Summary
- When someone joins a waitlist, the app stores their name, email, phone if they give one, the consent wording they agreed to and their waitlist history.
- They’re added to the site’s own Wix Contacts, and emails are sent through Wix in the site’s name.
- Data is stored on Cloudflare, restricted to Cloudflare’s EU jurisdiction.
- We don’t sell data, show ads, use tracking cookies or run analytics on visitors.
- Each waitlist is deleted 90 days after the session or date it was for. Everything for a site is deleted straight away when the app is uninstalled.
Who we are
Notify Waitlist for Classes is provided by Dylan Powell trading as ImpactLayer, a sole trader based in Bridgend, UK (“we”, “us”).
Contact for anything about privacy: [email protected]
Who is responsible for what
- The business that runs the Wix site (“the business”) is the controller for its customers’ data. It decides to use a waitlist and what to do with the people on it.
- We are a processor for that data. We only use it to run the waitlist, on the business’s instructions.
- We are the controller for the business owner’s own account details, such as the site owner’s email and the app’s settings.
If you joined a waitlist on a business’s website, that business is your first point of contact. You can also email us and we’ll help.
What we store about people on a waitlist
| Data | Why |
|---|---|
| Name and email | To confirm their place and email them when a place opens. |
| Phone number, only if they give one | So the business can contact them. The app doesn’t send texts. |
| The consent wording they agreed to, and when | So the business can show what the person agreed to. |
| Waitlist history: joined, offered, claimed, booked, expired or removed, with times | To keep positions and offers right, and show the business what happened. |
| Whether each email was sent | So the business can see if someone wasn’t emailed and act on it. |
| Claim links, stored only as one-way hashes | To check a claim link is genuine and used only once. The link itself can’t be rebuilt from what we store. |
What we store about your site
| Data | Why |
|---|---|
| Waitlist settings, email templates and which services are switched on | To run the waitlist the way you set it up. |
| Cached site details: business name, timezone, site URL, site email, owner email and Wix plan, refreshed every few minutes | To fill in emails, use the right timezone, send owner notifications and apply the right app plan. |
| Wix event IDs, kept for 7 days | To ignore duplicate messages from Wix so nobody is offered a place twice. |
| Short error logs, with no email content | To find and fix problems. |
To know when a place opens, the app reads the services, sessions and booking changes (booked, cancelled, rescheduled) for the services you switch on. It doesn’t keep copies of your bookings beyond what’s listed above.
Where it’s stored
Everything above is stored on Cloudflare (Cloudflare, Inc.) using Durable Objects restricted to Cloudflare’s EU jurisdiction, so it’s stored and processed in EU data centres. Data held by Wix, such as your Wix Contacts and the emails Wix sends, is stored as described in Wix’s own privacy policy.
Who it’s shared with
- The business’s own Wix site: each person’s name, email and phone are added to the site’s Wix Contacts, so the business can see them.
- Wix’s email service: confirmation and offer emails are sent through Wix’s Email Transmissions service, in the site’s name.
We don’t sell data and don’t share it with anyone else. These are our processors:
| Who | What for |
|---|---|
| Wix.com Ltd. | The platform the app runs on, and email delivery. |
| Cloudflare, Inc. | Hosting and storage. |
Cookies and tracking
The app sets no tracking cookies, runs no analytics on site visitors and shows no advertising. The waitlist form and claim page don’t track visitors. The business’s Wix site may set its own cookies, as described in that site’s and Wix’s policies. This website sets no cookies.
How long we keep it
- Waitlists: each waitlist, and the personal data in it, is deleted automatically 90 days after the session or date it was for.
- Leaving a waitlist: every email has a link to leave. The person is taken off the list straight away. Their record is deleted with the rest of that waitlist after 90 days, or straight away if they ask us at [email protected].
- Wix event IDs: 7 days.
- Uninstalling: everything we store for the site is deleted immediately when the app is uninstalled.
Wix Contacts stay with the site
People added to the site’s Wix Contacts belong to the business’s site, not to us, so uninstalling the app doesn’t remove them. The business can delete them in Wix.
Lawful basis
For people on a waitlist, the business decides the lawful basis, as the controller. Visitors see consent wording when they join, and we record what they agreed to and when. For the business owner’s account details, our basis is providing the app you installed (contract) and our legitimate interest in running it securely.
Security
- Claim links are stored only as one-way hashes.
- Messages from Wix are checked for a valid signature before the app acts on them.
- The dashboard can only be opened through Wix sign-in, by people with access to the site.
- All data travels over encrypted connections (HTTPS), and Cloudflare encrypts stored data at rest.
Your rights
Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, or object to how it’s used. If you’re on a waitlist, you can ask the business or email us. We’ll act on the business’s instructions and help them answer your request. You can also ask us to delete your waitlist record straight away.
Email [email protected]. If you’re unhappy with how your data is handled, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
If we change this policy, we’ll update this page and the date at the top.