Privacy policy
Last updated 9 October 2026
Draft: this page is pending legal review and is not yet binding.
This policy explains how we handle personal data when you visit belowkilo.com, join the waitlist or reserve a wheelset. We collect as little as possible.
Who is responsible
The controller is the company named in the legal notice. Contact for any privacy question: infonull@belowkilo.com.invalid.
What we collect and why
| Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Email address, site language, time of consent | Waitlist emails about belowkilo | Consent, Art. 6(1)(a) | Until you unsubscribe or withdraw consent |
| Name, email, billing and shipping address, chosen options | Handling your deposit and order | Contract, Art. 6(1)(b) | For the duration of the order and the warranty period |
| Invoices and payment records | Tax and accounting obligations | Legal obligation, Art. 6(1)(c) | As required by Croatian accounting and tax law |
| Technical request data (IP address, browser, time) | Delivering the website securely | Legitimate interest, Art. 6(1)(f) | [TBD: log retention, e.g. 30 days] |
Waitlist sign-ups use double opt-in: we only add your address after you confirm it from the email we send.
Cookies and analytics
The site sets no cookies and does not track you. Visitor statistics are counted without cookies and without personal data. [TBD: analytics provider, e.g. Plausible.]
Who processes data for us
- Amazon Web Services – hosting of the website (EU region). [TBD: confirm region]
- Stripe – payment of deposits and orders. Stripe processes card and bank details; we never see or store them.
- Zoho Corporation (Zoho Campaigns, EU data centre) – the waitlist and its confirmation and announcement emails.
- [TBD: invoicing provider] – issuing fiscalized invoices.
Where a provider transfers data outside the EU/EEA, the transfer relies on an adequacy decision (such as the EU–US Data Privacy Framework) or standard contractual clauses.
Your rights
You can ask for access to, correction or deletion of your data, restrict or object to processing, and receive your data in a portable format. You can withdraw consent at any time, for example with the unsubscribe link in every email. Withdrawal does not affect processing done before it.
Write to infonull@belowkilo.com.invalid. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr) or the supervisory authority in your country.