Draft privacy notice awaiting approval. Planned services are identified below.

Privacy

Draft updated 8 September 2026. Not yet in force.

1. Who is responsible

ClearZone Digital Ltd (company number 17184387, 66 Paul Street, London EC2A 4NA) is the data controller for personal data collected through this site. Contact: contact@clearzone.tech.

2. The app and device

The ClearZone Android app has no account, no sign-in, no analytics and no ads. It does not request internet access. Your settings and focus stats are stored on your phone. FocusField stores no personal information about you.

This is separate from the shopping website, which needs service providers to operate and, when orders open, to process an order.

3. What this site collects

• Orders and payments are closed. When they open, Shopify Checkout will collect your name, delivery address, email, optional phone number and order details to fulfil the contract. Shopify Payments or your chosen wallet will handle payment details; we will not see your full card number.
• Student verification is planned for checkout review when the service is ready and orders open. Nothing of the kind runs today. It would use your university email address to send a code, and protected verification records to check eligibility and prevent repeated use. Our legal basis would be our legitimate interest in running that check while preventing misuse.
• Website measurement: this site runs no analytics and no performance measurement today, and sets no cookie of its own. Vercel Web Analytics and Speed Insights are planned. If they are enabled, they will measure visits, broad device and location information, and loading performance without advertising cookies, and this notice will say so before they are turned on. The planned purchase events contain no email address, order number or payment information.
• Security: Vercel hosts the site. Hosting can involve network information such as your IP address and browser details. Bot protection through Vercel BotID is planned for checkout and student verification and is not in use while orders are closed. We use this to keep the service secure, under our legitimate interest in preventing abuse.
• Contact: if you email us, we use your message and contact details to answer you, support an order or handle your request.

4. Who processes it for us

• Shopify: product information and, when checkout opens, orders, payments and receipts. See Shopify's privacy policy.
• Resend: the planned student verification email service. It will receive the delivery email address and message. See Resend's privacy policy.
• Upstash: the planned shared storage for student verification, discount records and abuse limits. This service is not yet enabled for production student verification. See Upstash's privacy policy.
• Vercel: hosting today, and bot protection and website measurement when those are enabled. See Vercel's privacy policy.
• Royal Mail: when you place a UK order, we will share your name and delivery address with Royal Mail to deliver it.

Some providers process data outside the UK. We will confirm the applicable contracts and transfer safeguards for planned checkout and student services in the approved notice before they open.

5. Cookies

• The planned student check uses ff_student_pending to remember a verification request for up to 15 minutes. It contains a random request reference, not your email address or verification code.
• After successful verification, ff_student will remember that eligibility for up to 30 days. It will be sent only over a secure connection and cannot be read by page scripts.
• Shopify Checkout uses its own cookies on the checkout domain when you continue there. See Shopify's cookie policy.

We set no advertising or tracking cookies.

6. How long we keep it

When orders open, the planned retention period for order records is six years to meet tax and consumer-law obligations. We will keep support messages only for as long as needed to handle the request and any related obligations.

The planned student service will expire a pending verification request after 15 minutes and a verified discount grant after 30 days. A record linked to a protected, one-way version of the email address will be kept for 90 days to prevent repeated discount issuance. These are planned retention limits for the new service, not a claim that a production issuance log already exists.

7. Your rights

Depending on the circumstances, you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict its use, object to processing based on legitimate interests, or ask to move data to another service. Email contact@clearzone.tech. You can also complain to the Information Commissioner's Office.

8. Changes

While this notice is a draft, we show its revision date. An approved notice will state its effective date, and later changes will be published here.