Who is responsible
Meraki Softworks Ltd, registered in England and Wales, company number 14223666. Registered office: Flat 518, 101 Blackwall Way, London, England, E14 9QX. Contact: [email protected]. We are the controller for this website, its launch list and support correspondence. The app has a separate notice.
What we collect and why
- Launch list: your email address, the time of signup and confirmation, the version of the permission wording, and whether you have unsubscribed. We use these to confirm your request and send PadiMi launch news with your consent.
- Confirmation and withdrawal: random, single-purpose links and their expiry times help prove you control the address. The database stores hashes of these tokens. A verification request doesn’t activate a subscription.
- Security: Cloudflare processes connection details such as IP address, request path and browser/network information to deliver and secure the website. Our endpoint uses short-lived keyed identifiers derived from connection and email details to limit abuse; it does not keep raw IP addresses in the signup database.
- Support: your email and what you choose to tell us, to answer the enquiry. Send only what we need.
Consent is the basis for launch marketing and may be withdrawn at any time. We rely on legitimate interests in responding to enquiries, operating a secure service and keeping limited evidence of permission and withdrawal, after considering your interests and rights. A specific legal duty may require a limited record. We do not treat acceptance of terms as marketing consent.
Providers and destinations
- Cloudflare hosts the website, API and signup database and provides security and email forwarding. The signup database is configured with EU jurisdiction; website traffic and security processing can occur in other countries.
- Resend delivers confirmation and launch communications. It receives the recipient address and message/delivery information. The sending domain is configured in its EU region. This does not mean every processing activity is confined to that region.
- Google Gmail receives support and privacy mail forwarded from our domain addresses. Email correspondence includes addresses, content and attachments you send.
We do not sell your information, share it for behavioural advertising, load advertising pixels or import you into another product’s mailing list. Message open and click tracking are disabled in our Resend domain configuration. We may disclose necessary information to advisers, authorities or a business successor where legally justified and protected.
International transfers
Providers can process information outside the UK or EEA, including in the United States. Where a restricted transfer occurs, an applicable adequacy decision or appropriate safeguards such as EU standard contractual clauses and the UK Addendum or IDTA are required. Provider public policies are not substitutes for the applicable processing contracts. Contact us for the safeguards relevant to your information and a copy where available, with confidential information removed.
How long we keep it
Unconfirmed signup details are removed after seven days; confirmation links expire after 24 hours. Rate-limit records expire after their short abuse-control window. Confirmed list records expire after 12 months unless you renew your permission; after expiry we stop sending launch marketing. A minimal keyed suppression record is kept for 12 months after withdrawal to respect your choice and prevent accidental resubscription. Cleanup runs daily. You can ask for earlier erasure where applicable.
Support correspondence is retained for as long as needed to resolve the enquiry and any related legal duty or dispute; we consider the issue, sensitivity and applicable limitation period. We review outstanding correspondence rather than promising that every email disappears after a fixed period. Service backups and provider security/delivery records follow their applicable retention and deletion schedules.
Cookies and automated decisions
We use no optional analytics or advertising on this website. See the cookie and storage notice for security technologies. We do not make decisions with legal or similarly significant effects through the launch list.
Children
The launch list is for adults 18 or over. We ask you to confirm this without collecting your date of birth or identity documents. If you think a child has registered, contact us so we can investigate and remove the record. This mailing-list restriction is separate from the eventual app content rating.
Your privacy choices
Depending on your location and the processing involved, you may have rights to access, correct, erase or receive a copy of your information; restrict or object to processing; withdraw consent; and appeal a decision about a request. You may use an authorised agent where the law permits. We do not discriminate against you for exercising a right.
Email [email protected] with “PadiMi privacy” in the subject. We may ask for proportionate information to verify your authority. Do not send passwords or identity documents without asking us first. We respond within the time limits that apply to your request. See privacy request instructions.
You may complain directly to the UK Information Commissioner or the competent privacy regulator where you live, including an EEA supervisory authority. You do not have to contact us before approaching a regulator.
Changes
We update this notice when processing changes. Where required, we provide additional notice or request new permission before a new use.