Privacy Policy
1. Who we are
This Privacy Policy applies to the Adopterra platform (adopterra.com) and the Čaklā Bite Honey farm page (adopterra.com/caklabite).
The data controller is:
Adopterra SIALatvia
Email: [email protected]
For questions about your personal data, contact us at [email protected].
2. What data we collect and why
We collect personal data only when you actively provide it to us.
2.1 Waitlist and interest forms
When you submit a form on our site (waitlist, corporate inquiry, or farmer interest), we collect:
- Name — to address you personally
- Email address — to contact you when adoption opens or to respond to your inquiry
- Company name (corporate form only) — to process your inquiry
- Product description (farmer form only) — to assess your farm for listing
Legal basis: Article 6(1)(a) GDPR — your consent, given when you submit the form.
2.2 Account and subscription
When you create an account and adopt a hive, we collect your email address, your chosen display name (what appears on your jar and certificate), and your shipping address. We do not store payment card details — these are handled by Stripe.
Legal basis: Article 6(1)(b) GDPR — performance of a contract.
2.3 Technical data
Our hosting provider (Vercel) automatically logs basic technical data (IP address, browser type, pages visited) for security and performance purposes. We do not use this data to identify or profile individuals.
Legal basis: Article 6(1)(f) GDPR — legitimate interests (securing and operating the platform).
3. How long we keep your data
| Data | Retention period |
|---|---|
| Waitlist submissions | Until Season 2026 closes, or until you request deletion |
| Adoption purchase records | 7 years (EU accounting and tax law requirement) |
| Email correspondence | 3 years from last contact |
| Server logs | 30 days |
4. Who we share your data with
We do not sell your data. We share it only with processors who help us operate the platform:
- Vercel, Inc. (USA) — website hosting. Data is processed under Vercel's Standard Contractual Clauses. Vercel Privacy Policy
- Supabase, Inc. (EU region) — database hosting. Supabase Privacy Policy
- Stripe, Inc. (USA) — payment processing. Stripe Privacy Policy
- Resend, Inc. (USA) — transactional email delivery. Resend Privacy Policy
- Cloudflare, Inc. (USA) — video streaming and object storage. Cloudflare Privacy Policy
All processors are bound by data processing agreements and are required to protect your data in accordance with GDPR.
5. International transfers
Vercel, Stripe, Resend, and Cloudflare are US-based companies. Data transfers to them are covered by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring adequate protection. Supabase data is stored in the EU (eu-west-1 region).
6. Your rights under GDPR
As a resident of the European Economic Area, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — ask us to delete your data ("right to be forgotten")
- Right to restriction — ask us to limit how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — withdraw consent at any time (this does not affect lawfulness of processing before withdrawal)
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
7. Cookies
We use only essential cookies necessary for the site to function. No tracking or advertising cookies are used. See our Cookie Policy for details.
8. Changes to this policy
We may update this policy as the platform grows. We will update the "Last updated" date at the top. For significant changes that affect your rights, we will notify you by email if we hold your address.