THE SORT | Privacy Policy

Privacy Policy

Last updated: May 2026

1. Who we are

The Sort is a luxury digital wardrobe application currently in development, operated by The Minimal Sort, based in the United Kingdom.

Our website is thesort.app. For all privacy-related enquiries, please contact us at hello@thesort.app. We will respond within 30 days.

2. Our commitment to privacy

We are committed to protecting the personal data of every visitor to thesort.app, wherever they are located in the world. We collect only what we need, use it only for the purpose we state, and never sell it. Privacy is not an afterthought at The Sort — it is a founding principle.

3. Who this policy applies to

This policy applies to all visitors to thesort.app globally. Our primary markets include the United Kingdom, the Middle East, and India, but we welcome visitors from all countries and honour applicable data protection rights regardless of location.

4. The frameworks we comply with

As a UK-based business operating internationally, we work toward compliance with the following data protection frameworks:

United Kingdom: UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, regulated by the Information Commissioner's Office (ICO).

European Union: EU General Data Protection Regulation (EU GDPR).

India: Digital Personal Data Protection Act 2023 (DPDPA).

United Arab Emirates: Federal Decree-Law No. 45 of 2021 on Personal Data Protection.

Kingdom of Saudi Arabia: Personal Data Protection Law (PDPL), enforced by the Saudi Data and AI Authority (SDAIA).

Kuwait: Law No. 20 of 2014 on Electronic Communications and related regulations.

Qatar: Law No. 13 of 2016 on Personal Data Privacy Protection.

Bahrain: Personal Data Protection Law 2018.

California, United States: California Consumer Privacy Act (CCPA).

All other jurisdictions: We honour applicable local data protection rights for users in all countries, even where the specific legislation is not named above. See Section 10 for details.

Where local law provides you with rights or protections that exceed what is described in this policy, those rights are not diminished by this document.

5. What information do we collect

At this pre-launch stage, we collect only the following personal data:

Your email address was submitted voluntarily when you joined our waitlist.

We do not collect payment information, precise location data, national identity numbers, biometric data, financial information, or any sensitive personal information through this website at this stage.

We may collect anonymised, aggregated analytics data — such as pages visited, browser type, and approximate geographic region — that cannot be used to identify you personally. This data is used only to understand how visitors use the site and to improve it.

6. Legal basis for processing

We process your email address on the basis of your freely given, informed, and specific consent. You provide this consent when you voluntarily submit your email address to join the waitlist.

For UK and EU users, this is Article 6(1)(a) of the UK GDPR and EU GDPR, respectively. For users in India, the UAE, Saudi Arabia, and other jurisdictions, we rely on the equivalent consent provisions under applicable local law.

You may withdraw your consent at any time by unsubscribing from our communications or by contacting hello@thesort.app. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

7. How we use your information

We use your email address solely to send you occasional communications about The Sort ahead of its launch. These communications will occur no more than once a month.

We will contact you before the app opens so that you can choose whether to create an account, opt out, or take no action.

We do not use your data for advertising, profiling, automated decision-making, or any purpose other than the one described above.

8. Who we share your data with

We do not sell your personal data to any third party under any circumstances.

We do not share your personal data with any third party for their own commercial or marketing purposes.

Your email address is stored and managed through our email platform provider, which acts as a data processor on our behalf under a formal data processing agreement. This provider processes your data solely on our instructions and is bound by confidentiality and security obligations consistent with applicable data protection law.

9. International data transfers

As a UK-based business serving a global audience, your data may be processed in countries outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, which may include:

UK International Data Transfer Agreements (IDTAs). EU Standard Contractual Clauses (SCCs). Adequacy decisions by the UK Secretary of State or the European Commission. Equivalent transfer mechanisms required under applicable local law.

For users in India, we comply with the cross-border transfer provisions of the DPDPA 2023 as implemented and updated from time to time.

For users in the UAE and the Kingdom of Saudi Arabia, we comply with the cross-border transfer requirements of the applicable local personal data protection legislation.

10. Your rights

We respect and honour the privacy rights of all users. The specific rights available to you depend on your location.

United Kingdom and European Union (UK GDPR and EU GDPR): Right of access to your personal data. Right to rectification of inaccurate or incomplete data. Right to erasure (the right to be forgotten). Right to restriction of processing. Right to data portability. Right to object to processing. Right to withdraw consent at any time. Right to lodge a complaint with the Information Commissioner's Office at ico.org.uk (UK users) or your national EU supervisory authority (EU users).

India (DPDPA 2023): Right to access information about your personal data and how it is processed. Right to correction and erasure of inaccurate or incomplete data. Right to grievance redressal through our internal complaints process. Right to nominate another person to exercise your rights on your behalf. Right to raise a complaint with the Data Protection Board of India once fully established under the DPDPA.

United Arab Emirates (Federal Decree-Law No. 45 of 2021): Right to access your personal data. Right to correction of inaccurate data. Right to request erasure of your data. Right to withdraw consent. Right to raise a complaint with the UAE data protection authority.

Kingdom of Saudi Arabia (PDPL): Right to be informed of how your data is used. Right to access your personal data. Right to correction and erasure. Right to withdraw consent. Right to raise concerns with the Saudi Data and AI Authority (SDAIA) at sdaia.gov.sa.

Kuwait, Qatar, and Bahrain: You have rights under your applicable national data protection legislation. Please contact us at hello@thesort.app to exercise any of these rights, and we will respond within 30 days.

California, United States (CCPA): Right to know what personal information we collect, use, and share. Right to request deletion of your personal information. Right to opt out of the sale of personal information — we do not sell personal information under any circumstances. Right to non-discrimination for exercising your privacy rights.

All other countries and territories: Regardless of your location, you have the right to contact us at hello@thesort.app to access, correct, update, or request deletion of any personal data we hold about you. We will respond within 30 days and will honour any rights granted to you under your applicable local data protection law, even where that law is not specifically named in this policy.

11. Cookies

Our website uses only essential cookies necessary for the site to function correctly. We do not use advertising cookies, third-party tracking cookies, or any cookies designed to build a profile of your browsing behaviour.

If our use of cookies changes in future, we will update this policy and implement an appropriate consent mechanism before doing so.

12. Children's privacy

This website is not directed at children under the age of 16, or the applicable minimum age under local law where that age is higher. We do not knowingly collect personal data from children.

If you believe we have inadvertently collected data from a child under the applicable minimum age, please contact us immediately at hello@thesort.app, and we will delete it promptly.

13. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. However, no method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us at hello@thesort.app.

14. ICO registration

As a UK-based data controller, The Minimal Sort is subject to the requirements of the UK GDPR and the Data Protection Act 2018, regulated by the Information Commissioner's Office. Our ICO registration details will be published here once confirmed.

15. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, our services, or applicable law. Any updates will be posted on this page with a revised date at the top. We encourage you to review this page periodically.

If we make material changes that significantly affect how we use your data, we will notify waitlist members by email before the changes take effect.

16. Contact us

For any privacy-related questions, requests, or complaints:

The Minimal Sort hello@thesort.app thesort.app United Kingdom

For UK users: you also have the right to lodge a complaint directly with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.