Waitlist privacy notice

Current Limited
NZBN 9429052944178
Company number 9352940
2 Wakefield Street, Auckland Central, Auckland 1010, New Zealand

Privacy officer: Callum Moray-Cook
Email: hello@current.nz

Callum looks after this waitlist information for Current Limited.

When you submit the form we store:

• your name
• your email address
• your organisation website
• your role: Club admin, Coach, Volunteer, or Other
• a short note, only if you choose Other
• the time we saved the form
• that you ticked the email box, and when we recorded your consent
• a marker that the signup came from this website

The box starts unticked. It says: “Email me about zallo's launch, early access and updates. Unsubscribe anytime.” You have to tick it to join. The form also says: “For adults representing community organisations.”

We keep a record of that choice and when we recorded your consent, together with the wording that was on the form. We do not keep a separate copy of the words.

We do not store your IP address in the waitlist database. We store a hash of it, so we can limit repeated attempts. We delete hashes older than 24 hours in an hourly cleanup.

We use your details to email you about zallo's launch, early access, and updates, and to see which organisations are interested.

Joining is your choice. If you do not join, we will not email you about the launch.

We are not sending those emails yet.

The waitlist is stored by Supabase in Sydney, Australia. That is outside New Zealand. Supabase is an overseas provider.

This website is hosted by Vercel, a United States company. The waitlist functions run in Sydney. Vercel may still process information in the United States.

When someone joins, we send a best-effort internal notification to Slack (Slack Technologies Limited), which acts as our processor. The notification contains the organisation's website address (hostname), the role selected, and the signup time. Each notification includes a short reference code that allows us to find and delete the matching message if needed, without including your name or email address. The notification does not include your name, email address, or note. Slack may process this information in the United States.

These messages are temporary operational notifications. They are kept in a private Slack channel limited to authorised team members only while the waitlist operates. There is no automatic Slack deletion. They are used only to tell the team about new signups for short-term follow-up while the waitlist runs. Our waitlist database remains the record of your signup. A matching message is deleted manually when the related signup is deleted, including on a valid deletion request. The channel and its messages are deleted when the waitlist ends, and in any case no later than the routine deletion of waitlist data.

If you ask us to delete your information and the request is valid, we also delete the matching Slack message.

We do not copy waitlist rows to Google Sheets or any other spreadsheet. If we start, we will update this notice.

Vercel may keep a runtime log that includes the IP address and browser type. That log may be processed in the United States. Vercel keeps it for 1 day, or for up to 30 days.

Supabase keeps logs for up to 7 days. Those logs can include the IP address of our server's connection, not your browser.

This site uses Vercel Web Analytics. It does not use cookies. It does not store your name, email, or IP address.

We will delete waitlist signups 12 months after the zallo product launches (not the launch of this coming-soon page), unless you ask us sooner or the law requires otherwise. Deletion is done manually.

You can ask to access or correct your information, or request deletion, by emailing hello@current.nz.

You can ask to:

• see the waitlist information we hold about you
• correct it
• delete it
• withdraw consent and unsubscribe at any time

Email hello@current.nz. Once we send emails, each message will also include an unsubscribe link.

We respond to access and correction requests from New Zealand within 20 working days, unless a lawful extension applies. Unsubscribe and consent-withdrawal requests are handled promptly, and once we send emails, within 5 working days.

You can also complain to:

• in New Zealand, the Office of the Privacy Commissioner at privacy.org.nz
• if you are in the United Kingdom, the Information Commissioner's Office at ico.org.uk
• if you are in Australia, the Office of the Australian Information Commissioner at oaic.gov.au

Current Limited, in New Zealand, is the controller for this waitlist.

Under UK GDPR we rely on:

• your consent, for emails about zallo's launch, early access, and updates. You can withdraw that consent at any time.
• legitimate interests, to limit spam and abuse. We delete hashes older than 24 hours in an hourly cleanup.
• legitimate interests, to keep a record of your consent.
• legitimate interests, to send a best-effort internal Slack notification (organisation hostname, role, signup time, and a short reference code) for internal notification and short-term follow-up while the waitlist runs. The fields are limited to what that purpose needs, the channel is private and limited to authorised team members, and messages are kept only while the waitlist operates. There is no automatic Slack deletion. A matching message is deleted manually with the signup, including on request, and the channel and its messages are deleted when the waitlist ends, and in any case no later than the routine deletion of waitlist data. You can object.

You can ask to:

• access your information
• correct it
• delete it
• restrict how we use it
• object, including where we rely on legitimate interests
• receive a copy of it
• withdraw consent

Email hello@current.nz.

New Zealand has a UK adequacy decision. Supabase in Sydney and Vercel in the United States are covered by the UK International Data Transfer Addendum to the standard contractual clauses in their data processing agreements.

We use Slack for internal notifications, provided to us by Slack Technologies Limited (Ireland), part of Salesforce. Slack may process this information in the United States through its US affiliate Slack Technologies, LLC, which is covered by Salesforce, Inc.'s certification under the EU-US Data Privacy Framework and its UK Extension. Slack's standard data protection terms also apply.

You can complain to the Information Commissioner's Office at ico.org.uk.