Privacy Policy
Dory Home pre-campaign website (doryhome.com)
Effective date / Last updated: August 26, 2026
This Privacy Policy explains how we collect and use your personal data when you visit the Dory Home pre-campaign website at doryhome.com (the "Landing Site") and when you join our waitlist. It is provided under Articles 13 and 14 of the GDPR (Regulation (EU) 2016/679).
This policy covers the Landing Site only. The store at shop.doryhome.com is covered by a separate Store Privacy Policy.
1. Who we are (data controller)
The data controller is Thomas David Short, a sole trader trading under the brand "Dory Home".
- VAT number: IT01283490579
- Business activity code (ATECO): 74.11.10
- Registered business address: Via Colonnetta 6, Montopoli di Sabina (RI), 02034, Italy
- Contact email: hello@doryhome.com
We have not appointed a Data Protection Officer, as we are not required to do so. For any privacy question, contact hello@doryhome.com.
2. Hosting and infrastructure
The Landing Site runs on Google Firebase: Firebase Hosting (project dory-42), Cloud Firestore (region europe-west8, in the European Union), Cloud Functions, and Firebase App Check with Google reCAPTCHA Enterprise for anti-abuse protection. Google acts as our infrastructure provider (processor) for these services.
3. Personal data we collect
Data you give us (waitlist sign-up):
- email address;
- the fact that you accepted these terms (an "accepted_terms" flag).
Data generated or collected automatically when you sign up or browse:
- a SHA-256 hash of your email address, used as the document identifier;
- creation timestamp;
- browser user-agent string;
- IP address (read from the x-forwarded-for header);
Cookies and similar identifiers:
- analytics identifiers set by Google Analytics 4 and Microsoft Clarity;
For details of each cookie, its purpose and duration, see our Cookie Policy.
4. Why we use your data and our legal bases
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Register and manage your waitlist sign-up; send welcome and service messages | email, accepted_terms, hashed email, timestamp | Art. 6(1)(b) and Art. 6(1)(f) |
| Send marketing emails | Art. 6(1)(a) consent | |
| Protect the Landing Site against fraud, bots and abuse | IP address, user-agent, App Check / reCAPTCHA signals | Art. 6(1)(f) |
| Measure how the Landing Site is used | analytics identifiers, IP, user-agent | Art. 6(1)(a) consent |
| Keep a record of your consent and sign-up | accepted_terms, timestamp, IP, user-agent | Art. 6(1)(c) and Art. 6(1)(f) |
| Comply with legal obligations | as relevant | Art. 6(1)(c) |
Our legitimate-interest assessments balance our interests against your rights. You can object to processing based on Art. 6(1)(f) (see section 9).
5. Cookies and analytics consent
Non-essential cookies and trackers are set only after you give consent through our cookie banner. Our consent defaults are: ad_storage, ad_personalization and ad_user_data are always denied, because we do not use advertising cookies; and analytics_storage is granted only after you give explicit consent to Analytics cookies.
6. Who receives your data (recipients and processors)
We share personal data with Google (Firebase, reCAPTCHA Enterprise, Google Analytics 4), Microsoft (Microsoft Clarity) and Resend. They act either as processors under Article 28 GDPR or, for some services, as independent controllers for their own purposes.
We may also disclose data where required to comply with law, to enforce our terms, or to protect rights, safety or property.
7. International transfers
Some providers are based in, or transfer data to, the United States. Where we transfer personal data outside the European Economic Area, we rely on the EU-US Data Privacy Framework where the recipient is certified, and / or Standard Contractual Clauses under Article 46 GDPR together with supplementary measures.
8. How long we keep your data
Waitlist data is kept for as long as necessary to manage the waitlist and the pre-launch relationship. We delete or anonymise it when it is no longer needed, or earlier if you ask us to, unless we must keep it for a legal obligation or legal claim. Consent and sign-up records are kept for the duration of the relationship plus the applicable limitation period.
9. Your rights
Under the GDPR you have the right to access your data, have it rectified or erased, restrict or object to processing, data portability, and withdraw consent at any time. To exercise any right, email hello@doryhome.com. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali or with the supervisory authority in your country of residence.
10. Automated decision-making
We do not carry out automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR.
11. Children
The Services are not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact hello@doryhome.com and we will delete it.
12. Changes to this Privacy Policy
We may update this policy from time to time. The Effective date / Last updated line above shows when it last changed. Material changes will be communicated where required by law.
13. Contact
Thomas David Short, trading as Dory Home, Via Colonnetta 6, Montopoli di Sabina (RI), 02034, Italy. Email: hello@doryhome.com.
Related policies
- Cookie Policy
- Terms and Conditions
- Store Privacy Policy (shop.doryhome.com)