Privacy Policy

Last updated: 10 February 2026

1. Who We Are

Casvade Limited ("Casvade", "we", "us", "our") is registered in Scotland. We operate the website casvade.com and are committed to protecting your personal data.

Contact: hello@casvade.com

2. What Data We Collect

We collect minimal data necessary to operate our waitlist service:

Data	Purpose	Legal Basis
Email address	To contact you about Casvade updates and launch	Consent (GDPR Art. 6(1)(a))
Consent timestamp	To record when you gave consent (GDPR compliance)	Legal obligation
IP address (hashed)	Rate limiting and security (we do not store your actual IP)	Legitimate interest

3. How We Protect Your Data

Encryption at rest: Your email address is encrypted using AES-256 encryption before being stored in our database
Hashed identifiers: We use SHA-256 hashing for IP addresses and email duplicate detection — these cannot be reversed
Secure transmission: All data is transmitted over HTTPS (TLS encryption)
Access controls: Database access is restricted to minimal required privileges
Bot protection: We use Google reCAPTCHA v3 to prevent automated abuse

4. How We Use Your Data

We use your email address solely to:

Send you updates about Casvade's development and launch
Invite you to participate in surveys or beta testing
Notify you when Casvade becomes available

We will never:

Sell your data to third parties
Share your email with advertisers
Send spam or unsolicited marketing beyond what you consented to

5. Third-Party Services

We use the following third-party services:

Service	Purpose	Data Shared
Google reCAPTCHA v3	Bot detection and form security	IP address, browser behaviour (Google's Privacy Policy)

6. Data Retention

Waitlist data: Retained until Casvade launches or you request deletion, whichever comes first
Rate limiting data: Automatically purged after 1 hour
Error logs: Retained for up to 90 days for security monitoring

7. Your Rights (GDPR)

Under the UK GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Withdraw consent: Unsubscribe from communications at any time
Portability: Request your data in a machine-readable format
Complaint: Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email us at hello@casvade.com. We will respond within 30 days.

8. Cookies

We use minimal cookies:

Session cookie (PHPSESSID): Essential for form security (CSRF protection). Expires when you close your browser.
reCAPTCHA cookies: Set by Google for bot detection. See Google's Cookie Policy.

We do not use analytics cookies, advertising cookies, or tracking pixels.

9. Children's Privacy

Casvade is not intended for children under 18. We do not knowingly collect personal data from minors. If you believe a child has submitted data, contact us to have it removed.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. If we make significant changes, we will notify waitlist subscribers by email.

11. Contact Us

For any privacy-related questions or concerns:

Casvade Limited
Email: hello@casvade.com
Registered in Scotland