Privacy Notice

CaddieLens waitlist · Last updated 22 October 2026

This notice explains how personal data is processed when you visit caddielens.com and join the CaddieLens waitlist. The CaddieLens app has its own privacy policy, published with the app.

1. Controller

The controller of your personal data is Alfred Norberg, trading as CaddieLens, Skinnarviksringen 3, 117 27, Stockholm, Sweden (“CaddieLens”, “we”, “us”). For any question about this notice or your data, contact [email protected].

2. Personal data we process

• Your email address.
• The date and time you joined the waitlist.
• The version of the sign-up wording you agreed to, as a record of your consent.
• If you confirm your subscription: the date and time of confirmation, and whether our emails are opened and their links clicked (see section 4).
• When you submit the form: technical data about your connection and browser, including your IP address, processed by Cloudflare Turnstile to distinguish people from automated scripts.

This website uses no cookies, analytics or advertising trackers.

3. Purposes and legal bases

• Emails about CaddieLens and its launch on the App Store, on the basis of your consent (Article 6(1)(a) GDPR). The first email asks you to confirm your subscription; if you do not confirm, we will not email you again.
• Keeping a record of your consent, on the basis of our legitimate interest in being able to demonstrate it (Article 6(1)(f) GDPR).
• Protecting the sign-up form against spam and abuse, on the basis of our legitimate interest in keeping the waitlist free of addresses entered by automated scripts (Article 6(1)(f) GDPR).

Providing your email address is voluntary, but without it we cannot add you to the waitlist. Your data is never sold, used for any other purpose, or used for automated decision-making or profiling.

4. Recipients

We use the following service providers, who process your data on our behalf and under data processing agreements with us:

• Supabase, which stores the waitlist in its data centre in Ireland.
• Brevo (France), which sends our emails and stores the list of confirmed subscribers in the EU. Brevo records whether emails are opened and their links clicked, as a condition of its service to prevent spam; we do not use this information to profile you.
• Cloudflare (United States), which hosts this website and provides the Turnstile check.

We do not disclose your data to anyone else.

5. International transfers

Cloudflare and Supabase are established in the United States. Where either processes your data outside the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. Retention

We keep your data until you unsubscribe or ask us to delete it, and in any case no longer than six months after CaddieLens launches on the App Store. The waitlist is then deleted from Supabase and Brevo.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. You may withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal, by using the unsubscribe link in any of our emails or by writing to [email protected]. We respond to requests within one month.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se).

8. Changes to this notice

If we change how your data is processed, we will update this notice and its date. If a change affects what you consented to, we will ask for your consent again.