Privacy notice: launch waitlist
Last updated 11 October 2026 · Consent version 2026-10-11.1. This notice covers the waitlist on squareplans.com before launch. A full privacy policy for the store will be published at launch.
Who we are (controller)
Galactic Gurus (Pty) Ltd, registration number 2024/043559/07, 62 Maroelana Street, Maroelana, Pretoria, Gauteng, 0081, South Africa, trading as SquarePlans. Contact: [email protected].
What we collect and why
When you join the waitlist we store your email address; the exact consent text and its version; the date and time; the page you signed up from; your approximate country (from Cloudflare, two-letter code); a one-way hash of your IP address; and your browser's user-agent string. We use these only to send the confirmation email and launch emails you asked for, to prove your consent, and to block abuse.
Legal basis
Your consent (GDPR Art. 6(1)(a); POPIA s.11(1)(a)). We use double opt-in: you are only added after you click the link in the confirmation email. Abuse prevention (Turnstile, rate limits, IP hash) relies on our legitimate interest in keeping the service secure.
Who processes it
| Provider | Role | Location |
|---|---|---|
| Cloudflare, Inc. | Processor: hosting/CDN, Turnstile bot check, sending our emails, cookieless Web Analytics | USA and global network |
| Contabo GmbH | Processor: server that stores the waitlist | Germany |
| Paddle.com | Not involved in the waitlist. At launch Paddle becomes the Merchant of Record for orders. | UK / USA |
We do not sell or share your email address with anyone else, and we don't use advertising pixels or tracking cookies.
International transfers
Your data is processed in Germany, the USA and South Africa (where we run the business). Transfers outside the EU/UK are covered by the European Commission's Standard Contractual Clauses in our providers' data processing terms.
How long we keep it
Until you unsubscribe, or 12 months after launch, whichever is first. Unconfirmed signups are deleted after 30 days.
Your rights
You can access, correct or delete your data, withdraw consent at any time (every email has a one-click unsubscribe link), and object to processing. Email [email protected]. You can also complain to your data protection authority (in the EU, your national supervisory authority; in South Africa, the Information Regulator).