PRIVACY.

DRS90 is currently operated by Felix Weaver. The intention is to incorporate DRS90 Ltd (a private company limited by shares) before public launch/trading. Until then, Felix Weaver is the data controller for the personal information described in this notice.

Legal entity: DRS90 is currently operated by Felix Weaver. The intention is to incorporate DRS90 Ltd (a private company limited by shares) before public launch/trading. [COMPANY NUMBER TO BE CONFIRMED ONCE INCORPORATED]

Registered office: [REGISTERED OFFICE TO BE CONFIRMED ONCE DRS90 LTD IS INCORPORATED]

Data protection and data rights: privacy@drs90.uk

General contact: hello@drs90.uk

• 100K Offline pledges: first name, email address, city, movement number.
• Referrals: your own referral code, issued when you pledge, and the referral code used when a pledge is made.
• My DRS90 accounts: email address, first name, city.
• Training: which foundation and level you practised, self-confirmed progress, and the date and time of each recorded session.
• Event interest: that you registered interest in a DRS90 event, and your city.
• Enquiries: name, email, organisation, role, research area or venue type where relevant, and your message.
• Technical information strictly needed to serve the site and keep your session signed in. See COOKIES.

• 100K Offline pledges — to record a genuine headcount and issue your movement number. Lawful basis: legitimate interests (running the movement you asked to join).
• My DRS90 accounts — to give you access to your own area. Lawful basis: performance of a contract / legitimate interests.
• Training progress and history — to show you your own record. Lawful basis: performance of a contract.
• Referrals — to count how the movement grows. We never show referred people's identities to anyone. Lawful basis: legitimate interests.
• City demand — aggregate totals only, used to decide where events could happen. Lawful basis: legitimate interests.
• Event interest — to gauge demand for the first day rave. Interest is not a ticket or reservation. Lawful basis: legitimate interests.
• Research, Hard No Tech and partner enquiries — to reply to you. Lawful basis: legitimate interests.
• Authentication / magic links — to verify it is you and keep your session secure. Lawful basis: performance of a contract.

Joining 100K Offline does not subscribe you to marketing. If optional marketing is offered in future it will be a separate, unticked choice based on consent.

We use third-party providers to host the site, run the database and send authentication emails. They process personal information on our instructions only.

• Lovable — platform and hosting provider for the DRS90 web application.
• Supabase — database and authentication provider, managed through Lovable Cloud.
• Lovable's email service — sends transactional authentication emails (magic links).

Backend/database hosting region: Ireland (eu-west-1).

Unresolved: exact frontend/CDN processing regions; exact email subprocessor/location where relevant.

Some service providers may process personal data outside the UK. Where an international transfer requires safeguards under UK data-protection law, appropriate mechanisms such as Standard Contractual Clauses and the UK International Data Transfer Addendum may be used.

We do not claim that all processing occurs in Ireland, and we have not confirmed the specific countries where frontend/CDN or email infrastructure may process data.

• 100K Offline pledge and member number: while the 100K Offline movement is active, then reviewed and deleted or anonymised within 12 months of it ending.
• My DRS90 account and profile: while your account is active; reviewed after 24 months of inactivity.
• Training history and progress: kept with your account; deleted or anonymised when the account is deleted.
• Referral attribution: while the 100K Offline movement is active, then reviewed and deleted or anonymised.
• Event One interest: until the relevant event concludes, then up to 6 months.
• Research, Hard No Tech and partner enquiries: 24 months after last meaningful contact.
• Anonymous aggregate statistics (for example city demand totals) may be retained where no individual can be identified.

Under UK data protection law you have the right to access your information, correct it, delete it, restrict or object to certain uses, ask for portability, and withdraw consent where consent is the basis.

To make a request, email privacy@drs90.uk. We may ask you to confirm the email address that holds the record.

If you are unhappy with how we have handled your information, contact us first at privacy@drs90.uk.

You can also complain to the UK Information Commissioner's Office at ico.org.uk.

We will update this page when what we collect or why changes, and update the date at the top.

• Exact frontend/CDN processing regions.
• Exact email subprocessor/location where relevant.
• Final company details after incorporation (company number, registered office, controller wording).
• Final limitation-of-liability review.