Privacy
What we hold, what we don't.
Last updated 16 October 2026.
Unmarkup is a UK beauty shopping app. This page explains what personal data we handle, why, and how you get rid of it. In plain English first, with the legal references at the end. If anything is unclear, email hello@un-markup.com.
What we collect
Waitlist signups
If you enter your email address on the un-markup.com waitlist form, we hold that address. Nothing else. We do not ask for or store your name, location, IP address, browser fingerprint, or purchase history.
The website
The un-markup.com landing page sets no cookies of its own and runs no third-party trackers. Our host may log basic request data (IP address, browser type, page requested) for security and abuse detection. Those logs are retained for up to 30 days and are not linked to any signup.
The app (when it launches)
Unmarkup is designed so you can use it without an account. Products you view and searches you make are held on your device by default. If you opt in to sync across devices, we hold that data against an anonymous identifier we generate. We never ask you to sign in with a real name, phone number, or social account.
Affiliate clicks
When you click through to a retailer's website from Unmarkup, the retailer's own tracking (through Awin or a similar affiliate network) records that click so we can be credited if you buy. That tracking happens in the retailer's domain under their privacy policy, not ours. We receive aggregate reporting (number of clicks, number of sales, commission earned). We do not receive your identity, your basket, or your payment details.
Why we hold it and how long
- Waitlist emails: we hold your email until the app launches, so we can tell you it's ready. If you never confirm your first login after launch, we delete your email within 90 days of launch. You can ask us to delete it earlier at any point.
- Sync data (opt-in only): held while your account is active. Deleted within 30 days of you asking us to delete it, or of 12 months of complete inactivity.
- Host logs: 30 days.
Who we share it with
We do not sell personal data. We do not share personal data with brands, retailers, or advertisers. Our service providers act as data processors on our instructions: Bluehost hosts the website, FormSubmit delivers waitlist sign-ups to our inbox, and Supabase will store app data when the app launches.
Your rights under UK GDPR
- Access what we hold about you.
- Correct anything wrong.
- Erase it entirely.
- Object to us holding it, or restrict how we use it.
- Take a copy of it in a portable format.
- Withdraw your consent (for the waitlist) at any time.
- Complain to the UK Information Commissioner's Office at ico.org.uk.
To do any of these, email hello@un-markup.com from the address we hold. We respond within 30 days and usually within a few working days.
Legal basis
We hold waitlist emails on the basis of your consent (Article 6(1)(a) UK GDPR). We handle host log data on the basis of legitimate interests in operating and securing the site (Article 6(1)(f)). If you use the app with sync enabled, we hold your data on the basis of contract (Article 6(1)(b)).
Changes to this policy
We date each version at the top. If we change what we collect or how we use it, we email waitlist subscribers before the change takes effect.