Privacy policy

• Controller: Carlos Arias Villena. Tax ID (NIF): 53492453L. Address: C/ Las Viñas, 2-11, Miguelturra (Ciudad Real), España.
• Contact for any privacy matter: hola@saraarkana.com

We only collect data through the waitlist form:

• Your email address.
• Your country of residence.
• The language you'd like your letters in, and the language of the site you signed up from.
• A record of your consent: sign-up date and version of the text you accepted.

We do not ask for your name, postal address, phone number or payment details.

• To manage the waitlist and newsletter, and email you about the club's opening, news, Lost Boxes, products and promotions. Basis: your express consent (Art. 6(1)(a) GDPR), given by ticking a box that is never pre-ticked, which you can withdraw at any time; every email will include a way to unsubscribe.
• To assess which countries we can ship to and which language editions to prepare, using aggregated data. Basis: the same consent.
• To keep proof of your consent. Basis: compliance with legal obligations (Art. 6(1)(c) GDPR).

Joining the waitlist does not commit you to buying anything. We do not profile you or make automated decisions about you.

If you subscribe in the future, we will also process your name, postal address and billing details to prepare and ship your envelopes (basis: performance of a contract, Art. 6(1)(b) GDPR) and to meet tax obligations (Art. 6(1)(c) GDPR). This website is expected to have its own subscription form in the future, with payments processed by Stripe (Stripe Payments Europe, Ltd.), which would act as payment provider and process your card details; the owner would not have access to full card details. Today this website has no active payment or subscription system: only the free waitlist exists. We will inform you again before you provide that data. The club may also be offered separately on other subscription platforms, which are independent channels with their own terms and privacy policies; they receive no data from this website.

• Waitlist data: until you unsubscribe or withdraw your consent, and at most [TO BE CONFIRMED: period after launch].
• Proof of consent: for as long as legal claims may arise [TO BE CONFIRMED: exact period].

We do not sell or share your data. Only providers delivering technical services to us have access, under a data processing agreement:

• Website hosting and the database where the waitlist is stored: [TO BE CONFIRMED: provider name, server location and safeguards].
• Google (Google Fonts service): when the website's typefaces load, your browser connects to Google servers, which receive your IP address.
• Email delivery service: not chosen yet. [TO BE CONFIRMED]

Google LLC may process data in the United States; it participates in the EU-US Data Privacy Framework. For other providers: [TO BE CONFIRMED: whether data is transferred outside the European Economic Area and under which safeguards].

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to hola@saraarkana.com. To leave the waitlist, just ask by email.

If you believe your data has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the authority in your country.

If you are under 14, please don't sign up without permission from your parents or guardians.