Your information

Privacy Notice

Last updated: 23 October 2026

Draft — not approved for public registration. The business identity, registered address and privacy contact must be confirmed and the notice reviewed before collecting customer data.

RitualíQ respects your privacy. This notice explains how information is handled when you request early access to the first product batch or choose to receive brand news.

1. Who is responsible?

The data controller is RitualíQ (legal operating entity awaiting confirmation).

Address: To be confirmed before accepting registrations.

Privacy enquiries: A verified privacy contact will be published before registration opens.

2. What information we collect

When you submit a first-batch request, we collect your email address, your acceptance of the early-access terms (including time and terms version), optional marketing preference, and technical confirmation data: an expiring, hashed verification token, confirmation timestamp and your allocated queue position. We record whether the address has been synchronised with our email service.

We do not request payment details, your skin condition, or your home address as part of the early-access form.

3. Why we use it

Early-access administration: to verify that you control the email address, prevent duplicate reservations, allocate up to 100 first-batch priority places, operate an overflow waitlist and send relevant service messages about your requested access. The intended legal basis is taking steps at your request before a potential purchase, where applicable. The final legal basis must be confirmed by the controller.

Optional marketing: if you separately tick the marketing checkbox, we may send RitualíQ product news, stories and offers. The intended legal basis for marketing is consent. Not opting in does not prevent you from requesting a first-batch place.

4. Verification, queue positions and messages

Confirmation emails are sent through Resend when the signup service is configured. A request does not enter the numbered queue until the email link has been explicitly confirmed. The first 100 confirmed addresses receive priority purchase access, and subsequent confirmations enter the overflow waitlist. A spot is not a completed order and does not guarantee stock or shipment.

5. Who processes data?

We use Cloudflare to host the website and store early-access records in a Cloudflare D1 database. Resend is used to send confirmation messages and, where separately authorised, manage optional marketing contacts. These service providers process data under their applicable agreements. International data transfers and safeguards must be reviewed for the controller's actual location and chosen service settings.

We do not sell your contact details. We do not use your email for unrelated third-party marketing.

6. How long information is retained

Pending verification links expire after 24 hours. The associated pending request should be deleted or renewed according to the verified retention schedule. Confirmed first-batch and marketing-consent records are kept only as necessary for administering the launch, documenting consent and meeting applicable legal obligations. A specific retention period must be approved by the controller before launch.

7. Your choices and rights

Depending on the applicable law, you may ask for access, correction, deletion, restriction, portability, or object to certain processing. You can withdraw optional marketing consent at any time, without affecting the lawfulness of processing carried out beforehand. Each marketing message should provide an easy unsubscribe option.

To exercise your rights, contact the privacy address above once published. You may also have the right to complain to the relevant data-protection authority.

8. Cookies and security

The reservation form does not save your email in browser local storage. The website may use essential infrastructure or security technologies. Any analytics, advertising pixels or non-essential cookies require separate assessment and notices before being enabled. We protect records through database access controls, short-lived confirmation links and restricted API credentials; no online service can guarantee perfect security.

9. Changes to this notice

We may update this notice as the service develops. Material changes affecting existing subscribers should be communicated appropriately.