Privacy notice.
Last updated 11 July 2026.This notice explains how Onibara collects and uses information you give us when you join the waitlist or apply to become a provider. We keep it plain-English. If anything here is unclear, email waitlist@onibara.com and we'll explain.
Who we are
Onibara is a pre-launch platform for beauty and wellness professionals in London. The data controller is Onibara (contact: waitlist@onibara.com). We are based in the United Kingdom.
What we collect
Only what you give us on the waitlist page:
- Customers: your name, email, mobile number, and postcode.
- Providers: your name, email, mobile number, business name (optional), service type, years of experience (optional), current booking tool (optional), location, Instagram handle (optional), and a short note on why you applied (optional).
- Technical data: when you submit a form we receive the page URL, any UTM parameters in the link you clicked, the site that referred you, and your IP address (via Cloudflare, which hosts this site and verifies you're not a bot). We use this to understand where our audience comes from, not to identify you.
- Usage data: while you're on the waitlist page, our analytics tool (PostHog, see below) records how the page is used — including a visual replay of scrolling, clicks, and how far you get through the form. Anything you type into the form is masked in your browser before it is sent, so replays never contain your name, email, or number. We discard IP addresses from analytics data.
Why we collect it
- To tell you when Onibara launches, and to send you occasional pre-launch updates if you ticked the consent box.
- To decide who to onboard first as a provider (for provider applications).
- To understand which channels bring people to Onibara, so we spend our time on the ones that work.
Our lawful basis
Under UK GDPR:
- Consent — for the marketing emails you opted into when you ticked the consent box.
- Legitimate interest — for reviewing provider applications and operating the waitlist.
Who we share it with
We use a small number of third-party tools to run the waitlist. Your data passes through them only to do the job we hired them for.
- Cloudflare — hosts this site, checks form submissions aren't from bots (Turnstile), and stores short-lived, hashed rate-limiting keys. See cloudflare.com/privacypolicy.
- Resend — stores your waitlist contact details and sends our emails (your welcome email, launch updates if you opted in). See resend.com/legal/privacy-policy.
- Zoho Mail — our inbox provider; a copy of your submission is emailed to us there.
- PostHog — cookie-free analytics on the waitlist page, hosted in the EU. It shows us how the page is used, including session replays of scrolling and clicks, so we can make the form easier to use. It does not record anything you type — names, emails, and phone numbers are masked in your browser before anything is sent — and we discard IP addresses from analytics data. See posthog.com/privacy.
We do not sell your data. We do not share it with advertisers.
How long we keep it
Until Onibara launches, plus six months — so we can confirm you were invited and handle any questions. If you unsubscribe or ask us to delete your data before then, we delete it within 30 days.
Your rights
You can, at any time:
- Ask to see what data we hold on you.
- Ask us to correct it.
- Ask us to delete it.
- Withdraw your consent to marketing emails (every email has an unsubscribe link).
- Object to how we use it.
To exercise any of these rights, email waitlist@onibara.com.
You can also complain to the UK Information Commissioner's Office at ico.org.uk if you think we've mishandled your data.
Cookies
This page uses no tracking cookies. Our analytics (PostHog) runs in cookie-free mode and stores nothing on your device. If that changes, we'll update this notice and ask for your consent.
Changes to this notice
We may update this notice as Onibara evolves. The date at the top shows when it last changed. Material changes will be communicated by email to anyone on the waitlist.
← Back to Onibara