HIGHEST · Founding Order

Privacy notice

Pre-launch legal draft. The controller’s complete legal name, registered address, privacy contact and final retention schedule must be added before checkout is enabled.

Version: founding-2026-07-24. This notice covers the founding reservation flow.

Data-minimization decision

The configurator keeps its draft and chosen name locally in your browser until you clear them. Its handoff to the founding page uses the current browser session. The reservation does not save email, recipient or gift-message data in localStorage. Stripe hosts payment collection; HIGHEST never receives your full card number.

1. Data collected

Contact and transaction data: email, checkout name, billing address, payment status and Stripe reservation identifiers.
Order data: rank, collection size, personalization text, identity/routine color preferences, reference format and gift instructions.
Optional marketing consent, recorded separately from the transaction.
Basic server security logs created by the hosting and payment providers.

2. Sensitive information

HIGHEST does not ask for diagnoses, prescriptions, medical records, dosing instructions or treatment details. Do not enter them into engraving, identity or gift fields. A short contents label may still reveal something private; choose a discreet or symbolic identity if that is preferable.

3. Purposes and legal bases

To create, administer, refund and later fulfill a reservation: steps requested before a contract and performance of that contract.
To maintain accounting, fraud-prevention and legal records: legal obligation and legitimate interests.
To send design-journal marketing: consent, which can be withdrawn without affecting the reservation.

4. Processors and transfers

Stripe processes checkout and payment data. Vercel hosts the website and serverless checkout functions. Their infrastructure may process data outside your country under their published data-protection mechanisms. No advertising tracker is intentionally installed in this flow.

5. Retention

Reservation and transaction records are intended to be kept for the campaign, fulfillment, refund and legally required accounting periods. Unneeded configuration notes will be deleted or anonymized after fulfillment. Marketing data is retained until consent is withdrawn or the list is retired. Final periods must be completed before launch.

6. Your choices

Depending on your location, you may request access, correction, deletion, restriction, portability or objection, withdraw marketing consent, and complain to your data-protection authority. Transaction records required by law may need to be retained.

7. Controller and contact

[COMPLETE BEFORE LIVE] Legal controller name, registered address and monitored privacy email.

Back to the Founding Order