Privacy Policy
FileChute (filechute.net)
Last updated: 16 March 2026
1. Data Controller
The data controller responsible for the processing of your personal data through this website is:
Shay Stephan Lee Punter
Korunní 2569/108, Vinohrady, Praha 101 00, Czech Republic
Business No: 23507101
VAT Number: CZ0003091869
Email: [email protected]
Throughout this policy, "we", "us", and "our" refer to the data controller identified above. "You" and "your" refer to the individual accessing this website or submitting personal data through it.
2. Scope
This privacy policy applies to the processing of personal data collected through the website filechute.net ("the Website"). It describes the categories of personal data we collect, the purposes and legal bases for processing, how long we retain data, who we share it with, and what rights you have.
By using this Website or submitting your personal data to us, you acknowledge that you have read this policy. Where processing is based on consent, your consent will be obtained separately at the point of data collection.
3. Personal Data We Collect
3.1 Waitlist Registration Data
When you sign up to our product waitlist, we collect the following personal data:
- Email address
Purposes of processing:
- To confirm and manage your place on the FileChute waitlist
- To send you updates regarding product development, including new features, launch dates, and early access invitations
- To send you marketing communications relating to FileChute and its services
Legal basis: Consent (Article 6(1)(a) of the General Data Protection Regulation ("GDPR")). You provide your consent by voluntarily submitting the waitlist registration form. Each marketing email we send will contain a clear and prominent unsubscribe mechanism.
Withdrawal of consent: You may withdraw your consent at any time by clicking the unsubscribe link included in any email we send, or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. Upon withdrawal, we will cease processing your email address for the purposes described above and will delete it within 30 days unless retention is required by law.
3.2 Website Analytics Data
We use Google Analytics (provided by Google LLC) to collect anonymised data about how visitors interact with the Website. The data collected includes:
- IP address (anonymised through IP masking prior to storage)
- Browser type and version
- Operating system
- Pages visited and duration of visit
- Referring URL or traffic source
- Approximate geographic location (country or city level only, derived from anonymised IP address)
This data is collected through cookies placed on your device. See Section 4 (Cookies) for further details.
Purposes of processing:
- To analyse website traffic and usage patterns
- To improve the content, structure, and performance of the Website
Legal basis: Consent (Article 6(1)(a) GDPR), obtained via the cookie consent mechanism presented when you first visit the Website. You may withdraw your consent at any time by adjusting your cookie preferences or by disabling cookies in your browser settings.
4. Cookies
A cookie is a small text file placed on your device when you visit a website. We use cookies solely for the purposes of website analytics as described in Section 3.2.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Assigns a unique identifier to distinguish individual visitors | 2 years |
_ga_* | Google Analytics | Maintains session state and tracks interactions across pages | 2 years |
These cookies are set only after you have provided your consent through the cookie consent mechanism on the Website.
We do not use cookies for advertising, behavioural profiling, or retargeting. We do not permit third parties to place cookies on the Website for their own purposes.
You may disable or delete cookies at any time through your browser settings. If you disable cookies, the Website will continue to function, but analytics data will not be collected.
For more information on how Google processes analytics data, see Google's privacy policy at https://policies.google.com/privacy.
5. Recipients of Personal Data
We share personal data with the following third-party service providers who process data on our behalf (as data processors) under written data processing agreements:
| Provider | Purpose | Processing Location |
|---|---|---|
| Google LLC | Website analytics (Google Analytics) | United States |
| Amazon Web Services EMEA SARL (Amazon SES) | Delivery of transactional and marketing emails | EU (Frankfurt, Germany) |
These providers process personal data solely in accordance with our instructions and are contractually obligated to implement appropriate technical and organisational security measures.
We do not sell, rent, license, or otherwise disclose your personal data to third parties for their own commercial purposes.
We may also disclose personal data where required to do so by applicable law, regulation, legal process, or enforceable governmental request.
6. International Data Transfers
Amazon Web Services processes email data within the European Union (Frankfurt region). No transfer outside the EU/EEA occurs for this purpose.
Google Analytics data may be transferred to and processed in the United States by Google LLC. Google LLC is a participant in the EU-US Data Privacy Framework, which has been recognised by the European Commission as providing an adequate level of protection for personal data (Adequacy Decision of 10 July 2023). For more information, see https://www.dataprivacyframework.gov.
In the event that we engage additional service providers located outside the EU/EEA, we will ensure that appropriate safeguards are in place prior to any transfer, such as Standard Contractual Clauses adopted by the European Commission (Article 46(2)(c) GDPR) or an applicable adequacy decision (Article 45 GDPR).
7. Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.
| Data Category | Retention Period |
|---|---|
| Waitlist email address | Until you withdraw consent (unsubscribe), or 12 months after the date of our last communication to you, whichever occurs first. Upon expiry, the data will be deleted within 30 days. |
| Google Analytics data | 14 months from the date of collection, as configured in our Google Analytics account settings. After this period, the data is automatically deleted by Google. |
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/HTTPS across the entire Website
- Use of reputable, security-audited third-party service providers
- Restriction of access to personal data to authorised personnel only
While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your personal data.
9. Your Rights Under the GDPR
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access (Article 15): You may request a copy of the personal data we hold about you.
- Right to rectification (Article 16): You may request correction of any inaccurate or incomplete personal data.
- Right to erasure (Article 17): You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction of processing (Article 18): You may request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability (Article 20): You may request to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object (Article 21): You may object to the processing of your personal data where processing is based on legitimate interests.
- Right to withdraw consent (Article 7(3)): Where processing is based on your consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request without undue delay and in any event within one month of receipt.
10. Right to Lodge a Complaint
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority for the data controller is:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
Website: https://www.uoou.cz
You also have the right to lodge a complaint with the supervisory authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.
11. Automated Decision-Making
We do not carry out any automated decision-making or profiling as defined under Article 22 of the GDPR.
12. Children
The Website and our services are directed at business professionals and are not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without appropriate parental consent, we will take steps to delete that data without undue delay. If you believe we have inadvertently collected such data, please contact us at [email protected].
13. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Where changes are material, we will update the "last updated" date at the top of this page and, where we hold your email address, notify you by email prior to the changes taking effect.
We encourage you to review this policy periodically.
14. Contact
If you have any questions or concerns about this privacy policy or our data processing practices, you may contact us at:
Email: [email protected]
Post:
Shay Stephan Lee Punter
Korunní 2569/108
Vinohrady, Praha 101 00
Czech Republic