Privacy notice
What we hold, and why
Omzoe is not open yet. Today this site does one thing with personal data: it takes an email address for a waitlist, confirms that you meant to give it, and writes to you when there is something to say.
This notice describes that, and only that. It is deliberately narrow. When accounts open, the notice will be rewritten before a single account exists, because the data an account holds is a different order of sensitive — and the last section explains what we have already committed to about it.
Who is responsible
Omzoe is operated by SAGE GRIDS LTD, a company registered in England and Wales under company number 16003773, with its registered office at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
SAGE GRIDS LTD is the data controller for everything described here. For any question about this notice, or to exercise any of the rights below, write to support@sagegrids.com.
What we collect when you join the waitlist
Nine columns, and this is all of them. The list below is checked against the database schema by an automated test, so it cannot quietly fall out of date as the product changes.
| What | Why we hold it |
|---|---|
| A random identifierid | A generated UUID so a row can be referred to without using your email address as a key. |
| Your email addressemail | The reason the form exists. Lowercased and trimmed before it is stored, so the same address cannot be added twice. |
| Which part of the page you signed up fromsource | A short label such as “nav” or “waitlist”. It tells us which parts of the page do the work, and it is our own label rather than anything about you. |
| The site you arrived fromreferrer | Recorded only when you came from somewhere other than this site. It is how we know which write-up or link brought you here. |
| Your browser’s user-agent stringuserAgent | Read from the request header rather than the form. It is the main thing that separates a real browser from an automated script filling the form. |
| Campaign parameters in the link you followedutm | The utm_source, utm_medium, utm_campaign, utm_term and utm_content values, if the link you clicked carried any. Absent for anyone who typed the address in. |
| When you confirmedconfirmedAt | The moment you clicked the link in the confirmation email. It is our record that the consent was real, which is exactly what we would need to show if it were ever questioned. |
| When you unsubscribedunsubscribedAt | Set if you use the unsubscribe link. The row is kept afterwards precisely so that we remember not to write to you again. |
| When you signed upcreatedAt | The moment you submitted the form. It is how we know how old an unconfirmed entry is, and therefore when it should be cleared out. |
What we deliberately do not collect
This section is short by design, and each line is a decision rather than an oversight.
- We do not store your IP address. Your address is used for a few seconds, in memory, to rate-limit the signup form against abuse, and is then gone. It is never written to the database and never logged against your signup.
- We set no cookies. Not for sessions, not for preferences, not for anything. An automated browser test checks this on every public page of the site and fails the build if a single cookie appears.
- We run no analytics. There is no Google Analytics, no Plausible, no PostHog, no Segment, no Meta pixel and no advertising tag anywhere on this site. Nothing on the page reports your visit to a third party.
- We do not buy email addresses, and we do not enrich yours against any data broker or enrichment service.
- We do not build a profile of you. At this stage there is nothing to profile: a signup is an email address and how you arrived, held apart from any account.
Why we are allowed to hold it
Our lawful basis is your consent, under Article 6(1)(a) of the UK GDPR. Marketing email to an individual also falls under the Privacy and Electronic Communications Regulations, which require that consent be freely given and specific.
This is why the waitlist is double opt-in. Submitting the form does not add you to anything; it sends one email asking you to confirm. Until you click that link, you are unconfirmed and we will not write to you again. The confirmation timestamp is our evidence that the consent existed, and you can withdraw it at any time without giving a reason.
Who else processes it
Two processors, both acting on our instructions and neither permitted to use your data for their own purposes.
- Resend, our transactional email provider, which delivers the confirmation email and any launch announcement. Resend is based in the United States, so this is an international transfer, made under the UK International Data Transfer Addendum to the European Commission’s standard contractual clauses.
- Our hosting provider, which runs the server holding the database. The database is self-hosted on infrastructure we control rather than on a managed third-party data platform.
What we never do with it
We do not sell your email address. We do not rent it, trade it, share it with advertisers or partners, or hand it to anyone outside the two processors named above. There is no arrangement under which that could happen, because there is no such arrangement to be found.
Your address is not used to train any model, ours or anyone else’s.
How long we keep it
Until the waitlist has served its purpose — that is, until Omzoe has launched and the launch announcement has gone out — or until you ask us to delete it, whichever comes first. We will not keep a dormant pre-launch list indefinitely against a launch that never happens.
Unsubscribing and erasing are two different things, and every email we send carries a link for each. If you unsubscribe, we keep the row and the timestamp on purpose: a do-not-contact list only works if it remembers the addresses it is meant to suppress. If you erase, the row goes — address, timestamps, and the attribution columns above — and nothing survives it.
The honest cost of erasing, said plainly rather than buried: once the row is gone, so is the record that would recognise your address later, because that record was the row. If the same address ever reached us again we would have nothing left to match it against. In practice we do not buy, import or otherwise acquire addresses — the only way onto this list is the form on this site — so that is a consequence worth knowing about rather than one we expect you to meet. We would rather describe it than keep a copy of you in order to prevent it.
Your rights, and how to use them
Under the UK GDPR you have the right to be informed, to access a copy of your data, to have it corrected, to have it erased, to restrict how it is processed, to portability, to object to processing, and to withdraw a consent you have given. If you are in the EEA, the EU GDPR gives you the same set.
Two of them you can exercise without asking us, from any email we have sent you. The unsubscribe link — and the standard List-Unsubscribe control your mail client offers alongside it — withdraws your consent the moment you follow it. The erasure link beneath it deletes the row itself.
The erasure link opens a page that tells you what it is about to do and waits for you to press a button. That step is there because mail providers and security scanners follow links inside messages on their own, and a link that deleted a row simply by being visited would let one of them erase your entry without you. Once you press it, the row is deleted in the moment — nobody reviews it, and there is no queue.
For the rest — a copy of what we hold, a correction, restriction, or an objection — email support@sagegrids.com from the address you signed up with. We will respond within one calendar month, and there is no charge.
If you think we have handled your data badly, we would like the chance to fix it first. You also have the right to complain directly to the Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint/, and you do not need to come to us first to do that.
What we will actually send you
One confirmation email when you sign up. One email when Omzoe opens. Occasionally, if there is something genuinely worth saying between now and then, a short note about it.
That is the whole of it. There is no drip sequence, no re-engagement campaign, and nothing sent on behalf of anyone else.
Keeping it safe
The site is served over HTTPS and the form is submitted over an encrypted connection. The confirmation, unsubscribe and erasure links are each signed with a secret key, so none of them can be forged or altered to act on somebody else’s address. Confirmation links expire after fourteen days; the other two do not, because a link that has stopped working is a right that has stopped working.
The three are signed separately and are not interchangeable. An unsubscribe link cannot be edited into one that deletes your row, and the erasure link acts only after you have pressed the button on the page it opens — so a scanner or mail provider following links in your inbox cannot erase anything.
Access to the database is limited to the people who need it to run the service. No system is perfect, and we will not pretend otherwise; if a breach ever affected you, we would tell you and the regulator as the law requires.
Children
This site is not directed at children, and Omzoe is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us an email address, tell us and we will delete it.
What changes when accounts open
This section describes commitments we have already made about a product you cannot yet use. It is here so that the commitments are on the record before there is any incentive to soften them.
The Omzoe Mirror asks you to respond to 72 statements about yourself. The Ikigai exercise asks you to write, in your own words, about your work, your money, your relationships and the ambitions you have not acted on. Together those are the most revealing thing a product like this could hold, and we treat them as journal-class data.
- They are never sold, never shared, and never used for advertising or segmentation.
- They are never used to train any model.
- They never leave your row except to be scored — which happens on our own servers, with no model and no third party involved — or to generate your own Compass Reading at your request.
- They are included in a full self-service export, and in a hard delete that actually removes them.
- This notice will be rewritten to cover all of it, in plain language, before the first account is created.
Changes to this notice
If this notice changes materially, the date at the top changes with it, and anyone on the waitlist is told by email rather than left to notice on their own.