PRIVACY NOTICE
Who we are
Pump Bar Limited (“we”, “us”) is the controller of personal data collected through the Pump Bar waiting list on this website. Contact: info@pumpbar.uk.
For UK company registration particulars (registered number, registered office, and part of the United Kingdom of registration), see Company information.
What we collect
When you join the waiting list we collect:
- Your email address
- The time you submitted the form
- A record of the consent wording and version you agreed to when you signed up
Why we use your email (purpose)
We use your email only to notify you when Pump Bar launches. We do not use this list for samples, early-access offers, or other marketing.
Lawful basis
We process your email on the basis of consent (UK GDPR Article 6(1)(a)). By submitting the waiting-list form, you consent to Pump Bar Limited emailing you when Pump Bar launches.
Withdrawing consent
You can withdraw consent at any time by emailing info@pumpbar.uk and asking us to remove your email from the waiting list. Withdrawal does not affect processing that already took place while consent was in place.
How we store submissions (Netlify)
Waiting-list submissions are collected and stored using Netlify Forms (part of Netlify’s hosting services). Under Netlify’s published Data Processing Agreement (DPA, last updated 9 June 2026), when Netlify processes customer personal data on a customer’s behalf it acts as a processor and the customer remains the controller. Netlify states it will not act as a controller of that customer data.
According to Netlify’s published DPA, Netlify and its sub-processors may process such data outside the United Kingdom / EEA (including in the United States). For restricted transfers of UK/EEA personal data to Netlify, Netlify’s DPA states that transfers take place on the basis of the EU–U.S. Data Privacy Framework and the UK Extension to the EU–U.S. DPF, as applicable. If those frameworks do not apply or are invalidated, Netlify’s DPA falls back to the European Commission’s Standard Contractual Clauses (SCCs) (Module Two where the customer is a controller) and, for UK GDPR transfers, the UK International Data Transfer Addendum (IDTA).
Netlify’s current sub-processor list is published at netlify.com/legal/subprocessors. Netlify’s forms documentation also states that form submission data is stored in Netlify’s user database.
How long we keep your email
We keep your email on the waiting list until we send the Pump Bar launch notification.
- After that launch notification, we delete your email within 90 days
- If Pump Bar has not launched within 24 months of your signup, we delete unused waiting-list emails
- We remove your email sooner if you withdraw consent or ask us to delete it
To withdraw or request removal, email info@pumpbar.uk. Deletion is carried out by us when these events apply — it is not automatic solely because this notice describes the periods above.
Your rights
Under UK data protection law you may have the right to:
- Access your personal data
- Have inaccurate data corrected
- Request erasure
- Restrict or object to certain processing
- Data portability (where applicable)
- Withdraw consent (as above)
To exercise these rights, email info@pumpbar.uk.
Complaints
You have the right to complain to the UK Information Commissioner’s Office (ICO). See ico.org.uk/make-a-complaint or contact the ICO for guidance.
This notice covers the Pump Bar waiting list only. It is not legal advice. See Company information for Pump Bar Limited’s UK registration particulars.