Who we are
Cherry & Blue (“we”, “us”) operates cherryandblue.com. We are pre-launch: the site presents our bags and runs a waitlist, and no products are sold yet. This policy will be updated before we start taking orders.
Data we collect
- Waitlist and newsletter — your email address, the piece and colorway you chose (if any), where on the site you signed up, and whether you have unsubscribed.
- Account — if you create one: your name, email address and a hashed password, or your Google profile name and email if you sign in with Google.
- Messages — what you send through the contact form or by email, and your email address so we can reply.
- Usage data — pages visited, device and browser type, and referrer, collected by analytics only if you accept analytics cookies, plus anonymous performance timings.
How we use it
- To tell you when the collection opens, and, if you stay subscribed, to send occasional notes from the atelier.
- To run your account and answer your messages.
- To understand how the site is used and fix problems.
- To keep the site secure and prevent abuse.
We do not sell your personal data, and we do not use it for automated decisions about you.
Who processes it
We use a small number of service providers, each receiving only what it needs:
- Vercel — website hosting and anonymous performance measurement (Speed Insights).
- Neon — the database that stores waitlist, account and message records.
- Resend — sending emails such as the waitlist confirmation.
- Google — optional sign-in with Google, and Google Analytics if you accept analytics cookies.
- Sentry — error monitoring, so we can find and fix faults on the site.
When we start selling, payment processing and delivery providers will be added here before the first order is taken.
Cookies & analytics
Essential cookies keep you signed in and protect forms. Analytics cookies are off until you accept them in the cookie banner, and you can change your choice at any time. Details are in the cookie policy.
How long we keep it
- Waitlist — until you unsubscribe or ask us to delete it. After unsubscribing we keep only a record that you opted out, so we do not email you again by mistake.
- Account — until you ask us to close it.
- Messages — as long as needed to deal with your inquiry, then deleted.
- Analytics — according to the retention setting of our analytics provider.
Security
Traffic to the site is encrypted with TLS, passwords are stored hashed, and access to personal data is limited to the people who need it. If a security incident affects your data, we will tell you as required by law.
Your rights
Wherever you live, you can ask to see, correct, export or delete the personal data we hold about you, and you can unsubscribe from emails at any time using the link in every email. Residents of the EU and UK have these rights under the GDPR, and California residents under the CCPA. Email support@cherryandblue.com from the address concerned and we will respond within 30 days. You can also complain to your local data protection authority.
Children
The site is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Changes
We will update this policy before we start selling, and whenever our practices change. The date at the top of the page shows the latest version.
Contact
Privacy questions and requests: support@cherryandblue.com. General inquiries: info@cherryandblue.com.