Privacy notice

This notice explains how personal data are processed when you visit this teaser website and when you join the launch waitlist. The website has no accounts, analytics, advertising trackers or social-media embeds.

1. Controller

2. Hosting and server log data

When this website is requested, the hosting infrastructure may process technical data needed to deliver and protect the service. This can include IP address, date and time, requested resource, referring page, browser and operating-system information, response status and data volume.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and technically efficient delivery of the website, detection of misuse and troubleshooting. Log data are retained only for the period necessary for these purposes and then deleted or anonymised, unless a security incident requires longer retention.

3. Launch waitlist

If you join the waitlist, we process your email address, the fact and wording of your consent, the date and time you signed up, your browser language, the country derived from your connection, and a referral code if you arrived through one.

We use these data only to email you once when Fion launches, and to understand how many people are waiting and from where. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw it at any time by emailing fion.yuan@fionwithlove.com or by using the unsubscribe link in our email; this does not affect processing carried out before withdrawal.

We keep your waitlist data only as long as needed to send the launch email, or until you withdraw consent.

4. Recipients and international transfers

The website and the waitlist database are hosted by Cloudflare, Inc., which acts as our processor under a data processing agreement. Technical data may also be processed by other infrastructure providers acting under appropriate contractual safeguards. Any transfer outside the European Economic Area is subject to the safeguards required by applicable data-protection law, such as the EU-US Data Privacy Framework or standard contractual clauses.

5. Cookies and similar technologies

This website does not set analytics, advertising or preference cookies and does not use browser storage. Our hosting provider may set a strictly necessary security cookie to protect the site against abuse. If optional tracking or third-party embeds are added later, they will remain disabled until any legally required consent has been obtained.

6. Fonts and media

Fonts and images are served from this website itself. No visitor data are sent to an external font or image provider to display this page.

7. Your rights

Subject to the statutory requirements, you may request access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a competent data-protection supervisory authority. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation under Article 21 GDPR.

8. Automated decision-making

This website does not make decisions about visitors and does not perform profiling. The app shown is a preview of a future cosmetic-care service; no scan or health-related data are collected on this website.

9. Changes

This notice will be updated when the hosting arrangement, app availability or website functionality changes.

Last updated: 11 November 2026.