Privacy notice
Last updated 12 July 2026
Pre-launch notice: DropClicker is not yet open to customers. Today this website does one thing with personal data: it collects an email address so we can tell you when we launch. This notice describes that, and also what will happen when the platform opens.
Who we are
DropClicker Ltd ("DropClicker", "we", "us") is a company registered in England and Wales, company number 16988571. Our registered office is 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE.
We are the data controller for the personal data described in this notice.
We have not appointed a data protection officer, as we are not required to. If you have a question about how we handle your data, email hello@dropclicker.com and mark it for the attention of the data protection contact.
What we collect, why, and on what basis
Right now, before launch
| What | Why | Lawful basis |
|---|---|---|
| Your email address, submitted to the waitlist | To tell you when DropClicker opens, and to send occasional updates about the launch | Consent (UK GDPR Art. 6(1)(a)) |
| Your IP address, when you use the waitlist form | The form submits directly from your browser to our email provider, who receives your IP as a technical necessity of the request | Legitimate interests: operating the form and preventing abuse |
| Your IP address, when your browser loads our fonts | Our fonts are currently served by Google. We are moving to self-hosted fonts. Until we do, Google receives your IP address when a page loads | Legitimate interests: displaying the website |
| Anonymous usage statistics | To understand which pages people read. Our analytics does not use cookies and does not identify you | Legitimate interests: improving the website |
We do not buy email lists. We do not use your email for anything except what you signed up for. Every email we send has a one-click unsubscribe link, and unsubscribing takes effect immediately.
When the platform opens
Once DropClicker is live and you create an account, we will additionally process:
- Your name, business email and Shopify store domain, so we can operate your account.
- Your billing details, so we can charge you. Card details are handled entirely by Shopify or Stripe, inside the DropClicker app or the Shopify App Store. This website never collects payment details, and we never see or store your card number.
- Your order and product data, so we can sync catalogue items into your store and route orders to suppliers.
- Support correspondence, so we can help you.
For account, billing and order data the lawful basis is performance of a contract: we cannot run the service without them. For fraud prevention and service security, it is legitimate interests.
Your customers' data
When you place an order through DropClicker, the order contains your customer's name, delivery address and contact details. We pass that to the supplier so they can ship the parcel.
For that data, you are the controller and we are your processor. We only act on your instructions. The terms governing this are set out in our terms of service.
Who we share it with
We do not sell your data. We share it only with the service providers we need to run DropClicker, and only what they need.
| Provider | What they do | Where they process |
|---|---|---|
| MailerLite (MailerLite Limited) | Sends our waitlist and marketing emails, stores subscriber email addresses and IPs | Ireland and the EEA, with sub-processors in the USA |
| Vercel Inc. | Hosts and serves this website | USA and globally |
| Cloudflare, Inc. | Content delivery and protection against attacks | Globally |
| Google LLC | Currently serves our web fonts. Receives visitor IP addresses. Being removed | USA |
| Plausible Analytics | Cookieless, anonymous website statistics | EU (Germany) |
| Shopify Inc. | Billing for App Store subscriptions, and the platform our app runs inside | Canada and the USA |
| Stripe, Inc. | Billing for subscriptions taken in the DropClicker app | USA and the EEA |
| Supabase | Database hosting for the platform | EU |
We keep this list current. If you want to know who our providers' own sub-processors are, ask us.
We will also disclose personal data where we are required to by law, by a court, or by a regulator, and to professional advisers where necessary.
Sending data outside the UK
Some of the providers above are outside the UK. Where that happens we rely on:
- UK adequacy regulations for transfers to the EEA, and
- the International Data Transfer Addendum to the EU Standard Contractual Clauses, or the International Data Transfer Agreement, for transfers to the USA and elsewhere.
You can ask us for a copy of the safeguards we rely on.
How long we keep it
- Waitlist emails: until 24 months after launch, or until you unsubscribe, whichever is sooner. If you unsubscribe we keep a record of your email on a suppression list so we do not email you again by accident. That is the only reason we keep it.
- Account data: for as long as you have an account, then six years, because UK tax law requires us to keep business records for that long.
- Order data: six years, for the same reason.
- Support correspondence: two years.
- Anonymous analytics: indefinitely, because it does not identify anyone.
Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Correct it if it is wrong.
- Erase it, in certain circumstances.
- Restrict how we use it, in certain circumstances.
- Object to us using it, where we rely on legitimate interests.
- Portability: receive your data in a common, machine-readable format.
- Withdraw consent at any time, where we rely on consent. Withdrawing consent does not make our earlier use of your data unlawful.
To exercise any of these, email hello@dropclicker.com. We will respond within one month. We do not charge for this unless a request is manifestly unfounded or excessive.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
Complaints
If you think we have handled your data badly, please tell us first. We would rather fix it.
You also have the right to complain to the Information Commissioner's Office at any time.
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
Children
DropClicker is a business tool. It is not intended for anyone under 18 and we do not knowingly collect their data.
Security
We use encrypted connections, access controls, and hosting providers with recognised security certifications. No system is perfectly secure, and we will not pretend otherwise. If we suffer a breach that is likely to result in a risk to your rights, we will notify the ICO within 72 hours and tell you directly where the law requires it.
Changes to this notice
We will update this notice as DropClicker grows, particularly when the platform opens. If we make a material change we will email everyone on our list and update the date at the top. Please check it from time to time.