Last updated: July 9, 2026
Varae is a small operation. This page explains, plainly, what happens to any information you give us.
If you join the waitlist, we collect the email address you type into the form. Nothing else.
If you place an order, we collect what is needed to send you a bottle: your name, email address, shipping address, and billing address. We also keep a record of what you ordered.
We do not collect or store your card number. Payment is handled entirely by our payment provider, and your full card details never reach us.
Like most websites, our hosting provider may automatically log basic technical information such as IP address, browser type, and pages visited. We do not use this to identify you.
To write to you when there are bottles. To take your order, charge you correctly, post the parcel, and help if something goes wrong with it. To keep the records a business is required to keep.
We are not building a marketing list. We do not send newsletters. We will not sell, rent, share, or trade your information with anyone, and we do not use it for advertising.
If you are in the UK, the EU, or the EEA, we process your information on these bases:
Withdrawing consent does not affect processing that already happened lawfully before you withdrew it.
We operate from the United States, and our service providers may store or process information there. If you are in the UK, EU, or EEA, this means your information may be transferred outside your country to a place with different data protection laws.
Where that happens, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Addendum — to ensure your information stays protected. You may ask us for a copy of those safeguards.
We keep only what we need, for only as long as we need it. Payment details never reach us. Access is limited to the people and services that require it.
No system is perfectly secure. If a data breach occurs that is likely to put your rights at risk, we will notify the relevant supervisory authority within 72 hours where the law requires it, and we will tell you directly and without undue delay. We will say what happened, what information was affected, and what we are doing about it.
Waitlist addresses: until you ask us to remove them, or until the waitlist closes. Unsubscribing deletes the address rather than archiving it.
Order records: as long as the law requires us to keep them for tax and accounting purposes, and no longer than necessary after that.
This site does not set advertising or tracking cookies. If we later add analytics, we will use a privacy-respecting provider, and this page will be updated before we do.
A small number of services process data on our behalf, and only on our behalf. None of them are permitted to use it for their own purposes.
Wherever you live, and regardless of what the law where you live requires, you may:
Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA — including the right to object to processing, the right to restrict it, the right to data portability, and the right not to be discriminated against for exercising those rights. We honour all of them. We do not sell or share personal information, and we do not use it for targeted advertising.
If you are in the UK, EU, or EEA and you think we have handled your information badly, you may complain to your local data protection supervisory authority. We would rather you told us first, but the right is yours.
Orders may only be placed by people aged 18 or over, as our terms explain. Separately, this site is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us their information, write to us and we will delete it.
If this policy changes, the date at the top of this page changes with it. Material changes will be noted here rather than made quietly.
For anything on this page — questions, corrections, deletion requests — write to contact@varaeskin.com. We will respond within 30 days, and usually much sooner.