Legal
Privacy notice
How We Are Eight Ltd, trading as ThreadGuard, handles personal information on the public website and in founding applications.
Approved v1.1 · 11 August 2026
Who we are
We Are Eight Ltd, trading as ThreadGuard, is the controller for the personal information described in this notice. We are registered in England and Wales under company number 09351999. Our registered office is The Island House, The Island, Midsomer Norton, Radstock, England, BA3 2DZ.
Contact us at mail@threadguard.co.uk about this notice or a request concerning your information.
What this notice covers
It covers the ThreadGuard public website, the founding-building application and direct correspondence about the pilot. Before a team puts live building records into the product, its service terms, controller/processor roles and product-data notice must also be agreed for that relationship.
Information we collect
When you apply for a founding place
We ask for your name, work email, role, organisation, building name, town or city, broad bands for the number of flats, open actions and likely teammates, your current tracking method, and a short description of the work you would bring in first. We also record your required scope acknowledgement, the submission time and an opaque application reference.
The application asks you not to include resident names, health information or other sensitive personal information. If you send such information accidentally, tell us so we can assess and remove it.
When you contact us
We receive the contact details and information you include in your message, together with our replies and working notes about the request.
Technical requests
Our hosting and firewall provider, Vercel, may process request time, network address, browser or device information, requested page, and technical or security-event details. Vercel uses the source IP as the counting key for up to five founding-application attempts in a fixed ten-minute window. The check happens before ThreadGuard reads the submitted answers or sends the application email. ThreadGuard's application code does not copy that address into the application message or a separate application record. Browser analytics, advertising tags and session replay are disabled on the marketing site.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Assess and respond to a founding application. | Steps requested before a possible service arrangement and our legitimate interest in selecting and running a bounded pilot. |
| Reply to questions and keep a useful correspondence record. | Steps requested by you and our legitimate interest in operating and supporting the service. |
| Protect, diagnose and operate the website. | Our legitimate interest in providing a reliable service and, where applicable, legal obligations. |
We do not use the application for solely automated acceptance or rejection.
Who receives it
Access inside We Are Eight Ltd is limited to authorised people who select and support the founding cohort. We use Vercel for website hosting and firewall controls, Resend to deliver the application message and Google Workspace for the restricted application inbox. The application is not written to the legacy ThreadGuard application table.
We may disclose information to professional advisers, regulators, courts or law-enforcement bodies where necessary and lawful, or in a business transfer subject to appropriate safeguards. We do not sell founding-application information.
International processing
Some suppliers process information in the United States and other countries outside the UK. Their published data-processing terms use recognised transfer safeguards, including the UK Addendum to standard contractual clauses where applicable. Contact us for the current provider list and further details of the safeguards.
How long we keep it
- Founding applications: up to 12 months from submission. Information needed for an accepted customer relationship then moves to the separate customer record.
- Resend sent-email data: 30 days under its current service documentation.
- Vercel hosting and firewall technical data: according to the active plan and security settings. The application route does not write applicant answers to runtime logs.
- Ordinary enquiries: up to 24 months after the last substantive message.
We may keep a limited record longer where necessary for a legal claim or a legal obligation. When a mailbox message is deleted, supplier deletion and recovery periods may continue for a limited time.
Your choices and rights
Depending on the circumstances, you may ask for access, correction, erasure, restriction or portability, or object to processing. Email us at mail@threadguard.co.uk to make a request. Your application reference helps us locate the record, but it is not required. We may need other information to confirm your identity.
You can also complain to the Information Commissioner's Office. We would appreciate the opportunity to address the issue first.
Changes
We will update the version and date when this notice changes. If a change materially affects how we use existing information, we will bring it to the attention of the people affected before the new use begins where required.