Privacy Policy
Last updated: July 30, 2026
Kindfolk Way is a business based in Austria with a registered address of Wittelsbachstraße 3/20, 1020 Vienna, Austria (“we,” “us,” “our,” and “Company”). The person responsible for this website and for the processing described here is Sebastian Süssenbach. Our contact and registration details are:
- Responsible person: Sebastian Süssenbach
- Email: support@kindfolkway.com
- Impressum
This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website and join our waitlist. We are the data controller for the processing described here. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Scope note: We are currently in a pre-launch phase. This policy describes the limited processing we carry out today — running our website and operating a waitlist. We will update this policy before we launch paid memberships, accounts, checkout, or any analytics, and before adding any processing not described below.
1. What personal data we collect
- Data you give us when joining the waitlist: your name, email address, and which of the listed business or content roles best describes you.
- Data collected automatically to prove and manage your consent: when you submit the waitlist form, our email provider records the date and time of your sign-up, the IP address you signed up from, an approximate location derived from that IP address, and the page or source of the sign-up. This is standard proof-of-consent (double opt-in) data.
- Technical data needed to serve the website: when you load our site, our hosting provider processes standard server and connection data (such as your IP address, browser type, and the pages requested) to deliver the site securely and prevent abuse. We do not use this data to build a profile of you.
We do not currently run advertising pixels, cross-site trackers, or non-essential analytics on this website.
2. Why we process your data and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Adding you to our waitlist, understanding which audience groups are interested, and emailing you updates about our upcoming launch | Your consent — Art. 6(1)(a) |
| Keeping a record of your consent (date, time, IP, source) | Our legal obligation and legitimate interest in demonstrating consent — Art. 6(1)(c) and (f) |
| Operating, securing, and maintaining the website | Our legitimate interest in running a safe, functional website — Art. 6(1)(f) |
You can withdraw your consent at any time (see section 6). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
3. Who we share your data with (our processors)
We do not sell your personal data. We share it only with the service providers (“processors”) that help us operate the waitlist and website, each bound by a data processing agreement and permitted to use your data only on our instructions:
- MailerLite (email marketing and waitlist forms) — stores your submitted name, email address, and selected business type, and manages your waitlist subscription. See MailerLite's privacy policy.
- Vercel (website hosting) — serves our website and processes the technical connection data described in section 1. See Vercel's privacy policy.
- Google reCAPTCHA — our waitlist sign-up form is embedded from MailerLite and may use Google reCAPTCHA to protect against spam and automated sign-ups. This can load when you visit the signup page and can involve Google processing limited technical data (such as your IP address) for that purpose. See Google's privacy policy. We rely on our legitimate interest in preventing fraudulent and automated sign-ups (GDPR Art. 6(1)(f)).
Where a processor stores or processes data outside the European Economic Area, that transfer is protected by an adequacy decision or by EU Standard Contractual Clauses. Our own infrastructure and databases are hosted within the EU.
4. Cookies and similar technologies
We use only strictly necessary cookies and local-storage items. We do not currently use analytics, advertising, or other non-essential cookies, which is why we do not show a cookie consent banner.
When the embedded waitlist form is displayed or submitted, MailerLite may set small functional items needed to manage the form session and remember a completed submission:
| Item | Purpose |
|---|---|
| mailerlite:session_id | Distinguishes your browsing session for the form |
| mailerlite:forms:submitted (per form) | Remembers that you have already submitted the form |
If we add analytics or other non-essential cookies in the future, we will introduce a consent banner and update this policy first.
5. How long we keep your data
Waitlist data.
We keep your name, email address, selected business type, and the associated consent record until you unsubscribe, ask us to delete your data, or we retire the waitlist — whichever comes first. If you ask us to delete your data, we do so without undue delay and in any event within one month of your request, and we instruct our email provider to remove it permanently from our marketing lists.
Server and connection logs.
The technical data described in section 1 is held by our hosting provider, Vercel, and is available to us only for the retention window set by our hosting plan — currently up to one hour after the request, and in no case longer than 30 days. After that window the data is no longer accessible to us and is deleted by the provider. We do not copy these logs into our own systems and do not use them to build a profile of you. Vercel's processing of this data on our behalf is governed by our data processing agreement with them.
Internal operational records.
Our own systems keep records of service activity tied to a customer account — for example when a content guide was generated, whether a generation succeeded or failed, and changes to a subscription or payment status. These are business records rather than a profile of website visitors: they contain no browsing, device, or location data, and nothing from them is used to track you across our site. We keep them for as long as the customer account is active, and afterwards for as long as Austrian accounting law requires us to retain business records. If you ask us to delete your data, we remove the link between these records and your account.
6. Your rights
Under the GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased; restrict or object to our processing; receive your data in a portable format; and withdraw consent at any time. You can unsubscribe from our emails at any time using the link in every email we send, which also withdraws your consent.
To exercise any of these rights, contact us at support@kindfolkway.com. We will respond within the time limits set by the GDPR (normally one month).
You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
7. Data security
We use appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, but we work with reputable providers and limit access to your data to what is necessary.
8. Children
Our website and waitlist are intended for business owners and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above, and — where the change is significant — take reasonable steps to notify you.
10. Contact
For any question about this policy or your personal data, contact us at support@kindfolkway.com.