SUN & WIND RITUALS
DOCUMENT // LEGAL
PRIVACY POLICY
LAST UPDATED // 2026-04-12
01DATA CONTROLLER
SUN & WIND RITUALS, based in Vilnius, Lithuania (EU). For inquiries regarding your personal data, contact us via the contact form.
02DATA WE COLLECT
- Contact submissions — name, email, inquiry type, force alignment, message
- Analytics — anonymous page views via Vercel Analytics (no cookies)
- Cookies — essential session cookies and optional analytics cookies (consent-based)
03LEGAL BASIS
We process personal data under GDPR Article 6(1)(a) — consent (contact form) and Article 6(1)(f) — legitimate interest (site analytics and security).
04DATA RETENTION
Contact submissions are stored until manually deleted by the site administrator. Analytics data is retained per Vercel’s standard retention policy (typically 30 days).
05THIRD PARTIES
- Supabase — database hosting (EU region)
- Vercel — site hosting and analytics
- Resend — transactional email delivery
- Upstash — rate limiting (Redis)
- Sentry — error monitoring
We do not sell, trade, or share personal data with third parties for marketing purposes.
06YOUR RIGHTS
Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact us at info@sunwindrituals.online
07SECURITY
We implement industry-standard security measures including HTTPS/TLS, CSP headers, HSTS, Row Level Security (RLS), and rate limiting to protect your data.
08CHANGES
We may update this policy periodically. Changes will be reflected on this page with an updated revision date.
© 2026SUN & WIND RITUALS · VILNIUS · LT · EU