Privacy Policy

1. Information we collect

We may collect the following categories of personal information:

• Your first name and email address when you request an invitation.
• Your consent choices and records relating to your subscription.
• Technical and security information, such as browser, device, IP address, submission time, and anti-spam signals.
• Information you choose to provide when communicating with us.

2. How we use your information

We use personal information to:

• Receive, review, and respond to invitation requests.
• Send invitation-related updates, product reveals, limited-release information, and future allocation notices when you have agreed to receive them.
• Operate, protect, and improve our website and forms.
• Prevent spam, fraud, misuse, and other security threats.
• Comply with legal obligations and protect our rights.

3. Legal bases for processing

Where European Economic Area or United Kingdom data-protection law applies, we rely on:

• Consent for invitation updates and promotional email communications.
• Legitimate interests for website security, fraud prevention, and responding to requests, where those interests are not overridden by your rights.
• Legal obligations where processing is required by law.

You may withdraw consent at any time by using the unsubscribe link in an email or contacting us.

4. Email communications

If you consent to receive Esmeline communications, we may send information about invitation availability, product development, launches, limited releases, and related brand updates. Every promotional email will include an unsubscribe option.

5. Service providers

We may share information with service providers that help us operate Esmeline, including:

• Brevo, which hosts our invitation form and manages email contacts and communications.
• Google reCAPTCHA, which helps protect the form from spam and automated abuse.
• Website hosting, technical support, security, and infrastructure providers.

These providers may process information only for the services they provide to us and subject to their contractual and legal obligations.

6. International data transfers

Esmeline operates from the United States and uses service providers that may process information in the United States or other countries. Where required, we use appropriate safeguards for international transfers of personal information.

7. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Invitation and marketing information may be retained until you withdraw consent or unsubscribe. We may retain a limited suppression record after an unsubscribe request so that we do not contact you again unintentionally.

8. Your privacy rights

Depending on where you live, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your information.
• Withdraw consent or object to certain processing.
• Request restriction or portability of your information where applicable.
• Submit a complaint to the relevant data-protection authority.

To exercise a privacy right, contact us using the information in Section 13. We may need to verify your identity before completing a request.

9. Sale and targeted advertising

Esmeline does not sell personal information. At the effective date of this Policy, we do not use personal information collected through the invitation form for cross-context behavioral or targeted advertising.

10. Cookies and security technologies

Our website may use essential technical storage and security technologies needed to operate the site and protect the invitation form. The form is protected by Google reCAPTCHA, which may process device, browser, interaction, and network information to identify automated or abusive activity.

If we later add analytics, advertising pixels, or other non-essential tracking technologies, we will update this Policy and provide any consent controls required by applicable law.

11. Data security

We use reasonable administrative, technical, and organizational measures to protect personal information. No transmission or storage system can be guaranteed to be completely secure.

12. Children

Esmeline is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, please contact us so that we can review and delete it where appropriate.

13. Contact us

Questions or privacy requests may be sent to:

14. Changes to this Policy

We may update this Privacy Policy as Esmeline develops or when our practices or legal obligations change. The effective date at the top of the page will show when the latest version became effective.