Legal
Privacy policy
The short version
- The only thing we ask you for is an email address, and only so we can tell you when we open.
- We do not sell, rent or share your address with anyone for their own marketing.
- We set no cookies and run no advertising or analytics trackers.
- Ask us to delete you and we will, usually the same day. One email to hello@momentasbrand.com is enough.
1. Who is responsible for your data
The data controller is [registered company name], [registered address], registered under number [company number], trading as Momentas Book.
For anything about your data, write to hello@momentasbrand.com. A human reads that inbox. We have not appointed a data protection officer, as we are not required to.
2. What we collect, and why
| What | Why we have it | Legal basis |
|---|---|---|
| The email address you type into the form | To send you one message when the shop opens, and the launch discount we promised | Your consent — GDPR Article 6(1)(a) |
| Your IP address and browser user-agent string, recorded with the signup | To stop the form being flooded with junk signups and to investigate abuse | Our legitimate interest in keeping the form usable — Article 6(1)(f) |
| The date and time you signed up | To show you when you joined if you ask, and to apply our retention limit | Our legitimate interest in running the list properly — Article 6(1)(f) |
| Your answer to the storage notice | So we stop asking. It stays in your own browser and never reaches us | Not personal data on our side — we never receive it |
That is the complete list. There is no tracking pixel, no advertising tag, no session recording and no profiling of any kind. We do not try to work out who you are beyond the address you chose to give us.
3. How long we keep it
Your address stays on the list until whichever of these happens first: you ask us to remove it, you unsubscribe from the launch email, or twenty-four months pass without us opening. After that it is deleted from the live database.
The IP address and user-agent recorded alongside your signup are kept for the same period and are deleted with the rest of the record.
4. Who else sees it
Nobody buys this list, because it is not for sale. The only third parties involved are the ones that make the site work:
- Our hosting provider, [hosting company and country] — the server the list sits on. They act on our instructions as a processor.
- An email delivery service — we have not chosen one yet. When we do, we will name it here before we upload anything to it.
- Nobody else. The typeface, the stylesheet, the scripts and the logo are all served from this site's own server. No fonts, tags or scripts are fetched from Google or anyone else, so loading this page tells no third party that you visited.
We will also hand over data if the law genuinely requires it, and we will tell you unless we are forbidden from doing so.
5. Where your data lives
The waitlist is stored on a server located in [server country], inside the European Economic Area. If that ever changes, or if we start using a provider outside the EEA, we will update this page and rely on the European Commission's standard contractual clauses or an adequacy decision for the transfer.
6. Your rights
Under the GDPR you can ask us to:
- Show you what we hold about you, and give you a copy.
- Correct it if the address is wrong.
- Delete it — there is no reason we would refuse this for a waitlist.
- Restrict or object to how we use it.
- Take it elsewhere, in a machine-readable file.
- Withdraw your consent at any time. That does not undo anything we did legitimately before you withdrew it.
Email hello@momentasbrand.com and say what you want. We do not charge for this and we will answer within one month, usually far sooner. We may ask you to confirm you control the address, purely so we do not delete someone else's signup on request.
If we handle it badly you can complain to your national data protection authority. In our case that is [supervisory authority for your country], but you may also complain to the authority where you live or work.
7. Keeping it safe
Everything you send us travels over an encrypted HTTPS connection, and the whole site is served that way — plain HTTP requests are redirected before anything is transmitted. The list itself sits in a database that is not reachable from the web. The page that displays it is behind a password, locks out repeated wrong guesses, and is never cached by browsers or proxies. Access is limited to the people running Momentas.
No system is perfect. If a breach ever puts your data at real risk, we will tell the supervisory authority within 72 hours and tell you directly.
8. Children
Momentas Book is sold to adults, and this waitlist is not aimed at children. Please do not sign up if you are under 16. If you believe a child has signed up, tell us and we will remove the record.
9. Changes to this policy
When the shop opens this policy will be replaced by a longer one covering orders, payment and the photographs you upload. We will keep the date at the top current, and if a change actually affects you we will say so in the launch email rather than quietly editing the page.