Privacy

Privacy Policy

Effective May 29, 2026

SÜR (“we,” “us,” or “our”) respects your privacy. This policy explains what we collect, why we collect it, and the rights you have over your information when you use surhair.com.

What we collect

We only collect information you choose to share:

  • Waitlist sign-ups: your email address, and optionally your name, so we can notify you when a product becomes available.
  • Contact form submissions: your name, email address, and the message you write to us.
  • Cart contents: stored only in your browser (localStorage). We do not see your cart unless you submit it through one of the forms above. While SÜR is sold out, no orders or payment information are processed.

We do not run analytics, advertising pixels, or tracking cookies. Our hosting provider, Cloudflare, may log standard request data (IP address, user agent, timestamps) for security and performance purposes; that data is governed by Cloudflare’s own privacy policy.

How we use it

  • To notify you about launches, restocks, and the brand.
  • To respond to inquiries you send through the contact form.
  • To prevent abuse of our forms and protect the site.

We do not sell or rent your information, and we do not share it with third parties for their own marketing.

Where it lives

Waitlist entries are stored in Cloudflare Workers KV. Contact form messages are sent through Resend, our transactional email provider, and delivered to a SÜR mailbox. Both vendors process data on our behalf under their own security and privacy commitments.

How long we keep it

We keep waitlist emails until you ask us to remove you or until we conclude the program. Contact form submissions are kept for up to twenty-four months for record-keeping, then deleted unless we’re still actively corresponding with you.

Your rights

You can ask us to access, correct, delete, or export your information at any time by emailing [email protected]. We’ll respond within a reasonable period, and at most within forty-five days as required by California law (CCPA/CPRA). Residents of the EU and UK have equivalent rights under GDPR and UK GDPR; the same address reaches us.

To unsubscribe from any future marketing email, use the unsubscribe link included in the message or write to us directly.

Children

SÜR is intended for adults. We do not knowingly collect personal information from anyone under sixteen.

Changes

We may update this policy as the business evolves. Material changes will be posted here with a new effective date, and where appropriate we’ll notify the waitlist by email before they take effect.

Contact

Questions about this policy or your data: [email protected]. For anything else, [email protected].