Privacy Policy

Who we are

Activitus Limited is a company registered in England and Wales. We build software and provide services for student union activities teams. For the purposes of UK GDPR, we are the data controller for information collected through this website.

You can contact us at [email protected] with any questions about this policy or your personal data.

What data we collect

When you use our contact form, we collect your name, email address, organisation (optional), and the content of your message.

When you join our early-access waitlist, we collect your email address and the page you signed up from (e.g. 'home', 'palette/blackbox') for attribution.

When you use our platform (app.activitus.co.uk), we collect account information such as your name, email address, and institutional affiliation, as well as data you create while using our tools.

We may also collect basic technical information such as your IP address, browser type, and pages visited when you visit our website, for security, performance, and (where you have consented) product analytics purposes.

How we use your data

We use contact form submissions to respond to your enquiry and, where relevant, to follow up about our products and services. The legal basis for this is our legitimate interests in running our business.

We use waitlist signups to notify you when products become available and to share occasional product updates. The legal basis is your consent, given when you submit the form. You can withdraw consent at any time by replying to any of our emails or contacting [email protected].

We use account data to provide, maintain, and improve our platform. The legal basis for this is the performance of a contract with you.

We use error monitoring and (consent-gated) product analytics to understand how the website and platform are used and to fix problems quickly. The legal basis for analytics is your consent, given by accepting cookies. The legal basis for error monitoring is our legitimate interests in keeping the service running.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

How long we keep your data

Contact form submissions are kept for up to 24 months, after which they are deleted unless an ongoing relationship has been established.

Waitlist emails are kept until you unsubscribe or for two years after the last contact, whichever is sooner.

Platform account data is kept for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required by law to retain it.

Analytics and error monitoring data is retained per our processors' standard retention (typically 12 months) and is not joined to identifying personal data on the marketing website.

Sub-processors

We use a small number of trusted third-party providers to operate the website and platform. These providers process data on our behalf and are bound by data processing agreements:

Vercel Inc. — hosting, CDN, and serverless functions for both activitus.co.uk and app.activitus.co.uk.

Cloudflare Inc. — DNS and inbound email routing for activitus.co.uk.

Resend.com — transactional and waitlist email delivery (sender domain activitus.co.uk).

PostHog Inc. (EU region) — product and website analytics. Only loaded after you accept analytics cookies via the banner.

Functional Software, Inc. (Sentry) — error monitoring for both the website and the platform.

Clerk, Inc. — authentication and user management for the platform (app.activitus.co.uk only). Not loaded on activitus.co.uk.

We do not transfer your personal data outside the UK or EEA except where our sub-processors operate servers in adequate or safeguarded regions (PostHog EU cloud, Vercel EU regions where available). An up-to-date sub-processor list is also available on request.

Your rights

Under UK GDPR, you have the right to access the personal data we hold about you, to correct inaccurate data, to request deletion of your data, to object to or restrict processing, and to data portability.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically.