Legal
Privacy Policy
Last updated: 2026-04-26v2026-04-26
This Privacy Policy explains how Hi-Mind Limited (“Hi-Mind”, “we”) collects and uses personal information when you visit the ByHere waitlist site at byhere.app or submit the waitlist form. This version is written for users in the United States and addresses your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), and other US state privacy laws including those of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA).
Hi-Mind Limited is the business and the controller of this data. We are a UK company (registered in England & Wales, company number 11100804). Contact: legal@hi-mind.co.uk.
1. Notice at collection
At the point of collection (the waitlist form), we collect the categories of personal information listed in Section 2, for the business purposes listed in Section 4. We retain it for the periods described in Section 6. We do not sell your personal information and do not share it for cross-context behavioural advertising as those terms are defined under California law.
2. What we collect
When you submit the waitlist form, we collect the following CCPA categories of personal information:
| CCPA Category | Specifics |
|---|---|
| Identifiers | Full name, email address |
| Customer-records information (Cal. Civ. Code § 1798.80(e)) | Club or community name, member-count band |
| Commercial information | Current platform status (paid / trial / not yet) |
| Internet or other electronic activity | Locale preference cookie, page navigation, reCAPTCHA scores, standard server logs |
| Geolocation (coarse) | Country-level, derived from IP at our hosting provider; we do not store the IP address ourselves |
| Inferences | None drawn from this information |
We do not collect sensitive personal information as defined by CPRA (such as government IDs, financial-account credentials, precise geolocation, race, religion, biometric or health data). If we ever start collecting any sensitive category, we will provide a separate notice and the right to limit its use.
3. Sources
All personal information is collected directly from you (via the waitlist form, browser cookies, or email correspondence). We do not purchase data about you from data brokers.
4. Business and commercial purposes
We use the information to:
- Register your interest in joining ByHere when it launches.
- Contact you about the launch and waitlist progress.
- Prioritise the waitlist (your free-text answer feeds product decisions).
- Detect and prevent automated abuse, fraud, and spam (via Google reCAPTCHA).
- Comply with legal obligations.
- Plan launch capacity using aggregate signup volume.
We do not use the information for cross-context behavioural advertising, profiling that produces legal or similarly significant effects, or targeted ad personalisation by third parties.
5. Disclosure of personal information
We disclose personal information only to the following categories of recipients, who act as service providers / processors and may not retain, use, or disclose it for any purpose other than performing services for us:
| Recipient | Purpose |
|---|---|
| Vercel Inc. | Website hosting and content delivery |
| Neon Inc. | Postgres database for waitlist entries |
| Google LLC | reCAPTCHA v3 anti-bot protection |
We may also disclose personal information to law enforcement or in response to legal process when required by applicable law, or to protect our rights, the rights of others, or the security of the site.
6. Retention
We retain waitlist entries until ByHere launches and you accept or decline an invite, plus 30 days. We may retain a minimal record of deletion (email + fact of deletion) for up to 12 months for fraud-prevention purposes. Server logs and reCAPTCHA cookies are retained for shorter periods as described by the respective providers.
7. Your CCPA/CPRA rights (California residents)
If you are a California resident, you have the right to:
- Know what personal information we have collected about you, the sources, the purposes, and the categories of recipients.
- Access a copy of your personal information.
- Delete personal information we have collected from you, subject to certain exceptions (e.g. legal obligations).
- Correct inaccurate personal information.
- Opt out of sale or sharing— we do not sell or share personal information for cross-context behavioural advertising, so this opt-out is automatic, but you may confirm by emailing us.
- Limit the use of sensitive personal information — we do not collect any sensitive personal information, so this right does not currently apply.
- Non-discrimination— we will not deny you service, charge you a different price, or provide a different quality of service because you exercised any CCPA right.
We honour browser Global Privacy Control (GPC) signals as opt-out-of-sale-or-sharing requests, even though we do not currently sell or share data.
To exercise any of these rights, email legal@hi-mind.co.ukwith “CCPA Request” in the subject line. We will verify your request by matching the email against the address on file. We respond within 45 days, extendable by another 45 days where reasonably necessary.
You may use an authorised agent to make a request, in which case we will require written permission and verification of the agent’s authority.
8. Other US state privacy laws
Residents of Virginia, Colorado, Connecticut, Utah, and Texas have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising and sale of personal data. We do not engage in either, but you can confirm by emailing us at the address above. Residents of these states may also appeal a refusal of a rights request by replying to our response email.
9. Cookies and tracking
We currently use only a locale-preference cookie and Google reCAPTCHA cookies. We do not use advertising or analytics cookies. Your browser’s cookie controls and Do Not Track / Global Privacy Control settings are honoured.
reCAPTCHA usage is subject to Google’s Privacy Policy and Terms of Service.
10. International transfers
Hi-Mind is established in the United Kingdom; your personal information is transferred to and processed in the UK and the European Economic Area, in addition to the United States (where our hosting providers are based). We rely on Standard Contractual Clauses and equivalent transfer mechanisms with our processors.
11. Children
ByHere is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has submitted the form, contact us and we will delete the entry.
12. Changes to this Policy
We may update this Policy. The current version is shown at the top of this page. Material changes will be communicated by email to anyone on the waitlist at least seven days before they take effect.
13. Contact
Privacy enquiries and CCPA/CPRA requests: legal@hi-mind.co.uk
Hi-Mind Limited · Registered in England & Wales · Company number 11100804.