Privacy

Privacy Notice

Last updated: 15 October 2026

This notice explains how the Elsevia pre-launch research and Early Access website uses personal information when people register interest, take part in product and market research, volunteer for follow-up research, verify an email address, or use the site.

Who is responsible for your information?

Data controller: Mehdi Rezaee

Privacy contact: medhirezaee@gmail.com

What we collect

• Research answers, including structured survey responses and any optional open-text answers you choose to provide.
• Research-integrity information such as questionnaire version, concept/price exposure, session timing, acquisition source, consent records and non-PII data-quality signals.
• Early Access information such as email address, country, respondent type, current phone setup and beta interest.
• Follow-up research contact details only when you choose Yes to being contacted and then separately provide an email address.
• A random browser visitor identifier used for research integrity and attribution. Its lifetime is fixed at 30 days and is not extended by return visits.

Please avoid putting unnecessary sensitive or confidential information into open-text answers. Open-text answers are stored separately from normal analytical views.

Why we use it

We use research and site-interaction information to understand how professionals manage work and personal phone use, evaluate the Elsevia concept, measure demand and pricing reactions, improve the proposed product, protect research integrity, and prepare aggregated validation evidence.

For this product and market research, the intended UK GDPR lawful basis is legitimate interests: evaluating and developing a proposed commercial product and protecting the integrity of the research, balanced against participants’ privacy rights. Participation remains voluntary. The study participation checkbox is an ethical/participation control and is not presented as the UK GDPR lawful basis.

Optional product, beta and launch marketing emails are separate. We send those only where the separate marketing choice has been positively selected, and you can withdraw that choice or unsubscribe at any time.

Research validity and suspicious submissions

We use anti-abuse controls such as Turnstile, rate protection, a honeypot field and predefined data-quality rules. Suspicious research evidence is flagged or excluded from standard analysis where appropriate rather than silently rewritten to improve results. We do not store raw IP addresses in the research database merely for analytics or duplicate detection.

Analytics and service providers

The validation service is designed to use Cloudflare for hosting/security and Turnstile, Supabase for the validation database, PostHog’s EU ingestion endpoint for a deliberately restricted pseudonymous journey-event taxonomy, and Resend for transactional verification email. PostHog does not receive email addresses, raw survey answers or open text from this implementation. Journey events may include restricted online/session identifiers that do not directly identify you but are still treated as pseudonymous analytics data rather than assumed to be anonymous.

These providers act as service providers/processors for the relevant functions and may themselves process technical network information needed to provide and secure their services. Where a provider processes personal information outside the UK, the controller must ensure an appropriate UK international-transfer safeguard applies before live collection.

How long we keep information

• The browser visitor identifier expires after 30 days and is non-sliding.
• Research responses, consent evidence and research-integrity records are retained for up to 24 months from collection for validation, reproducibility and investor due diligence, then deleted or irreversibly anonymised unless a longer period is legally required.
• Early Access and follow-up contact information is retained for up to 24 months unless you ask us to delete it sooner, subject to any legal need to retain limited records.
• Marketing-contact information is retained until you withdraw/opt out, after which limited suppression information may be kept so we can respect the opt-out.
• Unused email-verification links expire after 24 hours.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to ask for access, correction, erasure, restriction, portability or to object to processing. Where processing relies on legitimate interests, you have the right to object and we must consider your circumstances. Marketing consent can be withdrawn at any time.

Contact the privacy address above to exercise a right or ask a privacy question. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

Automated decisions

Data-quality rules may flag a response as suspicious or exclude it from standard research analysis, but the validation site does not use those rules to make legal or similarly significant decisions about individuals.

Changes to this notice

If the purposes, providers or material data practices change, this notice must be updated before those changes are used for genuine respondent collection.