Privacy Policy
Last updated: September 2026
This policy explains what personal data LOTACHI collects through this website today, why, and what choices you have. LOTACHI is an early-stage two-sided marketplace connecting prospective models with independent training providers, academies, salons, clinics, educators and practitioners — LOTACHI does not itself provide any treatment or training service.
Who we are
LOTACHI operates the website at lotachi.com and is the controller of the personal data described in this policy. You can contact us at hello@lotachi.com.
The personal data we collect today
We only collect what you give us directly through our forms. Depending on which one you submit, this may include:
- Model early-access/waitlist form: first name, email, mobile number (optional), postcode, travel radius, category interests, availability, shortest notice you'd need, openness to free or discounted pricing, and how you heard about LOTACHI (optional). We don't ask detailed suitability or treatment questions at sign-up.
- Provider network/pilot form: name, job title, organisation, email, phone, website or social link, location(s), provider type, categories, training days per month, trainees per session, model volume needed, model requirements expected in the next 30 days, upcoming training dates, purpose, hardest-to-fill requirement, fill-difficulty, last-minute cancellation frequency, how you currently source models, your current recruitment process, your biggest challenge, pilot interest, whether you currently have opportunities LOTACHI could help fill, your views on a successful-fill fee and what a reasonable fee range would be, and how valuable help with urgent or hard-to-fill requirements would be.
- General contact form: name, email, the reason you selected, and your message.
- Footer email capture: your email address only.
Website, analytics and attribution data
Our hosting provider necessarily logs basic technical information for any request to the site (such as IP address and timestamp) as standard infrastructure and security practice. Separately, if and when Google Analytics 4 is switched on, and only once you've given consent through a cookie-consent banner, it would collect information such as pages viewed, approximate location and device/browser type. We also capture utm_source, utm_medium, utm_campaign, utm_content and utm_term from links you arrive on the site through (for example a TikTok, Instagram, Facebook, LinkedIn or email campaign link), so we can understand which channel a waitlist or enquiry submission came from.
What we don't currently collect
We do not ask for medical history, clinical or treatment history, clinical eligibility information, or photographs or video of you, on any of our current forms.
Why we use your data
To build and operate the model and provider waitlists; to contact you about relevant opportunities, pilot participation or launch updates where you've agreed to that; to respond to your enquiry; and to understand, in aggregate, how people are finding and using the site so we can develop LOTACHI further.
Our lawful bases
We rely on a small number of lawful bases, depending on the purpose:
- Consent — for marketing-style contact (opportunity updates, launch news, pilot invitations) and for analytics cookies, where either is used. You can withdraw consent at any time.
- Legitimate interests — for operating and improving the waitlists and enquiry process, and for keeping the site secure. We only rely on this where it doesn't override your own rights and interests.
- Legal obligation — where we're required to use or disclose data by law, for example in response to a regulator.
Marketing consent
Where a form includes a checkbox about hearing from us, it is unticked by default — we don't opt you in automatically. You can withdraw this consent at any time using the unsubscribe link in our emails, or by emailing hello@lotachi.com.
Who we share it with
We use a small number of service providers (processors) to run this site and handle submissions:
- Formspree — receives and stores form submissions and forwards them to LOTACHI's email inboxes.
- Our hosting provider — serves the website and necessarily processes basic technical/server data.
- Google Analytics 4 — only once activated and only with your consent (see Cookie Policy).
Sharing with providers
At this stage there is no live opportunity matching, so we do not share model waitlist details with providers. Once matching exists, we will only ever share what's relevant to an opportunity you've actually expressed interest in, and this policy will be updated with clear detail on what's shared and when, before that functionality launches.
International data transfers
Some of our service providers (including Formspree, and Google if Analytics is enabled) may process data outside the UK and European Economic Area, for example in the United States. Where that happens, we expect appropriate safeguards to be in place, such as the UK International Data Transfer Addendum or equivalent standard contractual clauses.
How long we keep your data
We keep waitlist and enquiry data only for as long as it's reasonably needed for the purpose it was collected — broadly, until you ask us to delete it, you unsubscribe, or the information becomes clearly out of date (for example, once the platform launches and pre-launch waitlist data is superseded).
Your rights
Under UK data protection law, you have the right to:
- Ask for a copy of the personal data we hold about you
- Have inaccurate data corrected
- Ask us to erase your data, or restrict how we use it
- Object to us using your data where we rely on legitimate interests
- Withdraw consent at any time, where we rely on consent
- Receive your data in a portable, machine-readable format, where relevant
How to exercise your rights, or complain
Email hello@lotachi.com from the address you used to contact us — we aim to respond within 30 days. If you're unhappy with our response, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): 0303 123 1113, casework@ico.org.uk, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Security
We take reasonable steps to keep the data we hold secure, appropriate to an early-stage site handling waitlist and enquiry data rather than special-category data.
Changes to this policy
We may update this policy as LOTACHI develops — in particular, before we introduce bookings, payments, analytics, or any collection of health, treatment-history or photographic data. This page will always show when it was last updated, and we'll aim to let you know directly if we make a significant change.

