Privacy notice

Last updated 6 September 2026

Pedravel is not trading yet. This site shows what the collection will be and lets you join a waitlist. This notice says what we collect, why, how long we keep it and what you can ask us to do about it.

Who we are

Pedravel is the trading name of a sole trader based in London, who is the data controller for everything described here. We will give you the trader's full name and postal address on request.

Contact: hello@pedravel.com.

What we collect and why

What	Why	Lawful basis
Waitlist	Your email address, the tier you chose, and — if you fill them in — your intention and your own words for it. Used to hold your place and to email you about the launch.	Consent. There is no tick-box: you press Reserve, and the text on the form says what you are agreeing to.
Consent evidence	The time you joined, your IP address, your browser user-agent, the page you joined from, and the exact wording you were shown. Kept so we can show that consent was given, if we are ever asked to.	Legal obligation and legitimate interest — UK GDPR Art. 7(1) requires us to be able to demonstrate consent. These records are append-only and are never edited.
Anonymous counters	Which buttons are pressed and which tier was chosen, so we can measure interest. No cookie, no identifier, no IP address is stored — only aggregate numbers. This runs whatever you choose about cookies.	Legitimate interest. Nothing here identifies you, so nothing here can be traced back to you.
Analytics (Google Analytics 4)	Before you allow cookies, Google receives cookieless pings tagged “consent denied”, with no persistent identifier. If you press Allow, Google Analytics then sets its own cookies (`_ga`, `_ga_*`) which last up to two years.	Consent, for the cookies. The pre-consent pings are a choice we have made rather than something you have agreed to; if you would rather they were not sent, do not use the site, or email us and we will tell you what we have.
Advertising measurement (Meta Pixel)	Marketing. If you press Allow, Meta sets a cookie (90 days) so we can see whether our adverts work. When you join the waitlist we tell Meta too, using a securely hashed form of your email address along with your IP address and browser details. If you arrived from one of our adverts, we also tell Meta that you visited and which stone you looked at.	Consent.
`pv_consent` cookie	Remembers whether you pressed Allow or No thanks, for 180 days, so we do not ask again on every visit.	Strictly necessary — it exists only to honour the choice you made.
Rate limiting	IP addresses of people submitting the form are held in the server's memory for up to an hour, to limit abuse. They are not written to disk.	Legitimate interest in keeping the site working.

Who processes it for us

Fly.io — hosting. The server runs in Fly's London region.
Amazon Web Services (S3, eu-west-2 London) — encrypted backups of the waitlist database.
Resend — sends the emails. EU region.
Google — Analytics only. Transfers to the United States rely on the UK extension to the EU–US Data Privacy Framework, and on the ICO's International Data Transfer Addendum where the Framework does not apply.
Meta Platforms Ireland — advertising measurement: the browser pixel if you allowed cookies, and the hashed email and browser details sent when you join the waitlist. Transfers to the United States rely on the UK extension to the EU–US Data Privacy Framework, and on the ICO's International Data Transfer Addendum where the Framework does not apply.

We do not sell your data. The only advertising use is the Meta measurement described above, and only with your consent.

How long we keep it

Waitlist details — until you unsubscribe, or 24 months after the waitlist closes, whichever comes first.
Consent evidence — six years from the date consent was withdrawn or the waitlist closed, matching the limitation period for a claim. This is the record that protects you as much as us: it is what proves what you were shown.
Backups — roll off after 30 days.
Anonymous counters — kept indefinitely. They identify no one, so there is nothing in them to delete.
Cookies — your Allow/No thanks choice 180 days; Google's up to two years; Meta's 90 days. Clearing this site's cookies removes them.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it over in a portable form, or stop a particular use of it. You can withdraw consent at any time — every email has a one-click unsubscribe link, or you can email hello@pedravel.com. Withdrawing consent does not undo anything done before you withdrew it.

We answer within one month. If we get it wrong, you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.

Changes

If this notice changes, the date at the top changes with it. The wording you agreed to when you joined the waitlist is stored as it was on the day, and is never rewritten — a new version is added alongside it.