How we use your information

Who is responsible

D2W Finance Group is the trading name used for this early-stage project. Until a company is incorporated, Ibrahim Uddin is the data controller for the website and waitlist. Privacy enquiries can be sent to contact@d2wfinancegroup.com.

Information we collect

We collect your email address, optional first name, confirmation that you are aged 18 or over and live in the UK, acknowledgement that the waitlist is not a credit application, your optional marketing choice, signup source, status and timestamps. We also record whether you completed email verification, confirmation-email attempts, provider references and whether a registration is an owner-identified test. When email ownership is checked manually, we keep the method, date, a brief note of the check and the owner account that recorded it with the registration. Security limits use keyed fingerprints rather than storing raw IP addresses in our waitlist database. Our service providers may also process limited technical and security information such as an IP address, device information and server logs.

Your email, both confirmations and email verification are required if you want to complete a waitlist registration; your name and marketing choice are optional. The verification link contains a signed, random token, expires after 24 hours and is not stored in raw form in our database. Confirming it shows control of that mailbox at that time; it does not prove a person’s wider identity. We can also record an independent ownership check, such as a reply from your email address. Sending you an email alone does not complete verification.

We do not ask for bank details, income, debt balances, credit scores, religion or other financial information on the waitlist form.

Why we use it and our lawful basis

• To record and manage your requested application, contact you about selection and beta access, and arrange the feedback activities and reward for founding members who choose to participate, based on our legitimate interests in responding to your request and running the programme.
• To prevent duplicate registrations, protect the service and understand whether the waitlist is working, based on our legitimate interests in operating and improving D2W.
• To send optional product updates or invitations to other research where you have given consent; you may withdraw that consent at any time without affecting a programme you requested to join.
• To meet legal obligations and establish, exercise or defend legal claims where necessary.

Who receives it

We do not sell your information. The website is hosted through Sites, waitlist records are stored in Supabase, and confirmation emails are sent through Resend. These providers process information needed to host and secure the website, store records or deliver emails. Access is limited to what is necessary. When you accept optional analytics, Google also processes website usage information to provide Google Analytics reports.

Optional website analytics

We use Google Analytics 4 on the basis of your consent to understand visits and improve the website. It can process browser identifiers, page views, interactions, device and browser information, approximate location and referral information. We do not deliberately send your name, email, waitlist answers or financial details to Analytics, and do not join analytics identifiers to waitlist records. If analytics is accepted, the website records a generate-lead event only after email verification succeeds. The verified waitlist record—not Analytics—is our source of truth. Advertising personalisation and Google signals are disabled in our website tag configuration.

Google may process analytics information outside the UK, including in the United States, under its applicable data-processing terms and transfer safeguards. Read Google’s Privacy Policy. The Cookie Notice explains browser storage and expiry. Analytics event-data retention is controlled separately in our Google Analytics property; aggregated reports may be retained for longer. Contact us for the current retention setting.

Analytics is off until you accept it. You can withdraw consent through “Cookie settings” on any page without losing access to the waitlist. Withdrawal stops future collection; it does not affect the lawfulness of processing before withdrawal or automatically delete earlier reports.

International transfers

Some providers may process information outside the UK. Where UK data-protection law requires it, we will use an approved safeguard such as UK adequacy regulations or contractual protections. You may contact us for more information about the safeguards relevant to your data.

How long we keep it

Pending beta registrations that are not email-verified are automatically deleted after seven days. We keep a verified active waitlist record until you leave the waitlist, or for no more than 24 months after our last meaningful contact with you. An automated retention check removes expired waitlist records and their confirmation jobs. After removal or erasure, we retain a keyed fingerprint of the email address for up to 24 months to honour the request; it cannot be used to send email. Signup rate-limit fingerprints expire within 25 hours. Operation-only audit records are kept for 12 months and contain no names or email addresses. Our providers may retain restricted backup or security records under their own retention schedules; deleting the live record does not instantly erase backups.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability. You may also withdraw consent without affecting earlier lawful use. Contact us at contact@d2wfinancegroup.com. We may need to verify your identity before acting.

Your right to object: you may object to processing based on our legitimate interests, and you can object to direct marketing at any time.

You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Automated decisions and children

Waitlist information is not used for automated credit decisions and joining creates no eligibility or priority for future finance. The waitlist is intended only for UK adults aged 18 or over.

Changes to this notice

We may update this notice as the product and its providers change. Material changes will be highlighted on this page and, where appropriate, sent to people on the waitlist.