Privacy Policy

Draft — last edited 6 September 2026

Draft notice. This policy has been written to reflect NaviStow's actual current practices as of the date above. It has not yet been reviewed by a lawyer or GDPR compliance service — that review is planned before NaviStow moves beyond the waitlist stage.

Who we are

NaviStow is the data controller for personal data collected through this website. NaviStow is currently operated by Enid, based in Spain, ahead of formal incorporation — this section will be updated to name the registered company once that's complete. Contact NaviStow at enid@navistow.com.

Who this policy applies to

Chief Stews and crew join this waitlist from many countries, not just the EU. We apply the standard set out in EU/UK GDPR globally, as the strictest applicable framework, rather than running different rules for different visitors. If you're in a jurisdiction with additional rights (for example, California's CCPA), those rights apply to you too, even where not spelled out individually below.

EU representative

NaviStow is currently operated by an individual based in Spain, which is itself in the EU, so no separate EU representative is required at this time. If NaviStow is later incorporated outside the EU and this changes, this section will be updated with the appointed representative's details.

What we collect

When you join the waitlist, we collect:

Your first name
Your email address
Your role on board (Chief Stew / 2nd Stew / other)
The date and time you gave consent, and the exact wording you agreed to

Why we collect it, and our lawful basis

We use this information to send you the Stew Bible Starter Checklist, to keep you updated on NaviStow's development, and to understand who's interested in the product so we can build it around real needs. Our lawful basis for this is your consent, given when you tick the checkbox on the signup form. You can withdraw this consent at any time (see "Your rights" below).

Where your data is stored

Your data is stored with Supabase, in a database hosted in the EU (Frankfurt, Germany). It does not leave the EU as part of our normal operation.

Who else sees it

We don't sell or rent your information to anyone. Supabase, our database provider, processes this data on our behalf and is bound by its own data processing terms. We do not currently use a separate email marketing tool — if that changes, this section will be updated to name it.

How long we keep it

If you join the waitlist but don't go on to become a NaviStow customer, we keep your signup for up to 24 months from your last interaction with us (for example, opening an email or replying to one), after which it is deleted. If you unsubscribe or ask us to delete your data sooner, we do so without waiting for that period to end.

Your rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Withdraw consent at any time — every email includes an unsubscribe link, and you can also contact us directly
Lodge a complaint with your national data protection authority

To exercise any of these rights, contact NaviStow at enid@navistow.com. We aim to respond within 30 days.

Cookies

This page doesn't use cookies or tracking beyond what's needed to submit the signup form. If we add analytics or advertising tools in future, we'll update this section and ask for your consent before they're used.

Changes to this policy

We'll update this page if what we collect or how we use it changes, and update the date at the top accordingly.