How we handle invitations
Somebody gave us your email address so they could invite you to choose films and television with them on Sarita. This page says exactly what we did with it, and what you can ask us to do. It applies whether or not you ever make an account.
Who is responsible
WikiTribune, Ltd., which operates Sarita, is the data controller. You can write to us at admin@sarita.ai or at WikiTribune, Ltd., Mailbox 018, 272 Kensington High Street, London, W8 6ND, United Kingdom.
Where your address came from
A person using Sarita typed it in, having reviewed the message before it was sent. We did not buy it, scrape it, guess it, or get it from a list, and we did not read anyone's contacts to find it.
What we do with it, and why
We use it to deliver that one invitation and to manage it — to know it was sent, to honour a decline, and to stop writing if you ask. The lawful basis is legitimate interests: the interest is letting someone arrange, with a particular person they already know, an activity that needs that person's own preferences to work at all.
This is not marketing. Your address is not added to any list, not used to advertise anything, not used to build a profile of you, not shared with anyone else for their purposes, and not used to train models. You will not receive a reminder — we send one message, and only one.
What we hold
- Your email address, while the invitation is open.
- Which account invited you, and when.
- Whether the invitation was delivered, declined or expired.
- If you ask us to stop, a protected one-way fingerprint of your address — enough to recognise it and refuse to write again, and not enough to recover the address from.
How long
The address goes as soon as the invitation is settled — accepted, declined or expired — and in any case within 30 days. A record that you asked us to stop is kept for as long as we run invitations, because the alternative is quietly starting again.
Who else sees it
Amazon Web Services, who deliver our email and host our systems. They act on our instructions and may not use your information for their own purposes. Our systems run in the United States, so your address is processed there. That transfer is covered by our data processing agreement with Amazon Web Services, which includes the UK Addendum to the European Commission's Standard Contractual Clauses — the safeguard UK law requires for sending personal data abroad.
What you can do, without an account
- Ignore it. Nothing happens, and nobody is told.
- Decline it — the invitation closes and cannot be resent on the same link.
- Stop invitation emails to your address, from anyone, for good.
- Report a problem if the message was unwanted or looks wrong.
You can also ask us for a copy of what we hold about you, ask us to correct or delete it, or object to our using it at all. We will not ask you to justify an objection to invitations: ask, and we stop. If we keep the fingerprint described above after an erasure request, it is only so that the block itself survives, and we will say so.
Complaints
Write to admin@sarita.ai. We will acknowledge within 30 days and usually far sooner, and tell you what we have done. You can also complain to the Information Commissioner's Office at ico.org.uk, though we would rather hear from you first.