Legal
Privacy notice
Waitlist · Effective October 1, 2026
This notice explains what we collect when you join the PhenLabs waitlist on phenlabs.com, why, and what we do with it. If you later create a PhenLabs account, the full PhenLabs platform policy applies to your account and is shown to you before you sign up.
Who is responsible
PHENCAPITAL LTD, Israeli company no. 517019758, registered at Tuval Street 6, Tel-Aviv Yafo, Israel, is the controller of waitlist data. For anything about your privacy, email privacy@phenlabs.com.
What we collect
- Your email address, and a display name taken from the part before the “@”.
- Your place on the list: whether and when you confirmed your address, your position, and whether you have been invited or have created an account.
- Referrals: your personal referral code, the code of whoever referred you (if anyone), and how many people who joined with your code confirmed their address.
- Technical data: the IP address recorded with your entry when you join; and, in our server logs, the IP address, browser type, referring page and requested address of each visit.
- Email records: a log of the emails we send you and whether they were delivered, and, if you unsubscribe, a record of your address so that we do not email you again.
We do not ask for your name, phone number or payment details.
Giving us this information is voluntary. You have no legal duty to provide it. Without an email address we cannot add you to the waitlist, confirm your place or send your invitation; nothing else follows from not joining.
On your device
This site sets no cookies of its own and uses no analytics or advertising trackers. It saves your email address and referral code in your browser’s local storage so it can show your place when you come back; use “Not you?” on the page, or your browser settings, to clear it. Our security and content-delivery provider may set a strictly necessary cookie to protect the site from automated abuse, and may ask your browser to report connection errors to it.
Why we use it, and on what basis
- Running the waitlist you joined: confirming your address, keeping your place, counting referrals, showing you your status and sending your invitation. Basis: the steps you asked us to take when you joined (GDPR Art. 6(1)(b)) and the consent you give by joining.
- Keeping the waitlist and our systems secure: stopping fake, duplicate and automated sign-ups and other abuse, and fixing faults. Basis: our legitimate interest in a secure service (Art. 6(1)(f)).
- Answering your questions and requests, and meeting our legal obligations. Basis: our legitimate interest and legal obligation (Art. 6(1)(f) and (c)).
We do not use your information for advertising, and we email you about launch offers only if you separately agree to receive them.
Emails
We email you to confirm your address, about your place on the list, and with your invitation. The email that confirms your place carries an unsubscribe link; unsubscribing does not remove your place on the list. To leave the list entirely, see “Your rights” below.
Who receives it
We share waitlist data only as needed to run the waitlist: with the companies that host our servers (Hostinger), protect and deliver our website (Cloudflare) and send our email (Mailgun), each acting on our instructions; with our lawyers, accountants and auditors, for advice and to meet legal and audit obligations; and with authorities when the law requires it. We do not sell personal data or share it for cross-context behavioural advertising.
Anyone who has both your email address and your referral code can see your place and status on the list, so keep the status link from your confirmation email to yourself. Your referral link shows your code, never your address.
Where it is processed
PHENCAPITAL LTD is based in Israel, which the European Commission, the United Kingdom and Switzerland recognise as providing adequate protection for personal data. Our servers and the waitlist database are in the United States (hosted by Hostinger), our email provider (Mailgun) processes your address in the United States, and our website provider (Cloudflare) operates a global network that includes the United States. For people in the EEA, the UK or Switzerland, we rely on the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses, with the UK Addendum for UK data. Email privacy@phenlabs.com for a copy of the relevant safeguards.
How long we keep it
- If you do not confirm your address within 30 days, we delete your entry, including the IP address recorded with it.
- The IP address recorded with a confirmed entry is deleted 90 days after you joined.
- We keep a confirmed entry while the waitlist and your invitation remain active. If you create an account, your entry is linked to it and the platform policy then applies.
- Server logs and email records are kept only as long as needed for security, abuse prevention and fixing faults.
- If you unsubscribe, we keep your address on a do-not-email list so that we do not email you again.
- If you ask us to delete your entry, we do, except for anything we must keep for security, fraud prevention or legal reasons; copies in our backups are overwritten within 14 days.
Your rights
Depending on where you live, you may have the right to access, correct or delete your data, to restrict its use, to receive a copy of it, to withdraw your consent at any time (without affecting what we did before), and to complain to a data-protection authority: in Israel, the Privacy Protection Authority; in the EU or the UK, the authority where you live. You may also object at any time to our use of your data based on our legitimate interests.
To make a request, email privacy@phenlabs.com from the address you joined with, with the subject “Privacy rights request”, and tell us what you would like. We will confirm we received it, verify your identity in a proportionate way and respond within the time the law requires. We never treat anyone differently for using these rights.
Automated decisions
Your position updates automatically from when you joined and from confirmed referrals. We make no decision about you by automated means that has legal or similarly significant effects.
Children
PhenLabs is not intended for anyone under 18, and the waitlist is for adults only.
Changes
If we change this notice we will post the new version here with a new date, and if a change is material we will also tell confirmed waitlist members by email before it takes effect.