Flarelight Private Notice

Last updated: 11th September 2026

This notice explains what happens to personal data you give us through this website. The Flarelight app works differently and is covered separately in our App Privacy Policy. If you are in the United States, our Consumer Health Data Privacy Policy sets out additional rights you may have.

Who we are

Flarelight ("we", "us") is the data controller for the personal data described in this notice. You can contact us at hello@flarelight.app or 124 City Road, London, EC1V 2NX. We are registered with the UK Information Commissioner’s Office under number. We are based in the United Kingdom. UK data protection law applies to us wherever you live. If you are in the United States, US privacy laws may give you additional rights — see our Consumer Health Data Privacy Policy.

What we collect from this website

If you join the interest list: your email address, the first name you give us if you choose to, the date and time you signed up, and the wording of the consent you gave.

If you contact us: your email address and whatever you put in your message.

Automatically: our hosting provider records standard server logs, including IP addresses, for security and reliability.

We do not use advertising cookies, analytics cookies, advertising pixels, advertising SDKs, session recording or any cross-site tracking technology on this site. There is no cookie banner because there is nothing to consent to.

Why joining the interest list involves health data

Flarelight is an app for people living with lupus and similar conditions. If you join our interest list, the fact that you have done so may suggest something about your health, or the health of someone close to you. Both UK and US law treat that as information needing extra protection.

We therefore ask for your consent before adding you to the list, and we ask separately for your consent to share your email address with our email provider. We do not ask which condition you have, and we ask you not to tell us.

Our lawful basis under UK law is your consent (UK GDPR Article 6(1)(a)), and your explicit consent for health-related data (Article 9(2)(a)).

How we use it

We use your email address to send you occasional updates about Flarelight’s development, to invite you to take part in testing, and to tell you when the app is available. That’s all.

We will not sell your data. We will not share it with advertisers or data brokers. We do not use it for profiling or automated decision-making.

Who else handles it

hello@flarelight.app — sends our emails and holds the list.

Tally (Belgium, data stored in Europe) — collects our consent and feedback forms.

Netlify (Delaware, United States)— hosts this website and keeps server logs.

All three act as processors on our instructions. We share your data with nobody else unless we are legally required to.

How long we keep it

We keep your email address until you unsubscribe, or until 24 months after our last contact with you, whichever comes first. If Flarelight does not launch, we will delete the list and tell you we have done so.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or tell you who we have shared it with.

You can withdraw your consent at any time — every email has a one-click unsubscribe link, and unsubscribing deletes you from the list rather than suppressing you. Withdrawing consent doesn’t affect anything we did before you withdrew it.

Email hello@flarelight.app to exercise any of these rights. We’ll respond within one month. If we turn down a request, we’ll explain why and how to challenge it.

Complaints

UK: the Information Commissioner’s Office, ico.org.uk, 0303 123 1113.

US: your state Attorney General’s office. Washington residents can complain at atg.wa.gov.

Elsewhere: your national data protection authority.

Changes

If we change this notice we’ll update the date above. If the change is significant and you’re on our list, we’ll email you.