WAITLIST PRIVACY · EFFECTIVE 2026-09-27
One email address. One clear purpose.
This notice explains how an email address submitted to the SOMOM waitlist is used, protected and deleted. Joining records interest only; it does not guarantee access.
- Controller
- Somom Ltd, 21 Mons. A. Bonnici Street, Malta
- Details requested
- Email address only. No name, phone, company, free text, uploads or financial records.
- Purpose
- Record your interest in at most one suitable invitation within 365 days and send one confirmation receipt for a new signup. Joining does not verify email ownership. Active duplicates receive no new receipt. No waitlist updates, newsletters or advertising.
- Legal basis
- Your consent lets us record your waitlist request, email you one confirmation receipt, and consider it for at most one suitable invitation during your registration. You can withdraw at any time without affecting earlier lawful processing. We process limited technical data for our legitimate interest in protecting the website and preventing abuse.
- Marketing
- No newsletter, advertising list, sale of details or unrelated profiling is included.
- Service providers
- Cloudflare Workers and D1 process the request and store the email. Cloudflare Turnstile checks for automated abuse. Resend receives the email address and short message content only to deliver the confirmation receipt.
- Turnstile's roles
- Cloudflare processes Turnstile data on our behalf to secure this site. It also acts as an independent controller when using that data to improve its ability to detect bots. Its Turnstile Privacy Addendum explains these separate purposes.
- Cloudflare Turnstile Privacy Addendum
- Location and transfers
- The waitlist register is stored in EU-jurisdiction Cloudflare D1. Cloudflare delivers and protects this website globally. Resend receives the email address and receipt content to send your confirmation and stores email and delivery data in the United States. International transfers use the safeguards applicable to each provider, including Standard Contractual Clauses in their data-processing agreements. Contact g@somom.com for information about the safeguards that apply to your data. Cloudflare's separate processing to improve Turnstile follows its Turnstile Privacy Addendum.
- Retention
- A registration expires after 365 days and is then ineligible for an invitation. Active duplicates do not extend this period. A fresh request after expiry or withdrawal starts a new period. Live-record deletion, provider logs and backup retention are explained below.
- Removal requests
- Contact g@somom.com to remove your email from the waitlist. The receipt has no login or verification code; it does not grant product access.
- Deletion and backups
- On an accepted removal request, we delete your live registration and its linked receipt record. Registration expires after 365 days. Cleanup is scheduled every five minutes to remove expired records; delays and failures can postpone deletion. We check scheduled failures daily and investigate reported problems, so five minutes is not a deletion or response deadline. Earlier database states remain recoverable for 30 days. After a recovery incident, restored waitlist data stays isolated and is discarded before service resumes; places may be lost, and we do not contact people from restored registrations. Resend's email and delivery records follow its separate retention terms; contact g@somom.com to request removal of a particular message. These periods are not universal physical-erasure deadlines; provider service/security data follows its applicable policy.
- Technical anti-abuse data
- Cloudflare and the website process limited connection data to deliver and protect the form. A keyed network identifier is used for rate limiting and is not written to the waitlist table. Provider processing and retention are explained in the location and deletion disclosures.
- Your choices
- Contact g@somom.com to remove your email from the waitlist. You may request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. We may ask for information reasonably needed to verify your request. Do not send identity documents or financial records for a waitlist request.
- Complaints
- You may complain to Malta's Information and Data Protection Commissioner or another competent data-protection authority.
- Malta IDPC complaint information and form
QUESTIONS OR DELETION REQUESTS
Contact g@somom.com. Never email financial records or identity documents for waitlist access.
Return to SOMOMNotice reference: 2026-09-27-confirmation-v1