Privacy and Personal Information Collection Statement

Scope of this notice

This notice covers only the current public Auriatorium waitlist. The waitlist does not currently collect payment, transaction, invoice, account or fulfilment information. Paid commerce will require an expanded privacy notice before it is enabled. This informational waitlist currently has no age restriction; customer age, capacity to contract and any youth-user safeguards require separate legal review before the store opens.

No sale of waitlist data

We do not sell or rent the Auriatorium waitlist, email addresses or associated personal information. We use it only for the waitlist purposes described here, to protect the service and comply with applicable obligations.

What we collect and why

Email is required if you want to join: without it we cannot send the confirmation link or waitlist updates. Interests are optional. Campaign tags are optional values read from the page URL. IP address and browser/user-agent details are recorded automatically when you submit.

Email choice and double opt-in

Submitting the form records a request, not an active subscription. You must use the email confirmation link before a new or previously unsubscribed address becomes confirmed. A repeat submission refreshes the current preferences, attribution and consent snapshot. A previously unsubscribed address returns only to pending and is not silently reactivated. Consent covers Auriatorium waitlist and opening updates only; it does not subscribe you to general Hodfords group marketing.

Every confirmation email includes a free unsubscribe link. You may also request one below. To avoid revealing whether an address is on the waitlist, this form gives everyone the same response and sends a purpose-bound link to every valid address submitted. For an unknown address, clicking it is a harmless no-op.

Service providers and US processing

The application stores waitlist data in its PostgreSQL database under a waitlist-only access scope. That database is hosted on infrastructure in the United States, so waitlist data is transferred to and stored there.

Hodfords LLC, whose registered office is 16192 Coastal Highway, Lewes, Delaware 19958, County of Sussex, USA, provides hosting and technology processing for this infrastructure. The physical server is owned by the Hodfords-owned infrastructure company Icelab Networks, LLC, identified in its published company material at 8191 SouthPark Lane, Suite 201, Littleton, Colorado 80120, USA. These infrastructure systems necessarily handle the data automatically to store and serve it, but their US staff have no access to Auriatorium personal data and do not inspect it.

Separately, Plus Five Five, Inc., trading as Resend, receives the destination email address and message content and metadata to deliver confirmation and unsubscribe emails. Resend says its primary processing is in the United States and publishes transfer safeguards in its Data Processing Addendum. Its own handling is described in the Resend Privacy Policy.

Google Analytics is selected for possible future site analytics, but it is not a current recipient or service provider for this teaser: no Google tag or Tag Manager container is installed or published, so this site sends it no page requests or events. If analytics is activated after the required review and an affirmative analytics choice, this notice and the linked cookie policy must identify the applicable Google processing and transfer terms before collection begins.

Meta is selected for possible future paid-social measurement. TikTok advertiser onboarding is complete, but its website integration is deferred. Neither is a current recipient of website page views, form events or visitor identifiers. The configured Meta Pixel is not installed, and no TikTok Pixel or web event source has been configured. Account-side setup alone does not send them data from this site.

Security

We use access restrictions, a dedicated waitlist database scope, rate limits and purpose-bound, expiring, single-use links. Secret link values are stored only as one-way hashes. We take reasonable measures to protect the information from loss, misuse and unauthorised access, disclosure, alteration or destruction, but no internet transmission or storage system can be guaranteed completely secure.

How long we keep it

• Pending, unconfirmed signup records are deleted after 30 days.
• Campaign attribution, IP address and browser/user-agent fields are removed after 12 months.
• Confirmed waitlist profiles are kept until you unsubscribe, or for 24 months after the latest consent or confirmation when there has been no renewed engagement.
• On unsubscribe, interests, attribution, IP address, browser details and other profile fields are scrubbed. We keep only the minimum email address, unsubscribed status and opt-out evidence for as long as Auriatorium conducts direct marketing, solely to honour the opt-out.
• Confirmation and unsubscribe links expire after 72 hours. Their token records are deleted promptly after use or expiry.
• Resend currently states 30-day data retention across its standard plans for email content and metadata. See Resend's plan information.

Access, correction, deletion and withdrawal

You can ask to access, correct or delete your waitlist information, or withdraw consent at any time, by emailing privacy@hodfords.com. You may alternatively use info@hodfords.com. We may need to verify that the address belongs to you. A deletion or withdrawal request may leave only a minimal suppression record where needed to ensure we do not contact you again. The free unsubscribe mechanism below withdraws waitlist marketing consent.

Cookies and analytics

The public teaser does not currently set first-party analytics or advertising cookies, load Google Analytics, Google Tag Manager or a social-advertising provider, or place tracking pixels. GA4 Measurement ID G-96F3JKGX83 and Tag Manager container GTM-KWKNDB33 have been configured, but neither tag nor container is installed or published and the optional loader remains technically disabled. Read the exact current settings and manage the available controls in our Cookie, analytics and advertising policy.

Meta business portfolio 1678040803743082 and Meta Pixel 2307684030055231 have been configured, but the pixel is not installed. TikTok advertiser onboarding is complete for https://hello.auriatorium.com, with United Kingdom as the account country and Hodfords Solutions Limited as its invoice/business name, but no TikTok Pixel or web event source is configured and its website integration is deferred. No on-site social measurement, retargeting, server-side advertising event or customer-list integration is enabled. Campaign source and UTM values can still be stored when someone submits the waitlist form, as disclosed in “What we collect and why”. Meta and TikTok each require a separately informed and affirmative advertising choice before activation; email or analytics consent will not be reused for that purpose.

Changes to this notice

We may update this notice when the waitlist or its service providers change. We will post the revised notice here with a new date and version. If a change materially affects the consent requested from waitlist members, we will seek a fresh choice rather than treating an older consent as agreement to the new purpose. This includes activating the selected analytics provider or activating a configured advertising provider: its identity, measurements and storage must be disclosed before its consent-controlled loader is enabled.