Who we are

Sovico Sanctum is operated by Asim Qureshi, trading as Sovico, based in Rochdale, United Kingdom.

We are registered with the Information Commissioner's Office (ICO) as a data controller. ICO Registration Number: ZC116967.

For any data-related enquiries, contact us at privacy@sovico.co.uk.

What data we collect and why

Waitlist registrations

When you join our waitlist, we collect your work email address and your tier preference. We use this to contact you when early access becomes available and to understand demand across our product tiers.

Legal basis: Legitimate interests — managing a pre-launch waitlist for a B2B product.

Contact enquiries

When you send us a message via the contact form, we collect your work email address, organisation name, and the content of your message. We use this solely to respond to your enquiry.

Legal basis: Legitimate interests — responding to business enquiries.

Security and audit logs

We log IP addresses, timestamps, and user agent strings for rate limiting and security purposes. These logs are retained for 90 days and are never used for marketing or profiling.

Legal basis: Legitimate interests — protecting our systems from abuse.

What we do not collect

We do not use cookies, tracking pixels, analytics scripts, or advertising networks on this website. We do not collect payment information at this stage. We do not share your data with any third party for marketing purposes.

Our audit logs record the domain portion of email addresses only — never the full address — for security monitoring purposes.

Where we store your data

All data submitted through this website is stored in AWS DynamoDB in the eu-west-2 (London) region. Your data does not leave the United Kingdom.

We use AWS as our infrastructure provider. AWS is certified to ISO 27001 and SOC 2. Our use of AWS infrastructure is governed by AWS's data processing addendum, which covers GDPR compliance requirements.

How long we keep your data

Waitlist registrations are retained until you request deletion or until 12 months after our product launches, whichever comes first.

Contact enquiries are retained for 12 months from the date of submission.

Security logs are retained for 90 days.

Your rights under UK GDPR

You have the right to:

✓Access — request a copy of the personal data we hold about you
✓Erasure — request that we delete your personal data
✓Rectification — request that we correct inaccurate data
✓Portability — request your data in a portable format
✓Object — object to processing based on legitimate interests
✓Withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email privacy@sovico.co.uk. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this policy as the product develops. The date at the top of this page will always reflect the most recent version. Material changes will be communicated to waitlist members by email.

Privacy policy