Privacy policy

The short version

We collect your email address so we can tell you when Sumi Matcha launches — and only because you asked us to. We don't sell it, share it for marketing, or use it to track you around the internet. You can withdraw your consent and have it deleted at any time.

Who we are

Sumi Matcha ("we", "us") is the data controller responsible for the personal data collected on this site. You can reach us at [email protected].

What we collect

When you join the waitlist, we store the email address you enter and the date and time you signed up. Like most websites, our web server may also keep short-lived technical logs (such as IP addresses) to keep the site secure and working.

Why we collect it, and our legal basis

We use your email address to let you know when we launch and to share occasional updates about Sumi Matcha. Our legal basis for this is your consent (Article 6(1)(a) GDPR), which you give by submitting the signup form. Technical server logs are kept on the basis of our legitimate interest (Article 6(1)(f) GDPR) in keeping the site secure. We will never sell or rent your email address, and we don't share it with third parties for their own marketing.

How long we keep it

We keep your email address until you unsubscribe or ask us to delete it. If we decide not to launch, we will delete the whole waitlist. Technical server logs are kept only briefly and then deleted automatically.

Where it's stored and who can access it

Your email address is stored in our own database and in our mailing-list tool, Zoho Campaigns (hosted in the EU), which processes it on our behalf as a data processor. The only other party that may technically process it is the company hosting our website, acting under our instructions. If any of these providers process data outside the European Economic Area, we make sure appropriate safeguards — such as the EU Standard Contractual Clauses — are in place.

Cookies

This site uses no analytics or advertising cookies, which is why you don't see a cookie banner. The only cookies it may set are strictly necessary ones that keep the signup form secure; these don't require consent under the ePrivacy rules.

Fonts and other third parties

The fonts on this site are hosted on our own server, so viewing our pages doesn't send your IP address to Google Fonts or any other font service. No third-party scripts, trackers, or embeds run on this site.

Your rights

Under the GDPR you have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. You can also withdraw your consent at any time — just email us at [email protected] and we'll take care of it, usually within a few days and at the latest within one month. Every email we send will also contain an unsubscribe link.

If you believe we've mishandled your data, you have the right to lodge a complaint with your local data protection supervisory authority.

No profiling

We don't use your data for automated decision-making or profiling of any kind.

Changes to this policy

If we change how we handle your information, we'll update this page and the date at the top. Significant changes will also be mentioned by email before they take effect.

Questions?

Reach out any time at [email protected].