Waitlist Privacy Notice

1.Who we are

WildLens is operated by SD Ventures (Pty) Ltd, trading as WildLens, a private company registered with the Companies and Intellectual Property Commission (CIPC) in South Africa.

• Responsible Party / Data Controller: SD Ventures (Pty) Ltd
• Information Officer: Sam Dibowitz
• Address: Cape Town, Western Cape, South Africa
• Email: sam@wildlensonline.com
• Website: wildlensonline.com
• CIPC registration number: 2026/334909/07

South African law — the Protection of Personal Information Act 4 of 2013 (POPIA) — is our primary law. Because our waitlist is open to people anywhere in the world, we also apply the standards of the EU/UK GDPR and give all subscribers the same rights, regardless of where they live.

In plain English: we’re a small South African company, one person is accountable for your data, and you can email him directly.

2.What this notice covers — and what it doesn’t

Right now, wildlensonline.com is a coming-soon page with a waitlist form. There are no accounts, no photo uploads, no AI features, no payments, and no platform to log into.

This notice describes only the personal information involved in joining that waitlist. When WildLens launches, a full Privacy Policy will be published covering accounts, photos, AI coaching, payments and everything else — and you will be told before that happens.

3.What we collect

We deliberately collect as little as possible. When you join the waitlist, we process:

When you sign up, we send a single welcome email to confirm you’ve joined the list.

That is the complete list. We do not collect your name, your location, your photos, your payment details, or anything else at this stage.

In plain English: we take your email so we can tell you when we open, and we briefly note the IP of whoever submits the form so bots can’t spam it. Nothing more.

4.Cookies and tracking

The waitlist page uses no advertising cookies, no third-party tracking pixels, no analytics cookies, no social media trackers, and no fingerprinting. We do not sell or share personal information for advertising, and we never will.

If we add analytics later, this notice will be updated and — where the law requires it — your opt-in consent will be requested first.

5.Why we’re allowed to process this (lawful basis)

• Your consent (POPIA s11(1)(a); GDPR Art 6(1)(a)) — for holding your email address and sending you launch news. You give it by entering your email and submitting the form. You can withdraw it at any time.
• Our legitimate interests (POPIA s11(1)(f); GDPR Art 6(1)(f)) — for the short-lived IP-based rate limiting that protects the form from bots and abuse. We’ve weighed this against your privacy: the data is deleted within 10 minutes, is never linked to your email, and protects both you and us from spam.

6.What we will and won’t send you

We will use your email address only to:

• tell you when WildLens opens or opens for early access;
• send occasional, infrequent updates about the launch.

We will not sell, rent, trade or share your email address with anyone for their own marketing. We will not add you to unrelated mailing lists.

Every email tells you how to unsubscribe. At this stage, reply to any email with ‘unsubscribe’, or write to sam@wildlensonline.com, and we’ll remove you from the list immediately.

7.Who else touches your data (processors)

We use a small number of trusted service providers to run the waitlist. They process data only on our instructions:

• Vercel — hosts the website and runs the signup endpoint (United States / global edge network)
• Supabase — the database where your email address is stored (hosted infrastructure)
• Upstash — the short-lived rate-limiting store that briefly holds the IP address (United States)
• Resend — the email delivery service that sends our emails to you, including the welcome email when you sign up (United States)
• IONOS — domain and business email services

Each provider is bound by its own data-processing terms. We do not permit any of them to use your information for their own purposes.

8.International transfers

Our service providers operate servers outside South Africa, including in the United States and the European Union. That means your email address is transferred across borders.

We rely on POPIA s72 (transborder flows — the recipient is subject to laws or binding agreements providing an adequate level of protection) and, where GDPR applies, on the recognised transfer safeguards incorporated in our providers’ data-processing terms.

9.How we protect it

• All traffic to the site is encrypted in transit (TLS 1.2+).
• The waitlist database is encrypted at rest (AES-256).
• The waitlist table is locked down at the database level: no public read access whatsoever, and our own backend can only add records — it cannot edit or delete them through the application. Changing or removing a record is a deliberate, manual administrative act.
• The signup form is protected by rate limiting and a bot trap.

If a breach ever affects your personal information, we will notify the Information Regulator and affected subscribers without undue delay — and where GDPR applies, within 72 hours to the relevant supervisory authority — in line with POPIA s22 and GDPR Arts 33–34.

10.Your rights

Whoever and wherever you are, you can ask us to:

• See what we hold about you (access);
• Correct it if it’s wrong (rectification);
• Delete it (erasure / “the right to be forgotten”);
• Withdraw your consent and be removed from the waitlist entirely;
• Receive a copy of your data in a portable format;
• Object to how we’re processing it;
• Complain to a regulator (see below).

How to exercise any of these: email sam@wildlensonline.com with the subject line “Data Rights Request”. We will respond within 30 days, and it’s free. For the waitlist, deletion is immediate and permanent — there’s very little to delete.

These rights are given under POPIA Chapter 3, GDPR Arts 15–22, and equivalent laws elsewhere.

11.Children

WildLens is intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has joined the waitlist, email sam@wildlensonline.com and we will delete the record immediately.

12.Automated decision-making

We do not make any automated decisions about you based on your waitlist signup. The rate limiter blocks excessive requests from an IP address, but it makes no decision about you as a person and has no legal or similarly significant effect. (POPIA s71 / GDPR Art 22.)

13.Complaints

Please contact us first at sam@wildlensonline.com — we would rather fix it directly and quickly.

You also have the right to complain to a regulator:

South Africa — The Information Regulator (primary):

• complaints.IR@justice.gov.za
• inforeg@justice.gov.za
• Tel: 012 406 4818
• inforegulator.org.za

• EU/EEA: your local Data Protection Authority
• UK: Information Commissioner’s Office (ICO) — ico.org.uk
• US / California: California Attorney General — oag.ca.gov

14.Changes to this notice

If we change how the waitlist works, we’ll update this notice and change the “Last updated” date. If the change is significant — for example, if we start collecting something new — we’ll email you before it takes effect, and where the law requires it, ask for fresh consent.

When WildLens launches, this notice will be replaced by a full Privacy Policy. You’ll be told before that happens, and joining the platform will be a separate, opt-in decision.

15.Contact

SD Ventures (Pty) Ltd, trading as WildLens
Information Officer: Sam Dibowitz
Email: sam@wildlensonline.com
Cape Town, Western Cape, South Africa
wildlensonline.com