Privacy.
Last updated 3 August 2026. This covers the waitlist at nextround.uk. The app gets its own policy when it ships.
What we collect.
We collect the email address, 18+ declaration and email preferences you submit. To run the waitlist safely, we also store a random entry identifier, status and timestamps, link metadata, and email delivery state. Our security service processes your source IP briefly to limit signup abuse, but we don't add it to your waitlist record or enable WAF or access request logs. We don't collect app identity, handles or crew details here.
What it's for.
Essential waitlist email confirms your address and tells you when access is ready. Keeping it active is what keeps your place on the list. News, release and event email is separate, optional, and off unless you choose it.
Our lawful basis.
We use legitimate interests to operate and protect the first-wave waitlist and send the service email needed to run it. Our interests are maintaining an accurate, secure list and delivering the access people requested. Optional news, release and event email relies on your consent, which you can withdraw in preferences at any time without losing your place.
Who else sees it.
Amazon Web Services hosts the waitlist and sends its email, processing the necessary data on our instructions. We don't sell it, share it with advertisers or put it in an ad platform. Every part of this site loads from our own domain; there are no third-party browser requests.
Tracking.
None. No analytics, no cookies, no open pixels, no click tracking and no stored WAF request samples.
How long we keep it.
Confirmed entries stay until first-wave access operations and reconciliation are finished or you leave, whichever comes first. We then delete every address, including those that chose optional waitlist-period news; any later app marketing list will ask for fresh consent. Unconfirmed entries are scheduled for deletion 10 days after the latest confirmation link is issued. Delivery and non-identifying leave records are scheduled for deletion after 30 days, and link records 90 days after a link stops working; DynamoDB normally removes an expired record within a few additional days. Operational logs expire after 30 days and failed stream copies after 14 days. Point-in-time backups can retain protected copies for up to 35 days before they expire. Provider suppression records for bounced or complained-about waitlist addresses are removed during final cleanup.
Your rights.
Email contact@nextround.uk for a copy of what we hold, a correction, full deletion, to withdraw consent or to object to our legitimate-interest processing. If you think we've handled something badly, you can complain to the ICO at ico.org.uk.
Who we are.
NEXT ROUND LTD, registered in England and Wales, company no. 17319482. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Data questions: contact@nextround.uk.