Privacy Notice

Version: 1.1 · Effective date: 16 October 2026

This notice explains how personal information is handled when you register your interest in ISO Creator Pro® early access.

Who is responsible

Data Controller: Thinking Freely Ltd

Registered Office:

Brand: ISO Creator Pro®
Privacy contact: info@isocreatorpro.com

This notice is intended to address the UK General Data Protection Regulation and Data Protection Act 2018, the EU General Data Protection Regulation where it applies, and relevant privacy rights in other jurisdictions, including US state laws where applicable.

Information we collect

When you submit the early-access form, we collect your name, business email address, company name, whether you are interested as a Business or Consultant, the date and time of submission, and whether you acknowledged this notice. We also record your optional marketing preference in the registration notification sent to our business inbox.

For abuse prevention, the website uses Cloudflare Turnstile and a short-lived, in-memory rate limit based on the connecting IP address. Cloudflare describes Turnstile signals as including the client IP address, TLS fingerprint, browser user-agent, site key and associated origin. The site does not keep a separate registration database.

Why we use the information and our lawful bases

• To handle your early-access enquiry and send the registration notification to our business inbox: our legitimate interests in responding to enquiries and administering the launch.
• To protect the form and website from spam and abuse: our legitimate interests in keeping the service secure and available.
• To record and respect your optional marketing preference: your consent, if you opt in. We do not currently send marketing campaigns from this registration form. If we send marketing in future, we will use the recorded preference and respect any withdrawal.
• To keep appropriate consent and suppression evidence: our legitimate interests in demonstrating and respecting your communication preferences, and compliance with legal obligations where they apply.

The required privacy acknowledgement confirms that you have been told how the enquiry information will be used; it is not consent to all processing. You can submit the form without agreeing to optional marketing.

Marketing choices

Marketing is optional and the checkbox is unticked by default. The form records your choice but does not currently send marketing campaigns or add you to a separate mailing list. You can withdraw an opt-in at any time by emailing info@isocreatorpro.com. We handle withdrawals manually. Withdrawing consent does not affect processing that took place before withdrawal or other processing that has a separate lawful basis.

Who receives the information

Registration details are sent to Thinking Freely Ltd’s business inbox at info@isocreatorpro.com. 123 Reg provides the business email hosting. Microsoft Outlook is only the application we use to access that mailbox; it is not the email hosting provider. The service providers used for the registration are:

• Replit to host and serve the landing page;
• Resend to deliver registration notification emails;
• Cloudflare Turnstile to help prevent automated and abusive form submissions; and
• 123 Reg to host the business email mailbox that receives registration notifications.

For security, Cloudflare processes Turnstile signals on behalf of the website to assess and block bots. Cloudflare also documents a separate use of those signals as a controller to improve Turnstile’s bot-detection service. Cloudflare states that the signals are strictly necessary for bot detection and describes legitimate interests as its basis for its separate improvement use where UK or EU data-protection law applies. See Cloudflare’s Turnstile Privacy Notice.

We do not currently store registrations in a separate website database. The notification email is the registration record available to us; provider and mailbox retention may also apply.

International transfers

Resend’s published documentation says it stores customer email content and delivery logs in the United States. Resend’s published Data Processing Addendum describes transfers from the European Economic Area under the EU Standard Contractual Clauses and UK transfers under the UK Addendum to those clauses. It also describes the EU–US Data Privacy Framework and its UK extension as an additional transfer mechanism. See Resend’s GDPR information and Data Processing Addendum.

Replit hosts this landing page, but we have not verified the region assigned to this particular workspace or the transfer safeguard applicable to it. We have also not verified the processing locations or transfer safeguards for our 123 Reg email-hosting configuration or this Cloudflare Turnstile configuration. We will confirm the applicable arrangements before relying on any specific location or safeguard for those services. Contact info@isocreatorpro.com with questions about transfers.

How long we keep information

Our policy is to review early-access enquiry records 12 months after ISO Creator Pro® launches and manually delete them unless a continuing lawful reason requires longer retention. This review and deletion are not automated. We will review the registration emails in the 123 Reg-hosted mailbox, which we access using Outlook. Copies held by Resend and other providers are subject to their own retention settings and are not automatically deleted by our manual mailbox review. We keep consent evidence and any minimum suppression information only for as long as needed to demonstrate consent, respect opt-outs or meet legal requirements.

Cookies and similar technologies

The landing page does not include analytics or advertising pixels or use first-party analytics or advertising cookies. It loads Cloudflare Turnstile for security. Cloudflare describes the signals collected by Turnstile as strictly necessary to detect and block bots; its privacy notice points to its Cookie Policy and Turnstile documentation for information about cookies. Cloudflare also documents its separate use of signals to improve Turnstile, as explained above. We have not verified whether Replit, 123 Reg or other service-provider infrastructure uses additional technologies in this configuration. Please refer to the providers’ privacy information or contact us with questions about the technologies used on this page.

Your privacy rights

Depending on where you live and which law applies, you may have rights to access or obtain a copy of your information, correct it, request deletion or restriction, object to certain processing, or receive portable information. Where processing is based on consent, you may withdraw that consent at any time.

People protected by applicable US state privacy laws may also have rights such as access, correction, deletion, portability, or opting out of certain sale, sharing, targeted advertising, or profiling activities, as defined by the law that applies to them. The available rights and exceptions vary by state.

To exercise a right, email info@isocreatorpro.com. You may also complain to the UK Information Commissioner's Office if you are in the UK, or to your local EU supervisory authority if applicable.

Security

We use measures such as server-side form validation, rate limiting, and Turnstile verification to help protect registrations. No method of transmitting or storing information can be guaranteed completely secure.

Changes to this notice

We may update this notice when our practices or legal requirements change. The effective date above identifies the current version.