Privacy Policy

Blyss (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit blyssup.com (the “Site”).

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Site, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for your personal data is Blyss. For any data protection enquiries, contact us at hello@blyssup.com.

2. What Data We Collect

We collect the minimum amount of personal data necessary to operate our services. Specifically:

2.1 Email Subscription

When you sign up for our launch email list, we collect:

• Email address — required to send you launch notifications
• Signup source — which page or form you used to subscribe (for internal analytics)
• IP address (hashed) — stored as an irreversible SHA-256 hash for abuse prevention only; the original IP address is never stored

2.2 Contact Form

When you submit our contact form, we collect:

• Name
• Email address
• Enquiry type — wholesale, press, or general
• Message content
• IP address (hashed)

2.3 Analytics

If you accept analytics cookies, we use Plausible Analytics, a privacy-respecting analytics service that does not use cookies, does not collect personal data, and does not track you across sites. Plausible collects aggregate, anonymised data about page views and referral sources. No individual user data is stored.

If you decline analytics cookies, no analytics data is collected at all.

2.4 Data We Do NOT Collect

• We do not collect payment information (we do not sell directly online yet)
• We do not use tracking cookies or third-party advertising pixels
• We do not share or sell your data to any third party

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent — when you subscribe to our email list or accept analytics cookies
• Legitimate interest — when you submit a contact form (we have a legitimate interest in responding to enquiries)

4. How We Use Your Data

• Email addresses are used solely to send you a confirmation email and, once confirmed, to notify you when Blyss is available to purchase online. We will not send marketing emails beyond launch notifications without further consent.
• Contact form data is used to respond to your enquiry. We may send the enquiry to relevant team members.
• Hashed IP addresses are used exclusively for rate limiting and abuse prevention. They cannot be reversed to identify you.

5. Data Retention

• Email subscriptions are retained until you unsubscribe or request deletion.
• Contact submissions are retained for 12 months, after which they are deleted.
• Hashed IP addresses are retained for 30 days, then deleted.

6. Third-Party Services

We use the following third-party services to operate the Site:

• Vercel — hosting and infrastructure (servers located in the EU/UK)
• Turso — database hosting for email subscriptions, contact submissions, and stockist data
• Resend — transactional email delivery (confirmation emails and contact notifications)
• Plausible Analytics — privacy-respecting, cookie-free website analytics (only loaded with your consent)
• Mapbox — map rendering for the stockists page

None of these services receive your personal data for marketing purposes. Data processing agreements are in place with all service providers.

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to withdraw consent — unsubscribe from our email list at any time via the unsubscribe link in any email, or by contacting us
• Right to lodge a complaint — you may contact the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at hello@blyssup.com. We will respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this policy periodically.

9. Contact

For any questions about this Privacy Policy or your personal data, contact us at hello@blyssup.com.