Privacy Policy

Who we are

NIGIRI is an early-stage project based in Paris, France, testing whether there is real demand for sushi-shaped children’s bathrobes before anything is manufactured.

For data protection purposes the data controller is NIGIRI, Paris, France. For anything in this policy, reach us through our contact form.

What we collect

When you join the waitlist, we store:

• Your email address.
• The age band of your child, if you choose to give one. It is optional, and we use it for one thing: deciding which sizes to make.
• The language of the page you used (English or French), so we write to you in the right one.
• Where the signup came from, so we can tell ad traffic apart.
• The date and time you signed up, and which version of this policy you agreed to — together, our record of your consent.

We do not collect your name, postal address, payment details, or phone number. We do not build a profile of you.

This site is aimed at adults buying gifts. The optional age band is a range rather than a date of birth, and we never ask for a child’s name or anything else that could identify them.

When you message us

If you use our contact form, we store the email address you give us, your name if you choose to add one, and the message itself — for the single purpose of replying to you.

The legal basis here is our legitimate interest in answering people who contact us. We keep messages only as long as needed to deal with what you raised, and no longer than 24 months.

Cookies and tracking

This site sets no cookies, runs no analytics, and loads no third-party scripts or trackers. Nothing is written to your browser storage.

That is why you are not being asked to accept cookies — there are none to accept.

Why we are allowed to hold it

For the waitlist: your consent, under Article 6(1)(a) of the GDPR. You give it by ticking the box and submitting the form. You can withdraw it at any time, and withdrawing is as easy as giving it.

What we use it for

One thing: to email you about the launch of the first batch, including the 15% waitlist discount. If the project progresses we may send a small number of updates about it.

We will never sell, rent, or share your address with anyone else for their own marketing.

Who else can see it

Your details are stored in a Cloudflare D1 database hosted in Cloudflare’s Western Europe region. Cloudflare hosts the data on our behalf as our processor and does not use it for its own purposes.

We use Brevo (Sendinblue SAS, based in France) to send email on our behalf. Today that means one thing: alerting us when someone uses the contact form, so we can reply. It is also what we will use to send the launch email to the waitlist. Brevo acts as our processor and does not use your details for its own purposes.

How long we keep it

For waitlist signups, until whichever of these comes first:

• You ask us to delete it.
• The first batch ships and you have received the email you signed up for.
• 24 months pass without the product launching — at which point the list is deleted.

Your choices and rights

Under UK and EU data protection law you can ask us to: give you a copy of what we hold about you, correct it, delete it, restrict or object to how we use it, send it to you in a portable format, or withdraw your consent.

Send us a message through our contact form and we will action it free of charge and within one month. Deletion is quick — your address is a single row in a single table.

Complaints

If you are unhappy with how we have handled your information, you can complain to your supervisory authority: the CNIL in France (cnil.fr) or the ICO in the United Kingdom (ico.org.uk).

Changes to this policy

This is version 1.3, last updated 12 August 2026. If we change what we do with your address, we will update this page — and where the change matters, we will email you about it.