Privacy Policy

Last updated: 5 October 2026

This policy explains what personal data RECOVERD collects when you join our waitlist, why, and the choices you have.

Who we are

RECOVERD is a brand operated by AKL CAPITAL LTD ("we"), a company registered in England and Wales (company number 14775229) with its registered office at Suite 1 Miller House, 47-49 Market Street, Farnworth, Bolton, England, BL4 7NS. We are the controller of your personal data.

What we collect

Your email address, when you join the waitlist.
A record of your consent: the wording you agreed to (by version) and the date and time.
How you found us: campaign tags in the link you followed (for example utm_source), the website that referred you (its address only, not the full page) and the page you signed up on.
Your IP address and basic browser information, used briefly to protect the form from abuse (see below). We do not store your IP address.

Why we use it and our lawful basis

To email you about RECOVERD's launch, early access and offers. Lawful basis: your consent. You can withdraw it at any time.
To keep a record that you consented. Lawful basis: our legitimate interest in showing we only email people who asked us to.
To understand which channels bring people to the waitlist, using the information about how you found us. Lawful basis: our legitimate interest in planning our marketing.
To protect the sign-up form from bots and abuse (a security check and a limit on repeated attempts). Lawful basis: our legitimate interest in keeping the service secure.

Who we share it with

We use the following service providers, who process data on our behalf and under our instructions:

Brevo (Sendinblue SAS, France): our email platform. Stores your email address, consent record and how you found us, and sends our emails.
Vercel Inc. (USA): hosts this website. Processes technical request data, including IP addresses, in its server logs.
Upstash, Inc.: limits repeated sign-up attempts. Stores a scrambled, non-reversible version of your IP address for up to 10 minutes.
Cloudflare, Inc. (USA): provides the Turnstile security check that tells people from bots. Processes your IP address and browser signals for that check.
Brevo stores data in the European Union, which the UK recognises as providing adequate protection. Where Vercel, Upstash or Cloudflare process data in the United States, we rely on the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework) or the UK's International Data Transfer Agreement or Addendum, as applicable to each provider.
We do not sell your data.

How long we keep it

Your email address and how you found us: until you unsubscribe or ask us to delete it. If we don't launch, we'll delete it within 12 months.
Your consent record: for 2 years after you unsubscribe, so we can show we had your consent.
Rate-limit data: up to 10 minutes. Hosting logs: kept for a short period set by our hosting provider, then deleted automatically.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, or to receive a copy of it. You can withdraw consent at any time by clicking unsubscribe in any of our emails or contacting us at hello@recoverdskin.com.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). We'd appreciate the chance to help first.

Children

The waitlist is intended for people aged 18 and over.

Changes to this policy

We'll update this page if we change how we use your data, and change the date at the top.