Privacy Policy

At Lock In ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at lock-in.info.

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

We collect minimal data necessary to provide our services:

Waitlist Signup

• Email address: to notify you about launches, content, and updates
• Signup timestamp: when you joined the waitlist
• Source page: which page you signed up from
• Consent record: proof that you agreed to receive emails

Automatically Collected Data

We may collect standard web server logs including IP addresses, browser type, and pages visited. This data is used for security and site improvement purposes only.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent (Art. 6(1)(a) GDPR): for waitlist signups. You actively opt in by submitting your email address.
• Legitimate interests (Art. 6(1)(f) GDPR): for website security and improvement.

4. How We Use Your Data

We use your email address exclusively to:

• Notify you when new content, products, or features launch
• Send occasional updates about discipline, health, and self-improvement
• Announce apparel and merchandise availability

We do not:

• Sell, rent, or share your email address with third parties for marketing
• Send spam or unsolicited promotional content
• Use your data for profiling or automated decision-making

5. Double Opt-In Process

After you join our waitlist, you may receive a confirmation email with a verification link. Your signup is only active after you click this link. This double opt-in process helps us verify your identity, prevents misuse, and ensures you genuinely want to receive our updates.

6. Data Storage & Security

Your data is protected by:

• HTTPS encryption: all data transmitted to our site is encrypted
• Secure email service provider: we use a GDPR-compliant ESP with proper security measures
• Access control: only authorized personnel can access subscriber data
• No unnecessary data retention: we only keep data as long as needed

7. Data Retention

We retain your email address and consent record for as long as you remain on our waitlist. If you unsubscribe, your email is marked as inactive and removed from our mailing list within 30 days. Consent records may be retained longer for legal compliance purposes.

8. Your Rights Under GDPR

As a data subject, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restrict processing: limit how we use your data
• Data portability: receive your data in a machine-readable format
• Object: object to processing based on legitimate interests
• Withdraw consent: unsubscribe from our newsletter at any time

To exercise any of these rights, email us at privacy@lock-in.info.

9. How to Unsubscribe

Every email we send includes an unsubscribe link at the bottom. Click it to immediately stop receiving emails. You can also email privacy@lock-in.info with the subject line "Unsubscribe" and we will remove you within 48 hours.

10. Third-Party Services

We may use the following third-party services that process your data:

• Email Service Provider (ESP): to manage newsletter subscriptions and send emails. Our ESP is GDPR-compliant and we have a Data Processing Agreement (DPA) in place.
• Web hosting (IONOS): to host this website

We do not use tracking cookies or analytics that collect personal data.

11. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission.

12. Right to Lodge a Complaint

If you believe we have violated your data protection rights, you have the right to lodge a complaint with a supervisory authority. For users in Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your state's data protection authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.