Privacy Policy
This page explains how Blüm handles the details you share when you join the waitlist. We keep it short, and we keep the data to the minimum we need.
What we collect
- Your full name, city and country.
- Your email address, and your phone number if you choose to add it.
- The goals you choose, if any, and a short note if you choose "Something else".
- Your consent text, its version and the time you gave it.
- Technical context: a hashed form of your IP address, your browser's user agent, language, time zone, the page you came from and any campaign tags in the link you used.
Why we use it
- To hold your place on the waitlist and to contact you personally about founding membership, and to send you occasional news and updates from Blüm. You can opt out of these at any time with the unsubscribe link in any email.
- To confirm that the email address is yours (double opt-in).
- To tailor our first conversation to the goals you told us about.
- To protect the form against abuse (rate limiting and bot detection).
Lawful basis
We process your details on the basis of your consent (Art. 6(1)(a) GDPR). Some goals you may choose, for example "Hormonal health" or "Rebuild after a setback", can reveal information about your health. For these we rely on your explicit consent (Art. 9(2)(a) GDPR), which is why the consent text names your goals. You can withdraw your consent at any time with effect for the future.
How long we keep it
- If you do not confirm your email address, we delete your entry 30 days after you joined.
- If you confirm, we keep your entry until you withdraw, or after 24 months without any activity from you.
- Technical logs used for abuse protection are kept for a short period and then removed.
Who processes it for us
We use a small number of service providers, each bound by a data processing agreement:
- Hostinger (website hosting).
- Supabase (database, hosted in Frankfurt, Germany).
- Klaviyo (email delivery and member communications, based in the United States). Klaviyo receives your name, email, phone, city, country and the goals you chose, so we can send your confirmation email, stay in touch about membership and send occasional news and updates.
- Slack, only if enabled, for an internal notice that someone joined. That notice contains your first name, city and country, never your email, phone or goals.
Where a provider processes data outside the European Economic Area, we rely on standard contractual clauses or an adequacy decision.
Your rights
You have the right to access, correct and delete your details, to restrict or object to processing, to data portability, and to withdraw your consent at any time. You can also complain to a data protection supervisory authority. To use any of these rights, simply reply to any email from us. Every email we send contains an unsubscribe link.
Cookies and tracking
This site sets no cookies and uses no third party trackers. We keep campaign tags from the link you used in your browser's session storage only until you submit the form.
Changes
If we change this policy, we update the version above. Material changes that affect how we use your details will be sent to you before they apply.