1. Who we are

H4U Group Ltd (trading as Butify) is the data controller for the personal data collected through this website. We are a company registered in England and Wales (company number available on request).

We process personal data in compliance with both the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR 2016/679) where applicable. If you are based in the European Union or European Economic Area (including Malta), your data is protected by EU GDPR and you may exercise your rights with the IDPC (see Section 10).

If you have any questions about this policy or how we handle your data, contact us at info@h4ugroup.com.

2. What data we collect and why

When you join our waitlist we collect:

Email address (required) — to notify you when Butify launches and to send you relevant updates about our service.
First name (optional) — to personalise communications.
User type — whether you are joining as a customer or a beauty professional, so we can send you relevant information.
Service interest (optional) — to understand which services you are most interested in, for product research purposes.

We also collect your IP address temporarily for the purpose of preventing spam and abuse. This is not stored in our database.

3. Legal basis for processing

We process your personal data on the basis of your consent. By submitting the waitlist form you are consenting to:

Being contacted by email when Butify launches.
Receiving occasional updates about Butify's development and services.

You may withdraw your consent at any time by emailing us at info@h4ugroup.com with the subject line "Unsubscribe". We will remove your data within 30 days.

4. How long we keep your data

We will retain your personal data for a maximum of 2 years from the date you joined the waitlist, or until you request deletion — whichever comes first.

Once Butify launches, if you have not created an account, we will delete your waitlist data within 90 days of the launch date.

5. Who we share your data with

We use the following third-party processors to operate this service:

Supabase Inc. — our database and hosting provider. Your data is stored on servers within the EU/EEA. Supabase Privacy Policy
Resend Inc. — our email delivery provider. We send your email address to Resend when sending you notifications. Resend Privacy Policy
Meta Platforms Inc. — if you have accepted cookies, we use the Meta Pixel to measure the effectiveness of our advertising. Meta may process data in the United States under Standard Contractual Clauses. Meta Privacy Policy
Vercel Inc. — our website hosting provider. Vercel processes request metadata (including IP addresses) as part of serving this website. Vercel Privacy Policy

We do not sell your personal data to any third party, and we do not share it with any party beyond those listed above.

6. Your rights

Whether you are based in the UK (UK GDPR) or the EU/EEA including Malta (EU GDPR), you have the following rights regarding your personal data:

Right of access — you can request a copy of the data we hold about you.
Right to rectification — you can ask us to correct inaccurate data.
Right to erasure — you can ask us to delete your data ("right to be forgotten").
Right to data portability — you can request your data in a machine-readable format.
Right to restrict processing — you can ask us to pause processing of your data.
Right to object — you can object to processing based on legitimate interests.
Right to withdraw consent — you can withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at info@h4ugroup.com. We will respond within 30 days.

7. Cookies

We use cookies on this website. Please read our Cookie Policy for full details.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encrypted connections (HTTPS), access controls, and regular security reviews.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with your relevant supervisory authority:

If you are based in the UK:

Information Commissioner's Office (ICO) — ico.org.uk
Phone: 0303 123 1113

If you are based in Malta or the EU/EEA:

Information and Data Protection Commissioner (IDPC), Malta — idpc.org.mt
Email: idpc.info@gov.mt

We would, however, appreciate the opportunity to address your concerns directly before you contact a supervisory authority. Please email us at info@h4ugroup.com and we will respond within 30 days.