Who we are
One rat, four sauces, a very small office.
Super Rat Spices (Mallorca, Spain) runs super-rat-spices.com and is the data controller for everything on this page. We make small-batch hot sauce and chilli salt in Mallorca, in the EU. For anything about your data, email info@super-rat-spices.com.
The waitlist
One form, one email address, one promise.
When you join the pack, you give us your email address. Alongside it we record when you signed up and that you said yes to hearing from us. That's the whole record: no name, no IP address, no tracking.
Why: to send you one launch announcement when the sauces go on sale, plus the occasional update about new products or merch. Nothing else.
Legal basis:your consent (GDPR article 6(1)(a)). You can withdraw it whenever you like, and that doesn't affect anything done before you did.
Where: as a customer record in our Shopify store. Shopify International Limited, Ireland, processes it on our instructions and for nothing of its own.
How long:until you unsubscribe, or 24 months after the sauce launch — whichever comes first. Then it's deleted.
Unsubscribe: reply to any email we send you, or write to info@super-rat-spices.com. We never sell or rent the list.
Merch orders
Shopify takes the money. Printify makes the thing.
Checkout, payment and your order records are handled by Shopify — for EU customers that's Shopify International Limited, Ireland — on super-rat-spices.myshopify.com. We see the order details we need to run the shop (what you bought, where it's going, how to reach you) inside our Shopify admin.
Printing and shipping is done by Printify, Inc. and the print providers it works with. To make and post your order they receive your name, shipping address, email address and what you ordered — nothing more.
Payments run through Shopify Payments or PayPal. Your card details go straight to them; we never see full card numbers.
Shopify's own handling of your data is described in Shopify's privacy policy.
Hosting & logs
Every website has a landlord.
The site is hosted by Vercel Inc. Like every host, Vercel keeps server logs — including your IP address — for a short time, for security and to keep the site running. Vercel also tells our server your approximate country so checkout can pre-select it. We don't store the IP.
Browser storage
One item in your browser's storage (your bag ID), no cookies, no tracking. The whole story is in the cookie policy.
Who we share with
The short list. Nobody buys it.
- Vercel Inc. — hosting and server logs.
- Shopify (Shopify International Limited, Ireland, for EU customers) — the waitlist, checkout, payments and order records.
- Printify, Inc. and its print providers — printing and shipping merch orders.
- Payment providers — Shopify Payments and PayPal, for taking payment.
Each of them gets only what it needs to do its job. Vercel and Printify are based in the United States, so some of your data is processed outside the EU; that happens under the safeguards those providers commit to in their data-processing terms. We never sell or rent your data, and we don't share it for advertising.
How long we keep things
- Waitlist: until you unsubscribe or 24 months after the sauce launch, whichever is first.
- Order records: as long as Spanish tax and consumer law requires, then deleted.
- Server logs: kept briefly by Vercel for security and operations, then gone.
Your rights
It's your data. You hold the bottle.
Under the GDPR (articles 15 to 22) you can ask us to:
- Access — see what we hold about you.
- Rectify — correct it.
- Erase — delete it.
- Restrict — pause what we do with it.
- Port — get a copy you can take elsewhere.
- Object — to any use you're not happy with.
- Withdraw consent — at any time, for the waitlist.
Email info@super-rat-spices.comand we'll sort it — no forms, no hoops. If you think we've got something wrong, you can also complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), at aepd.es.
Children
This site and the waitlist aren't directed at anyone under 16. If you're a parent or guardian and think a child has given us their email, tell us and we'll delete it.
Changes & contact
If we change how we handle your data, this page changes first and the date below moves. Anything that needs fresh consent gets asked for properly. Questions: info@super-rat-spices.com.