ARLY has not opened yet: for now the site introduces the brand and collects a waiting list. This page sets out exactly what data reaches us, why, and what you can do about it.
Who is responsible for your data
ARLY publishes and runs www.arly.vn, and is the controller for the processing described on this page.
One address for any question or request: hello@arly.vn. A person answers, from that same address.
What we collect, and why
Browsing the site needs no account. Vercel Web Analytics only provides us with anonymous, aggregated visit statistics, as explained below.
- Waiting list: your email address, the site language, the perfume you choose if you choose one, the referral code assigned to you, the code of whoever referred you, and the date you signed up. Legal basis: your consent, given by submitting the form.
- Welcome email: it uses the recorded language and fragrance and includes a personal unsubscribe link. The site keeps a random unsubscribe token and delivery status to avoid duplicate messages.
- Contact: your email, optional name, topic, any selected fragrance and message are sent to our mailbox so we can reply. An automatic confirmation is sent to the address provided, with the selected topic and fragrance, without repeating your message text. This form does not subscribe you to the waiting list or save your message in the website database.
- Form protection: your IP address is held in memory for a few minutes to cap how often the form can be submitted and to block automated scripts. It is not written to any database. Legal basis: our legitimate interest in protecting the service.
- Technical logs: our host keeps access logs, which include the IP address, for security and diagnostics.
- Analytics: anonymous statistics through Vercel Web Analytics, and Google Analytics only if you accept it, as explained below.
Analytics
Vercel Web Analytics anonymously measures viewed pages, traffic sources, approximate location, and browser characteristics. It uses no third-party cookies, associates visits with no person or IP address, and the anonymized session expires after 24 hours.
We use Google Analytics to know how many people visit the site and which pages interest them. Nothing is stored on your device until you click "Accept" in the banner.
Before you agree, the Google Analytics tag is not loaded and no analytics request is sent to it. If you accept, Google Analytics sets cookies named _ga and _ga_* to tell visits apart.
No data is used for advertising: Google’s advertising signals stay denied permanently, and no ad network is present on the site.
You can change your choice using the “Cookies” link in the footer. If you withdraw consent, analytics cookies are removed.
What stays on your device
Your browser may keep the following information on your device:
- your answer to the cookie banner, so you are not asked again on every page;
- an incoming referral code, stored locally for a possible signup; opening the link also sends its URL to our server, where it may appear in technical access logs;
- after signing up, your email address and a temporary token may remain in this browser tab until it is closed or site data is cleared; the token expires after two hours and only lets you add an initial perfume choice, without verifying ownership of the address;
- an old waiting-list code if you used a previous version of the site. Current forms no longer read it or use it to retrieve a position.
You can wipe them whenever you like by clearing site data in your browser.
The scent advisor
The questionnaire and the recommendation are worked out entirely inside your browser. Your answers about the smells you like are sent to no server and stored nowhere.
Your email address only reaches us if, after seeing the result, you choose to join the waiting list for the recommended perfume.
Who else has access
We neither sell nor rent your data, and we pass it to nobody for commercial purposes. The following technical providers process it on our behalf:
- Vercel, which hosts the site, keeps its access logs, and provides anonymous Web Analytics statistics;
- Supabase, where the waiting list is stored;
- Google Workspace, which delivers and stores contact messages and automated emails sent by ARLY, including welcome emails when this feature is enabled.
- Google Analytics, only if you accepted analytics.
These providers may process data outside Vietnam and the European Union, under the safeguards set out in their contractual terms.
How long we keep it
Waiting-list signups are kept until the shop launches, and then until you ask for yours to be deleted.
The unsubscribe link opens a confirmation page. After confirmation, the site deletes your signup, its token and welcome email delivery state. Copies of emails already sent may remain in mailboxes.
Contact messages are received in our mailbox to handle your request and follow-up. You can ask us to delete them by contacting us.
Anti-abuse counters expire within minutes. The anonymized Vercel Web Analytics session expires after 24 hours. Google Analytics data follows the retention period configured on our property.
You can ask for your signup to be deleted at any time, with no reason needed.
Your rights
You can ask for access to the data we hold about you, for it to be corrected or deleted, for a machine-readable copy, for its processing to be restricted, or you can object to a processing.
You can also withdraw your consent whenever you want; that does not undo what was done before you withdrew it.
One address for all of it: hello@arly.vn. We answer within a month.
Complaints and updates
If our answer does not satisfy you, you can complain to a data protection authority — in France, the CNIL (cnil.fr).
This page will change, not least when the shop opens. The date it last changed is at the top.