CAYA Privacy Policy

Last updated: 18/02/2026

CAYA (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use and protect your information when you visit our website or sign up to the CAYA Founder Sphere.

1. Who We Are

CAYA is operated by Mkaya Carrigan trading as CAYA.
Email: hello@cayasphere.com

For the purposes of UK data protection law, we are the “data controller” of your personal data.

2. What Information We Collect

We may collect:

  • Your name

  • Your email address

  • Any information you voluntarily provide via contact forms

  • Basic technical data (such as IP address and browser type) collected automatically by our website host

We do not collect sensitive personal data at this stage.

3. How We Use Your Information

We use your information to:

  • Add you to the CAYA Founder Sphere waitlist

  • Send you updates about CAYA, including launch information, early access opportunities, and related news

  • Respond to enquiries

  • Improve our website and user experience

We do not sell or rent your personal data.

4. Legal Basis for Processing

Under UK GDPR, we rely on:

  • Consent – when you sign up to receive emails from us

  • Legitimate interests – to operate and improve our website

You may withdraw your consent at any time by clicking “unsubscribe” in our emails or contacting us directly.

5. Email Marketing

If you sign up to receive updates, we will send you marketing emails.

Every email includes an unsubscribe link. You can opt out at any time.

We use third-party email service providers (such as Squarespace Email Campaigns) to manage our mailing list securely.

6. Data Storage and Security

Your information is stored securely using reputable third-party platforms. We take reasonable technical and organisational measures to protect your data.

We only retain your personal data for as long as necessary for the purposes described above.

7. Sharing Your Data

We may share your data with:

  • Website hosting providers (e.g. Squarespace)

  • Email marketing providers

  • IT service providers

We do not share your data with third parties for their own marketing purposes.

8. International Transfers

Some of our service providers may store data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR requirements.

9. Your Rights

Under UK data protection law, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Withdraw consent at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: https://www.ico.org.uk

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.