Privacy Policy

Effective Date: 20.11.2025

This Privacy Policy explains how we collect, use, and protect personal data when individuals join our waitlist. It applies to users located in the European Union and complies with the GDPR and French digital law (LCEN).

1. Identity of the Publisher

For non-commercial sites hosted in France, French law allows the hosting provider to hold identifying information of the publisher instead of the publisher disclosing their identity publicly. Our hosting provider stores all legally required identifying information.

Hosting Provider: Framer

Infrastructure: Amazon Web Services (AWS) using S3 and CloudFront for global content delivery
Security: ISO 27001 certified, data encrypted at rest (AES-256), SSL certificates via Let’s Encrypt
GDPR Compliance: Framer acts as a data processor; site owner is the data controller
Cookies: By default, no additional tracking beyond technical operation

Our identifying information is held securely by the provider and will be disclosed only to competent authorities upon valid legal request, in accordance with Article 6-II of the LCEN.

2. Data We Collect

When you sign up for the waitlist, we may collect:

Email address
Optional information (e.g., name)
Technical data automatically sent by your browser (IP address, device type, browser information)

We do not collect more information than necessary for operating the waitlist.

3. Purpose of Processing

We process your personal data solely for:

Managing the waitlist
Contacting you with updates, announcements, or product launch information
Improving the waitlist page

We do not sell or rent your data.

4. Legal Basis (GDPR Articles 6 & 7)

Processing is based on:

Consent: You provide your email voluntarily
Legitimate interest: Communicating relevant product updates

5. Data Storage & Security

Personal data is stored securely through reputable third-party services. While we apply reasonable security measures, no system is perfectly secure. By using the waitlist, you acknowledge that we are not liable for breaches beyond our reasonable control.

6. Data Retention

We retain your data until:

You request deletion, or
The waitlist is no longer needed

Data may be archived or deleted in accordance with GDPR requirements.

7. Your Rights (GDPR Articles 15–21)

You have the right to:

Access your data
Rectify incorrect information
Request deletion (right to erasure)
Restrict processing
Data portability
Withdraw consent at any time
Object to processing

To exercise these rights, contact us at: team@starlight-nutrition.com

You also have the right to lodge a complaint with your local supervisory authority. In France: CNIL (Commission Nationale de l'Informatique et des Libertés).

8. Third-Party Services

We may use tools for hosting, analytics, or email delivery. These providers process data under their own privacy policies and may transfer data outside the EU.

We are not responsible for external providers' actions or failures.

9. Cookies & Tracking

If analytics or tracking tools are used, we will disclose them here.

If no trackers are used, include this: We do not use cookies or tracking technologies beyond those strictly necessary to operate the waitlist.

10. International Transfers

Your data may be processed or stored outside the EU. When this occurs, we ensure adequate safeguards consistent with GDPR (e.g., SCCs).

11. Changes to This Policy

We may update this Privacy Policy. Updates will be posted with a new effective date.