Privacy.

What we collect

When you join the waitlist, we collect your email address, the piece you are interested in, the page from which you submitted the request, a broad referrer category such as Direct, Website, Google or Instagram, and the time and status of the request.

When you write to us through the contact form, we collect your name, email address, subject, message, and the time and status of the correspondence.

Cloudflare processes ordinary connection information, including IP address and request metadata, to deliver and protect the site. For abuse prevention, we temporarily use a one-way hash derived from an IP address and time window. Waitlist duplicate checks use a one-way hash of the submitted email for up to 30 days at Cloudflare's edge. These hashes are not used for advertising or profiling.

How we use it

Waitlist information is used to manage access requests and to contact you about invitations, releases, and notes from the studio connected with the list you asked to join. Contact-form information is used to read and answer your enquiry and, where relevant, support an order or business relationship.

We do not sell personal data. We do not run third-party advertising trackers or analytics on this site, and we do not use submission data to build advertising profiles.

Who processes it

The site and its submission endpoints are operated through Cloudflare. Waitlist and contact submissions are sent through an authenticated Google Apps Script endpoint and stored in Google Sheets. Cloudflare and Google therefore process information for us as service providers, and processing may take place outside Singapore subject to their contractual and technical safeguards.

The site's typefaces and media are served from our own domain. Social links open only when you choose them; those services then apply their own privacy terms.

Storage on your device

This site does not set advertising or analytics cookies. If you choose light or dark mode, your browser stores that appearance choice locally so the site can remember it. No waitlist email address or email-derived identifier is stored in your browser.

How long we keep it

Active waitlist requests are kept while the access list is in use and reviewed at least annually. Archived waitlist records are deleted or anonymised within 12 months unless they are needed for an order, a legal obligation, or a dispute.

Contact enquiries are reviewed when closed and deleted within 24 months unless a longer period is reasonably needed for an order, a continuing relationship, a legal obligation, or a dispute. Temporary Cloudflare rate-limit records expire after 10 minutes; waitlist duplicate markers expire after 30 days.

Your choices

You may ask what personal data we hold about you, request a correction, withdraw from the waitlist, or ask us to delete information that we no longer need. Write to [email protected]. We may need to verify that the request relates to you before acting on it.

If you no longer want waitlist messages, reply to any message or write to the same address. Withdrawal does not affect processing already carried out, and some records may need to be retained where the law requires it.

Security and questions

Submission endpoints use HTTPS, bounded inputs, same-origin browser checks, rate controls, bot traps, and an authenticated server-to-server connection. Credentials are kept out of public site files. No internet service is immune from failure, but we limit collection and access so that less is exposed if something goes wrong.

VNCT WLLM is responsible for the personal data described here. Privacy and data-protection questions may be sent to [email protected]. This notice was last updated on 13 August 2026.