by default.
Changes
If we change this notice we will update the date at the top, and for anything significant we will email people on the waitlist rather than change it quietly.
Contact
Questions about any of this, or about your data: hello@pattnup.com.