Privacy Policy
Effective date: April 11, 2026 · Last reviewed: April 11, 2026
SmartCandle ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit this website, why we collect it, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and applicable national laws.
1. Data Controller
SmartCandle
Email: privacy@smartcandle.io
2. Data We Collect and Why
We operate two voluntary forms on this website. You are never required to provide data to browse the site — forms are entirely opt-in.
Waitlist Form
| Data | Required | Purpose |
|---|---|---|
| Full name | Yes | To personalise launch communications |
| Email address | Yes | To notify you at product launch and share early-bird offers |
| Intended use case | No | To understand our audience and prioritise product features |
Ideas Form
| Data | Required | Purpose |
|---|---|---|
| Full name | No | To identify respondents who wish to be contacted |
| Email address | No | To reply to your submission if requested |
| Intended use case | No | To segment and prioritise product feedback |
| Feedback / ideas | Yes | Core purpose: product improvement and validation |
| Newsletter consent | No | To add you to the waitlist mailing list |
Browser localStorage
We store your language preference (a two-letter code such as en, fr,
nl, or de) in your browser's localStorage. This data never leaves
your device and contains no personal information.
We do not use cookies, advertising networks, or any third-party analytics (Google Analytics, Facebook Pixel, etc.).
3. Legal Basis for Processing
We process your personal data on the basis of your freely given consent (Article 6(1)(a) GDPR). By completing and submitting a form, you consent to us processing the data you provided for the purposes described in Section 2.
You may withdraw your consent at any time by contacting us at privacy@smartcandle.io. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.
4. Data Processor: Netlify
This website is hosted and its forms processed by Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, USA). When you submit a form, your data is transmitted to and stored on Netlify's infrastructure.
Netlify acts as a data processor on our behalf under a Data Processing Agreement. International transfers of data to the United States are governed by Standard Contractual Clauses (SCCs) approved by the European Commission. For details, see Netlify's Privacy Policy.
We do not share your data with any other third party.
5. Data Retention
We retain form submission data for a maximum of 24 months from the date of collection, or until we ask you to reconfirm your consent, whichever comes first. Once SmartCandle launches and you have been notified, data no longer needed for the stated purposes will be deleted within 90 days.
You may request deletion of your data at any time — see Section 6.
6. Your Rights Under the GDPR
You have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Ask us to correct inaccurate or incomplete data.
- Erasure — Ask us to delete your data ("right to be forgotten").
- Restriction — Ask us to limit how we use your data while a dispute is resolved.
- Portability — Receive your data in a structured, machine-readable format (JSON or CSV).
- Objection — Object to processing based on our legitimate interests.
- Withdraw consent — Revoke your consent at any time without penalty.
To exercise any of these rights, email privacy@smartcandle.io with the subject line "Data Rights Request". We will acknowledge within 72 hours and respond within 30 calendar days.
Right to Lodge a Complaint
If you believe we have not handled your data lawfully, you have the right to lodge a complaint with your national supervisory authority:
7. Security
All data transmitted to this website is encrypted in transit via HTTPS/TLS. We rely on Netlify's enterprise-grade security infrastructure for data at rest. Access to form submission data is restricted to authorised team members only.
8. Children's Privacy
This website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has submitted personal data through our forms, please contact us immediately at privacy@smartcandle.io and we will delete the data without delay.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will always reflect the most recent version. For material changes that affect how we use your data, we will take reasonable steps to notify you directly (e.g., by email if you are on our waitlist).
10. Contact
For any privacy-related question, request, or concern:
SmartCandle — Privacy
Email: privacy@smartcandle.io