Privacy Policy

Last updated: 23 March 2026

Launch44 is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we protect it.

1. Who we are

Launch44 is operated by Launch44 Ltd (company registration pending), trading as Launch44. We are the data controller for the personal data processed through the Launch44 platform at launch44.co.uk.

Contact: privacy@launch44.co.uk

2. What data we collect

Readiness checker (free)

Email address (optional), answers to 15 readiness questions, and the resulting readiness score. No account is required.

Early access waitlist

Email address and submission timestamp.

Registered users

Full name, email address, organisation details, home details (name, address, type, age range, bed count, care model), personnel details (names, roles, qualification status, DBS check status — status only, no certificates), and document generation history.

What we do NOT collect

We do not store DBS certificates, health declarations, reference letters, children's personal data, or any special category data. All evidence tracking is status-only. You retain sensitive artefacts locally and submit them directly to Ofsted. This is a permanent architectural boundary.

3. Lawful basis for processing

We process your data under the following lawful bases:

  • Contract performance (Article 6(1)(b) UK GDPR) — to provide the Launch44 service to registered users.
  • Legitimate interest (Article 6(1)(f)) — to process waitlist signups and readiness checker submissions for the purpose of communicating product availability.
  • Consent (Article 6(1)(a)) — for optional analytics cookies (PostHog), which are only loaded after you consent via the cookie banner.

4. How we use your data

  • To provide the Launch44 registration guidance platform
  • To generate personalised documents using AI (your home and organisation details are sent to the AI model as generation inputs)
  • To compute and display readiness scores and checklist progress
  • To send transactional emails (magic link login, notifications)
  • To improve the product through anonymised, aggregated analytics
  • To contact waitlist members when the product launches

5. Data processors and international transfers

We use the following third-party processors. Some are based outside the UK and data transfers are governed by UK International Data Transfer Agreements (UK IDTA) or Standard Contractual Clauses (SCCs).

ProcessorPurposeLocationSafeguard
Supabase Inc.Database, authenticationUSAUK IDTA / SCCs
Anthropic PBCAI document generationUSAUK IDTA / SCCs
Resend Inc.Transactional emailUSAUK IDTA / SCCs
Vercel Inc.Hosting, CDNUSA / GlobalUK IDTA / SCCs
Stripe Inc.Payment processingUSA / IrelandUK IDTA / SCCs
PostHog Inc.Product analyticsUSA / EUConsent + SCCs

Data sent to Anthropic for AI generation includes your home name, address, care model, age range, staffing details, and organisation name. Anthropic does not use API inputs for model training.

6. Data retention

  • Active accounts: retained for the duration of your account plus 12 months after deletion.
  • Waitlist emails: retained until the product launches or you unsubscribe, whichever is sooner.
  • Readiness checker submissions: retained for 24 months, then anonymised.
  • AI generation logs: job metadata (tokens, cost) retained for 24 months. Prompt content is not stored after generation completes.
  • Audit logs: retained for 36 months for operational and compliance purposes.

7. Your rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — correct inaccurate data
  • Erasure— request deletion of your data (“right to be forgotten”)
  • Portability — receive your data in a machine-readable format
  • Restriction — limit how we process your data
  • Object — object to processing based on legitimate interest
  • Withdraw consent — for consent-based processing (analytics cookies), at any time via the cookie banner

To exercise any right, email privacy@launch44.co.uk. We will respond within one calendar month.

8. Cookies

We use strictly necessary cookies for authentication and session management. Analytics cookies (PostHog) are only loaded after you consent via the cookie banner. You can change your cookie preferences at any time.

9. Security

All data is encrypted in transit (TLS 1.2+) and at rest. Database access is controlled by row-level security policies. We do not store sensitive artefacts (DBS certificates, health records). Access to production systems is restricted to authorised personnel only.

10. Children's data

Launch44 does not collect or store any personal data about children. The platform is used by adults (home operators, managers, responsible individuals) to prepare registration documents. Any references to children in generated documents are generic descriptions of care provision, not personal data about specific children.

11. Complaints

If you believe we have not handled your data correctly, please contact us first at privacy@launch44.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Web: ico.org.uk

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users. The “last updated” date at the top of this page will always reflect the most recent version.