1. Data Controller

Wait.ie ("we", "us", "our") is the data controller for personal data collected through wait.ie. You can contact us at support@wait.ie for any data protection enquiries.

2. Data We Collect

We collect:

Account information: email address and name (provided at signup)
Service preferences: which government services and locations you choose to monitor
Subscription data:your plan tier and payment status (payment details are handled entirely by Stripe — we never store card numbers)
Connected monitoring details: where required, your official account, vehicle, or booking details for the service you ask us to monitor (stored encrypted at rest)
Usage data: notification delivery logs and alert history

3. Why We Process Your Data

Your data is used solely to:

Send you cancellation alerts for the services you have purchased
Check account-gated or vehicle-gated availability when you ask us to monitor it
Manage your account and active monitoring
Communicate important updates about your account or the Service
Improve the Service and fix issues

4. Legal Basis

We process your personal data under the following legal bases (GDPR Article 6):

Contract performance(Art. 6(1)(b)) — processing necessary to provide the Service you have purchased
Legitimate interest(Art. 6(1)(f)) — improving the Service, preventing abuse, and ensuring security

5. Data Processors

We use the following third-party processors to deliver the Service:

Supabase— database and authentication (hosted in EU-West, Ireland)
Stripe— payment processing (PCI DSS compliant)
Resend— transactional email delivery
Vercel— website hosting

Each processor has their own privacy policy and data processing agreements. We do not sell, rent, or share your personal data with any other third parties.

6. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely as they cannot be linked back to you.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

Right of access— request a copy of all personal data we hold about you
Right to rectification— correct any inaccurate or incomplete data
Right to erasure— request deletion of your account and all associated data
Right to data portability— receive your data in a machine-readable format
Right to object— object to processing based on legitimate interest
Right to withdraw consent— where processing is based on consent, withdraw it at any time

To exercise any of these rights, email support@wait.ie. We will respond within 30 days. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

8. Cookies

We use essential cookies only for authentication (Supabase auth session). We do not use tracking cookies, analytics cookies, or advertising cookies. No cookie consent banner is required as we only use strictly necessary cookies.

9. Data Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive data, and Row Level Security (RLS) on our database to ensure users can only access their own data.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify active customers of material changes via email. Continued use of the Service after changes constitutes acceptance.

11. Contact

Data protection enquiries: support@wait.ie

Privacy Policy