Legal
Privacy notice
Last updated: 16 September 2026
⚠ Draft pending legal review. Placeholders in [square brackets] must be completed and the document checked by a qualified adviser before this site goes live.
Who we are
Hornet Drones Limited is the data controller for the personal data described here. We are registered in England and Wales, company number 17463533, with a registered office at [REGISTERED OFFICE ADDRESS]. You can reach us about anything on this page at [email protected].
What this notice covers
This site currently does one thing with personal data: it operates a waitlist for early access to the HRN-01 system. Beyond that we keep only cookie-free, aggregated page statistics (see Site analytics). We do not use advertising pixels or tracking cookies, and we do not sell or share data with third parties for their own marketing.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address | To send you the confirmation email, and then occasional updates about alpha access. | Consent (UK GDPR Art. 6(1)(a)) |
| Consent record — the wording you agreed to, and the time | To evidence that consent was freely given, as we are required to. | Legal obligation / legitimate interests |
| Country, derived from your IP at the moment of signup | To know which data-protection rules apply to you. Your IP address itself is not stored. | Legitimate interests |
| Campaign parameters (utm_*) and referring site, if any | To understand which channels bring people here. Not linked to any advertising profile. | Legitimate interests |
| A hashed, irreversible form of your IP address | Rate limiting, to stop the form being abused. Deleted within hours. | Legitimate interests |
Confirmation before anything else
We use double opt-in. After you submit the form we send one email asking you to confirm. Until you click that link, we send you nothing else, and if you never click it the record is deleted. That one confirmation email is the only message an unconfirmed address ever receives.
Cookies
We set no cookies. The site stores your campaign parameters in your browser's
sessionStorage so that attribution survives you moving around the page; it
is cleared when you close the tab and is never read by any third party.
Site analytics
We use Cloudflare Web Analytics to count page views and see which pages and devices are used. It sets no cookies, stores no identifiers in your browser, and does not fingerprint you; Cloudflare reports aggregated counts to us and does not link visits to a person. Your IP address is used only to deliver the page and is not stored by us. You can block it with any content blocker and the site works exactly the same.
Who processes it for us
- Cloudflare — hosting, bot protection, cookie-free site analytics and the database holding the list. The database is placed in Cloudflare's Western Europe region.
- Resend — sends the confirmation and update emails.
Both act on our instructions under a data-processing agreement, and neither uses your data for their own purposes.
How long we keep it
- Unconfirmed signups: deleted after 30 days.
- Confirmed signups: until you unsubscribe, or after [24] months of no contact from us.
- Unsubscribes: we keep a minimal record of the address so we do not email you again by mistake.
- Rate-limit hashes: hours, not days.
Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it to another provider. You can withdraw consent at any time — every email carries a one-click unsubscribe, and using it takes effect immediately.
Email [email protected] and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office.
Changes
If we change what we collect we will update this page and, where the change is significant, tell the people on the list directly.