Privacy notice

Last updated: 25 August 2026

This notice explains how OSKY PLATFORM CIC ("osky", "we", "us") collects and uses personal data when you use this pre-launch website at osky.uk, including the buyer, seller, investor and ideas forms. Personal data means information that identifies you or can be linked to you.

We provide this notice under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These laws require us to explain clearly what we collect, why we use it, who we share it with and how long we keep it.

osky itself is not yet trading. This site is a pre-launch waitlist and feedback board while we build the marketplace, planned to launch in 2027.

Who we are

OSKY PLATFORM CIC is a Community Interest Company registered in England and Wales, company number 17312067. Registered office: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom.

We are the data controller, which means we decide why and how the personal data in this notice is used. You can contact us about privacy at [email protected].

What we collect and why

• Buyer waitlist
  • What we collect
    • Email address
  • Why: To send you a confirmation email and keep you updated about osky's launch
• Seller waitlist
  • What we collect
    • Full name
    • Business name
    • Email address
    • Product category
    • A short description of what you make or sell
  • Why: To understand seller demand, learn which types of products sellers offer, and invite you when seller tools open
• Investor waitlist
  • What we collect
    • Full name
    • Business name (if applicable)
    • Email address
    • Proposed investment amount
    • Expected return
  • Why: To record your interest without creating any commitment, and to contact you about a possible future investment opportunity
• Ideas board
  • What we collect
    • Email address
    • The idea you submit
    • For voting, a one-way code made from your IP address and browser information. This helps us recognise a repeat vote without storing those original details with the vote
  • Why: To review your idea and, if it fits our plans, publish it for others to vote on

Every form also records technical information needed to keep the site secure and stop abuse:

• your IP address;
• basic information about your browser and device, called a user agent;
• your approximate country, derived from your IP address by our hosting provider; and
• the time of submission.

We also use Cloudflare Turnstile, a security check that helps us block automated submissions.

Our legal reasons for using data

Data protection law requires us to have a valid reason, known as a lawful basis, whenever we use personal data:

• Consent (Article 6(1)(a) UK GDPR) for adding you to a waitlist and emailing you about osky, including our launch. The Privacy and Electronic Communications Regulations (PECR), the UK rules covering electronic marketing and cookies, also apply to these emails. We email you only after you confirm your address using the link we send. You can withdraw consent at any time using the unsubscribe link in any email or by contacting us.
• Legitimate interests (Article 6(1)(f)) for reviewing and publishing suitable ideas, operating idea voting, and using the technical and security information above to prevent spam and abuse. This means we need the data to run and protect these features, and we balance that need against your privacy rights.
• Legal obligation (Article 6(1)(c)) when the law requires us to keep or disclose records. This may include tax and accounting records or a lawful request from a regulator or law enforcement.

We do not use your data to make automated decisions about you that have legal or similarly important effects.

Who we share it with

We use service providers, known as data processors, to run this site. They handle personal data for us and may use it only on our instructions:

• Cloudflare, Inc. - website hosting, processing form submissions, database storage, spam and bot protection, and email delivery.

We do not sell personal data, and we do not share it with any other third party for their own marketing purposes.

Sending data outside the UK

Cloudflare operates a global network, so personal data may be processed outside the UK and the European Economic Area (EEA). Where required, we rely on Cloudflare's contract terms, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses. These are standard legal terms designed to protect personal data when it is transferred abroad.

How long we keep it

We keep waitlist and ideas submissions while this pre-launch site is running and you remain subscribed. We delete them or remove identifying details within 24 months of your last interaction with us (for example, your last confirmation, click or reply), or sooner if you ask us to. We may keep limited information for longer if needed to answer an ongoing query or meet a legal obligation.

Before the marketplace launches, we will carry out a data protection impact assessment - a review that identifies and reduces privacy risks. We will update this notice if our retention periods change.

Your rights

Under UK GDPR you have the right to:

• ask for access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data or restrict how we use it;
• object to processing based on our legitimate interests;
• ask for your data in a portable, machine-readable format, where technically feasible; and
• withdraw consent at any time, without affecting anything we did before you withdrew it.

To exercise any of these rights, email [email protected]. If you are unhappy with how we have handled your data, you can also complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Cookies and similar technology

This site does not use analytics or advertising cookies. See our cookie policy for full detail on what we use and why.

Children

This site is intended for adults registering interest as a buyer, seller or investor. We do not knowingly collect personal data from children.

Changes to this notice

We may update this notice as the site and, later, the marketplace develop. We will change the "last updated" date above when we do. We will tell confirmed subscribers by email about important changes to how we use their data.

Investor registrations

Registering investor interest does not commit you or osky to an investment. It is not a financial promotion - a message inviting or persuading you to invest. It only records that you would like to hear about a possible future investment round.