Privacy Policy

This signup page is operated by Prospa Productions Limited, a company registered in England and Wales (company number 11712179) with its registered office at 44 Potternewton Mount, Leeds, LS7 2DR, United Kingdom. Below, that's “Prospa”, “we”, “us”. We are the data controller for the personal data described here, which covers this page, our mailing list and the emails we send you. For anything in this policy, contact info@prospaworld.com.

What you type into the signup form: your first name and email address.

With your signup we also record the page you sent it from, which shows any campaign tag in the link you arrived by, the date and time, and your country and region (worked out from your IP address, which we don't keep). We add a record of your consent: what you agreed to, the version of the wording you saw, and when and from which country and region you confirmed or unsubscribed.

This page runs no analytics: it doesn't record which pages you view or what you click. Like any website, our hosting provider keeps standard server logs (IP address, browser type, pages requested) for security and operations.

• To send you the emails you signed up for: updates from Prospa, including when our website opens, new releases and early access to drops and tour tickets. Legal basis: your consent, which you can withdraw at any time.
• To check that an email address is really yours. When you sign up we send one message asking you to confirm, and we send you nothing else unless and until you do. Legal basis: your consent, and our legitimate interest in not emailing people who never asked us to.
• To make those emails relevant, we group subscribers by things like country, when they joined and, if they buy from our shop, how often and how much — tour dates for the right part of the world, for instance. Legal basis: our legitimate interest in not sending you things that don't apply to you.
• We don't track whether you open our emails or which links you click in them.
• To keep this page secure and running, including limiting how often one network can submit the form. Legal basis: our legitimate interest in protecting the page and the people using it.

We don't sell your data, we don't use it for advertising, and we don't make automated decisions about you that have legal or similarly significant effects.

Signups go to our own systems rather than to a third-party CRM. These companies handle personal data for us:

• Supabase stores our contact database, in London.
• Netlify hosts this page and the application behind it. Its global network serves the page, carries each signup between the two, and keeps the server logs mentioned above.
• Resend delivers our emails. It receives your email address and the message itself, and tells us whether each email was delivered.
• Google Workspace (Google) hosts our email, so it holds any email you send us, including a request about your data, and our replies.

Our database is in the United Kingdom. Some of the companies above are based in, or run systems in, the United States and other countries, so your data may be processed outside the UK and the European Economic Area. When it is, we rely on the safeguards data protection law provides: an adequacy decision where one covers the transfer (including the UK–US data bridge and the EU–US Data Privacy Framework, for providers certified under them), and otherwise standard contractual clauses with the UK addendum. Email info@prospaworld.com if you'd like more detail.

• The mailing list: until you unsubscribe. Within 30 days of that we delete your name, your email address and your signup. What we keep is a scrambled (hashed) form of the address on a do-not-email list, so we don't contact you again by mistake, and the record of when you consented and withdrew, so we can show we acted on it. If you sign up but never confirm, we delete your signup within 30 days.
• Your signup on its way in: a signup waits in a queue until our system asks you to confirm, usually within minutes and never more than three days. Your name and address are cleared from the queue at that point, and the rest of the queue entry is deleted within a week (within 30 days if something went wrong and we need to look into it).
• Email records: what our email provider reports about each email we send you (delivered, bounced or marked as spam): 13 months, then deleted, or sooner: within 30 days of unsubscribing, or at once if you ask us to erase your data.
• Abuse protection: to stop one network flooding the form we keep a scrambled form of your network's address, with its last part removed, in counters that are deleted after seven days.

Deleted data can remain in encrypted backups for a limited time, until those are overwritten.

This page sets no cookies and keeps nothing in your browser's storage. It uses no third-party trackers or advertising pixels.

Under UK and EU data protection law you can ask us for access to, correction of, or deletion of your data; ask us to restrict processing; object to anything we do on the basis of our legitimate interests; ask for a copy in a portable format; and withdraw consent at any time.

To unsubscribe, use the link in any email we send, or write to info@prospaworld.com. Unsubscribing takes you off every Prospa list at once. For any other request, email info@prospaworld.com and we'll respond within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk or, if you live in the European Union, to the data protection authority in your country.

This page and our mailing list are intended for people aged 18 or over, and we don't knowingly collect data from anyone younger. If you think we have, email info@prospaworld.com and we'll delete it.

If this policy changes, we'll update it here and revise the date at the top. See also our terms of use.