Privacy policy

#NEED2BLEED is the controller of the personal data described here. The registered name, registration number and contact details are listed at the bottom of every page; while the business registration is still in progress those fields are marked as pending and will be published before the first sale. Until then, data requests go to the contact email shown on the site.

Only the email address you type into the launch-list form, plus the language you chose, the date and time of your sign-up, and whether you confirmed the address. We do not collect your name, address, phone number, age, payment details or health data anywhere on this site. We do not buy or enrich data from third parties.

Your email is used for one purpose: to tell you when the first batch launches and what it costs. The legal basis is your consent (GDPR Art. 6(1)(a)), given by ticking the consent box and confirming the address by double opt-in. You can withdraw consent at any time by replying 'unsubscribe' to any email or writing to the contact address, and we delete the record.

The form asks for an email address and nothing else, because nothing else is needed to send a launch announcement. Fields are never pre-ticked, consent is not bundled with anything, and the email is not used for profiling, advertising audiences or automated decision-making.

Unconfirmed sign-ups are deleted after 90 days. Confirmed sign-ups are kept until you unsubscribe or ask for deletion, and in any case no longer than 24 months after launch if you never open an email. Consent records are kept for as long as we rely on the consent, as GDPR requires us to be able to prove it.

The launch list is stored with our hosting and database provider, acting as a processor under a data-processing agreement, on servers in the European Union. The site itself is served through our hosting provider. Web fonts are loaded from Google Fonts, which means your IP address reaches Google's servers when a page loads. No other third party receives your data, and we never sell or rent it.

Data is processed inside the European Union. If a provider ever needs to process data outside the EU, the transfer is covered by the European Commission's Standard Contractual Clauses, and this policy is updated before that happens.

You can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing or withdraw consent. Write to the contact email and we answer within 30 days, free of charge. If you are not happy with the answer you can complain to the Romanian supervisory authority ANSPDCP (anspdcp.ro) or to the authority where you live.

The launch list is not aimed at children. Do not sign up if you are under 16. If we learn that an address belongs to someone under 16 without parental consent, we delete it.

Data travels over HTTPS, the database is access-controlled, and only the founder can read the list. If this policy changes in a way that affects you, we update the date at the bottom and, for material changes, tell the list by email.