Privacy Policy

Effective Date: 6 January 2026

Last Updated: 7 January 2026

1. Introduction

RegenEvolution is the trading name of Andrew Thompson (“we”, “us”, or “our”). This Privacy Policy explains how we collect, use, and share your personal data when you visit our website (regenevolution.org) or interact with our project during its pre-incorporation phase.

We are committed to protecting your privacy and strictly adhering to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who is the Data Controller?

For the purpose of the UK GDPR, the Data Controller is:

• Name: Andrew Thompson (Trading as RegenEvolution)
• Postal Address: 86-90 Paul Street, London EC2A 4NE, UK
• Email: privacy@regenevolution.org

3. The Data We Collect

We collect and process different kinds of personal data about you, which we have grouped as follows:

• Identity Data: First name, last name, and username (if applicable).
• Contact Data: Email address and billing address (for payments).
• Financial Data: Details of payments made. Note: We do not store your payment card details. These are processed directly by our secure payment provider.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, and operating system.
• Profile Data: Your interests (e.g., “Investor,” “Community Champion”) and preferences for marketing.
• Usage Data: Information about how you use our website.
• Aggregated Data: We also collect Demographics and Interest Data (such as age range, gender, and interests) via Google Analytics. This data is anonymised and does not identify you individually.

4. How We Use Your Data (Lawful Basis)

We will only use your personal data when the law allows us to. Most commonly, we use it in the following circumstances:

Purpose / Activity	Type of Data	Lawful Basis for Processing
To respond to your enquiries submitted via our Contact Form.	Identity, Contact	Legitimate Interest: It is necessary for us to reply to your questions.
To send you newsletters and updates about the RegenEvolution launch.	Identity, Contact, Profile	Consent: You have explicitly opted in to receive these updates.
To process a payment and prevent fraud.	Identity, Contact, Financial	Contract: Processing the transaction. Legal Obligation: complying with tax/HMRC requirements.
To improve our website and understand our audience.	Technical, Usage, Aggregated	Legitimate Interest: To keep our website updated and relevant, and to develop our mission strategy.

5. How We Share Your Data

We do not sell your data. We share your data only with the following trusted third-party service providers who act as “Data Processors” on our behalf:

• MailerLite: To manage our email subscriber lists and send newsletters.
• Square (SquareUp): To securely process payments.
• Google (Site Kit / Analytics): To analyse website traffic and performance.
• SureForms / SureMail: To facilitate the transmission of your contact form messages.
• Usercentrics A/S (Cookiebot): To manage your cookie consent preferences and ensure compliance.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. International Transfers

Some of our external third parties (such as MailerLite, Square, and Google) are based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government (the “Adequacy Regulations”).
• Where we use certain service providers, we may use specific contracts approved for use in the UK (“Standard Contractual Clauses” or the “UK-US Data Bridge”) which give personal data the same protection it has in the UK.

7. Data Retention (How long we keep it)

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.

• General Enquiries (Contact Form): We delete general contact form messages 30 days after the enquiry is resolved.
• Payment Records: We are legally required to keep basic information about our supporters (including Contact, Identity, and Transaction Data) for six years for tax purposes (HMRC).
• Newsletter Subscribers: We retain your data until you unsubscribe or your email address becomes inactive. You can unsubscribe at any time via the link in our emails.

8. Your Legal Rights

Under the UK GDPR, you have rights including:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data (the “Right to be Forgotten”).
• Object to processing (specifically regarding marketing or Google Analytics profiling).
• Request restriction of processing.
• Withdraw consent at any time.

To exercise any of these rights, please contact us at: privacy@regenevolution.org.

9. Future Transfer of Data (The “CIC Transition”)

RegenEvolution is currently a pre-incorporation project. In the event that we incorporate as a formal legal entity (such as a Community Interest Company or Limited Company), your data will be transferred to the new legal entity.

This transfer is necessary for our legitimate interest in continuing the project. The new entity will continue to use your data for the same purposes and under the same terms as set out in this policy.