Privacy Policy

Who we are

Kind & Fern (“we”, “us”) is a small home rituals brand based in Hitchin, United Kingdom. For the purposes of UK GDPR we are the data controller for personal data collected through this website.

You can reach us about anything in this policy at hello@kindandfern.com or, less formally, on Instagram @kindandfern. For any formal data request, please use email so we have a written record.

What we collect

• The email address you give us when you join the Splash Edit waitlist.
• Whether you ticked the optional marketing box, plus the date and time you submitted, and which page you signed up from.
• Basic technical data from our hosting provider (IP address, browser type, request logs) used to keep the site secure and working.

We don’t use analytics, advertising pixels, or social tracking on this site.

Why we use it & lawful basis

• Waitlist email — to let you know when our first Splash Edit drops. Lawful basis: consent (you joined the waitlist).
• Marketing emails — playful bath ideas and early-bird perks. Only sent if you ticked the optional marketing box. Lawful basis: consent. You can withdraw at any time by clicking unsubscribe in any email or emailing us.
• Server logs — to keep the site secure and diagnose problems. Lawful basis: legitimate interests in running a safe website.

How long we keep it

• Waitlist sign-ups: until our first product launch + 12 months.
• Marketing subscribers: until you unsubscribe.
• Server logs: roughly 30 days.

You can ask us to delete your data sooner — see your rights below.

Who we share it with

We don’t sell your data. We use a small number of trusted processors who handle data on our behalf:

• Lovable Cloud (built on Supabase, hosted in the EU) — stores the waitlist database and serves the website.
• Google (Google Workspace) — hosts our hello@kindandfern.com inbox, so any email you send us is processed by Google on our behalf. Google is certified under the EU–US Data Privacy Framework. See Google’s privacy policy.
• An email-sending provider — when we send the launch email. We’ll update this policy with the provider name once it’s connected.

International transfers

Our data is stored within the EU. Transfers from the UK to the EU are covered by the UK government’s adequacy regulations, so your data is treated with equivalent protection to staying in the UK.

Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Ask us to delete your data (“right to be forgotten”)
• Restrict or object to our processing
• Receive your data in a portable format
• Withdraw consent at any time

To exercise any of these, email hello@kindandfern.com. We’ll respond within one month.

If you’re not happy with our response, you can complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies & tracking

This site doesn’t set any non-essential cookies. We don’t use analytics, advertising cookies, or social media trackers. Because of that, a cookie consent banner isn’t required.

We do load typefaces from Google Fonts, which means your browser’s IP address is shared with Google when fonts are requested. Google’s privacy practices are documented at policies.google.com/privacy.

Children’s data

Our products are for families, but this website is addressed to parents and carers. We don’t knowingly collect personal data from anyone under 13. If you think a child has signed up, please email us and we’ll delete it.

Changes to this policy

We’ll update this page when our processing changes — for example when we connect an email-sending provider. The “last updated” date at the top will always reflect the current version.

Contact

Kind & Fern
Hitchin, United Kingdom
hello@kindandfern.com