Privacy policy
This is the privacy policy for Hush, a pre-launch UK food project. We've kept it short and plain-English because nothing about it should be a surprise.
Who we are
Hush is a pre-launch project run from the United Kingdom. For any privacy question — including the rights set out below — write to [email protected].
What we collect when you join the waitlist
- The email address you give us.
- The pack size you said you were most interested in (e.g. 250 g, 500 g, 1 kg, 2.5 kg).
- Whether you'd want to buy as a one-time bag or a subscription.
- Which version of the landing page you saw (we run three ad variants).
- Where you came from — the UTM parameters in the link you clicked, the referrer URL, and the page URL you submitted from.
- Your IP address and browser user-agent string, recorded by our form server.
- The date and time you submitted.
- If you tick the consent box at submit, Meta (Facebook) Pixel cookies set in your browser so we can measure which advert led to your sign-up.
What we use it for
- Building a pre-launch waitlist so we can email you when Hush ships.
- Measuring which advert creative is converting, so we don't waste ad budget on copy that isn't working.
Lawful basis under UK GDPR
Consent. Specifically, the unticked checkbox you tick at submit ("I agree to receive launch emails from Hush"). You can withdraw consent at any time using the unsubscribe link in any email or by writing to us.
Cookies
This site sets no cookies until you successfully submit the form. Our analytics tool, Plausible, is cookie-free by design. The Meta Pixel — which does set cookies — is only loaded after you submit and tick the consent box, which is what makes our cookie posture banner-free.
Who we share data with
- Meta (Facebook) — receives a hashed copy of your email, your IP address, and your user agent so it can attribute your sign-up to the right ad in our reporting. This is via Meta's Conversions API.
- Our email provider (Resend) — handles the delivery of the confirmation email and any future launch emails. Your email address transits via them; they don't get the rest of your data.
- That's it. No other third parties.
How long we keep your data
Until launch (anticipated 2026) plus 12 months thereafter for transactional purposes (your founder's discount code, order history if you buy). Earlier if you ask us to delete it.
Your rights
Under UK GDPR you have the right to:
- access the data we hold about you;
- correct it if it's wrong;
- have it deleted ("right to erasure");
- receive a portable copy of it;
- withdraw consent at any time, with no effect on the lawfulness of past processing;
- complain to the Information Commissioner's Office (the UK regulator) at ico.org.uk if you think we've handled your data badly.
Write to [email protected] for any of these and we'll respond within one month.
Security
Your data is held on a UK-region server. The waitlist database is backed up daily and encrypted in transit (TLS) on the wire.
Changes to this policy
If we change anything material — what we collect, what we use it for, who we share it with — we'll update the "Last updated" date at the top, and email anyone on the list before the change takes effect.