Privacy Policy

Last updated: 14 August 2026

This policy explains what happens to your personal data when you join the Optal Health waitlist.

Who is responsible for your data

Optal Health is a trading name of Kane Lackenby, a sole trader (autónomo) registered in Spain.

• Data controller: Kane Lackenby

• NIE / NIF: Y8396079N

• Address: Calle Doctor Miguel Rosas 37A, 35007 Las Palmas de Gran Canaria, Spain

• Email: admin@optalhealth.com

There is no company behind Optal Health yet. If a company is formed and takes over the running of the service, it will become the data controller in place of Kane Lackenby. You will be told before that happens, and the terms on which your data is held will not be weakened.

What we collect

Only what you enter into the waitlist form:

• Your email address

• Your first name, if you choose to give it

• The fact that you ticked the consent box, and the date and time you did

That is the entire list. We do not collect payment details, health information, blood test results, or anything else at this stage. Nothing can be purchased on this website.

Why we collect it

To tell you when Optal Health launches, and to send occasional updates about the product before then. That includes any early access or founding member offers we make available to people on the list.

We do not sell your data, share it with advertisers, or pass it to anyone for their own marketing.

The legal basis

Your consent, under Article 6(1)(a) of Regulation (EU) 2016/679 (GDPR), read alongside Spanish Organic Law 3/2018 (LOPDGDD) and Article 21 of Spanish Law 34/2002 (LSSI-CE), which governs commercial email.

You give that consent by ticking the box on the form.

You can withdraw consent at any time. Every email we send carries an unsubscribe link, or you can write to admin@optalhealth.com. Withdrawing consent does not affect the lawfulness of anything done before you withdrew it.

Who else handles your data

Two providers, each acting only on our instructions under a data processing agreement:

• Framer B.V. (Netherlands), which hosts this website and processes the waitlist form.

• Proton AG (Switzerland), which provides our email and file storage.

Proton is based in Switzerland, which sits outside the European Economic Area. The European Commission has recognised Switzerland as providing an adequate level of data protection, so no additional transfer safeguards are required.

Framer uses its own subprocessors, some of which may operate outside the EEA. Where that happens, the transfer is covered either by an adequacy decision or by the European Commission's Standard Contractual Clauses. Framer's current subprocessor list is published on its website.

We do not use any United States based email or marketing platform.

How long we keep it

Until you unsubscribe, or until 24 months after your last interaction with us, whichever is sooner. After that your details are deleted.

If Optal Health does not launch, the list is deleted and you will be told.

Cookies and analytics

This website does not use tracking cookies, advertising cookies, or third party analytics such as Google Analytics. We do not profile you or track you across other websites.

Strictly necessary cookies may be set so the site functions correctly. These do not require your consent under Article 22.2 of Law 34/2002.

We use Framer's built-in analytics, which counts visits and page views without cookies and without creating any identifier that can be traced back to you.

If we add anything that does require consent, a banner will appear and will block it until you agree, and this policy will be updated first.

Your rights

Under the GDPR you can ask us to:

• Confirm what data we hold about you and provide a copy

• Correct anything inaccurate or incomplete

• Delete your data

• Restrict how we use it

• Provide your data in a portable format, or send it to another provider

• Stop using it, including for direct marketing

You also have the right to withdraw consent at any time, which is separate from the right to deletion.

Email admin@optalhealth.com. We will respond within one month. If a request is complex we may extend that by up to two further months, and will tell you within the first month if we do. There is no charge.

If you believe we have handled your data improperly, you can complain to the Spanish supervisory authority:

Agencia Española de Protección de Datos C/ Jorge Juan 6, 28001 Madrid www.aepd.es

We would rather you raised it with us first, but it is your right either way.

Automated decision making

There is none. Nothing about you is profiled, scored, or decided automatically.

Age

Optal Health is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has joined the list, email us and we will delete the record.

Security

Your data is held in Proton's encrypted storage and accessible only to Kane Lackenby, protected by two factor authentication.

If a personal data breach occurred, we would notify the Agencia Española de Protección de Datos within 72 hours where required under Article 33 GDPR, and would tell you directly where the breach was likely to result in a high risk to your rights and freedoms.

Changes to this policy

If we make a material change we will update the date above and email everyone on the list. If you are not happy with a change, unsubscribe.

Contact

admin@optalhealth.com