How we use your information

Who is responsible

D2W Finance Group is the trading name used for this early-stage project. Until a company is incorporated, Ibrahim Uddin is the data controller for the website and waitlist. Privacy enquiries can be sent to contact@d2wfinancegroup.com.

Your V1 waiting-list choice

The V1 waiting list is separate from beta applications. We do not copy existing beta contacts into it. The V1 form asks you to consent to emails about V1 launch progress and availability; other D2W news and research invitations are a separate, optional choice. Both choices start unchecked. For new signups, we record the exact wording and version of both choices, the time you consented, the privacy notice version and any later withdrawal. Earlier records retain the evidence collected at the time. We require email confirmation before treating an address as confirmed. Joining does not create an app account or paid membership.

We rely on your consent for these V1 launch emails and any separately chosen marketing. You can withdraw either choice at any time by emailing contact@d2wfinancegroup.com. Leaving the V1 list does not affect an existing beta invitation or account. Tell us if you want a request to cover both lists or your app data.

Information we collect

We collect your email address, optional first name, confirmation that you are aged 18 or over and live in the UK, the relevant signup confirmations and, for V1, your launch-email consent, your optional marketing choice, signup source, status and timestamps. We also record whether you completed email verification, confirmation-email attempts, provider references and whether a registration is an owner-identified test. When email ownership is checked manually, we keep the method, date, a brief note of the check and the owner account that recorded it with the registration. Security limits use keyed fingerprints rather than storing raw IP addresses in our waitlist database. Our service providers may also process limited technical and security information such as an IP address, device information and server logs.

Your email, the required signup confirmations and email verification are needed to complete a registration. On the V1 form, launch-email consent is required because receiving these updates is the purpose of that list; your name and consent to other marketing are optional. The verification link contains a signed, random token, expires after 24 hours and is not stored in raw form in our database. Confirming it shows control of that mailbox at that time; it does not prove a person’s wider identity. We can also record an independent ownership check, such as a reply from your email address. Sending you an email alone does not complete verification.

We do not ask for bank details, income, debt balances, credit scores, religion or other financial information on the waitlist form.

The standalone Safe-to-Spend calculator

The public calculator works in your browser. The amounts and optional income date you enter are not sent to D2W, saved to your account or included in analytics events. They are cleared when you reload or leave the page. It does not connect to a bank or change your financial accounts. If you separately choose to join the waiting list, only the information requested by that form is submitted.

Employer enquiries

The employer form prepares an email draft in your browser. Preparing or copying it does not send your details to D2W or save them in our website database. If you choose to send the email, we receive the contact and organisation details and any optional pilot information you include. We use them to respond to your enquiry and discuss the requested pilot or letter of intent. Your email provider and ours handle the message when you send it. An enquiry does not subscribe you to the consumer waiting list or other marketing, and does not sign a letter of intent. Please do not include employees’ personal financial information.

Why we use it and our lawful basis

• To record and manage your requested application, contact you about selection and beta access, and arrange the feedback activities and reward for founding members who choose to participate, based on our legitimate interests in responding to your request and running the programme.
• To prevent duplicate registrations, protect the service and understand whether the waitlist is working, based on our legitimate interests in operating and improving D2W.
• To send optional product updates or invitations to other research where you have given consent; you may withdraw that consent at any time without affecting a programme you requested to join.
• To meet legal obligations and establish, exercise or defend legal claims where necessary.

Who receives it

We do not sell your information. The website is hosted through Sites, waitlist records are stored in Supabase, and confirmation emails are sent through Resend. These providers process information needed to host and secure the website, store records or deliver emails. Access is limited to what is necessary. When you accept optional analytics, Google also processes website usage information to provide Google Analytics reports.

Optional website analytics

We use Google Analytics 4 on the basis of your consent to understand visits and improve the website. It can process browser identifiers, page views, interactions, device and browser information, approximate location and referral information. We do not deliberately send your name, email, waitlist answers or financial details to Analytics, and do not join analytics identifiers to waitlist records. If analytics is accepted, the website records a generate-lead event only after email verification succeeds. The verified waitlist record—not Analytics—is our source of truth. Advertising personalisation and Google signals are disabled in our website tag configuration.

Google may process analytics information outside the UK, including in the United States, under its applicable data-processing terms and transfer safeguards. Read Google’s Privacy Policy. The Cookie Notice explains browser storage and expiry. Analytics event-data retention is controlled separately in our Google Analytics property; aggregated reports may be retained for longer. Contact us for the current retention setting.

Analytics is off until you accept it. You can withdraw consent through “Cookie settings” on any page without losing access to the waitlist. Withdrawal stops future collection; it does not affect the lawfulness of processing before withdrawal or automatically delete earlier reports.

International transfers

Some providers may process information outside the UK. Where UK data-protection law requires it, we will use an approved safeguard such as UK adequacy regulations or contractual protections. You may contact us for more information about the safeguards relevant to your data.

How long we keep it

Pending beta and V1 registrations that are not email-verified are automatically deleted after seven days. We keep verified waitlist records for no more than 24 months after our last meaningful contact with you. Leaving a list stops further list emails and marks the record removed; the email address and consent history may remain until that retention period ends so we can document and honour your choice. You can ask for erasure sooner. V1 withdrawals also record a withdrawal date and turn off V1 launch-email permission. An automated retention check removes expired waitlist records and their confirmation jobs. After removal or erasure, we retain a keyed fingerprint of the email address for up to 24 months to honour the request; it cannot be used to send email. Signup rate-limit fingerprints expire within 25 hours. Operation-only audit records are kept for 12 months and contain no names or email addresses. Our providers may retain restricted backup or security records under their own retention schedules; deleting the live record does not instantly erase backups.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability. You may also withdraw consent without affecting earlier lawful use. Contact us at contact@d2wfinancegroup.com. We may need to verify your identity before acting.

Your right to object: you may object to processing based on our legitimate interests, and you can object to direct marketing at any time.

You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Automated decisions and children

Waitlist information is not used for automated credit decisions and joining creates no eligibility or priority for future finance. The waitlist is intended only for UK adults aged 18 or over.

Changes to this notice

We may update this notice as the product and its providers change. Material changes will be highlighted on this page and, where appropriate, sent to people on the waitlist.