Privacy Policy — VinoEstate

1. Introduction

VinoEstate (“we”, “us”) respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR).

2. Information We Collect

We collect the following categories of data:

Identity & contact: name, email, phone, shipping & billing address.
Order data: wines purchased, prices, payment confirmation (we never store full card numbers).
Booking data: tasting date, number of guests, dietary notes.
Technical data: IP address, browser type, pages viewed, cookies.

3. How We Use Your Data

We process your data to fulfil orders and bookings, send transactional emails, comply with legal obligations (e.g. age verification, tax records), improve the website, and — only with your consent — send newsletters and marketing.

4. Legal Basis

Our legal bases for processing are: performance of a contract (orders & bookings), legal obligation (accounting, age laws), legitimate interest (site security, fraud prevention), and consent (marketing emails & non-essential cookies).

5. Sharing Your Data

We share data only with: payment processors (Stripe, PayPal), shipping couriers (DHL, UPS), our email provider, and tax authorities where required. We never sell your data.

6. Cookies

We use essential cookies for site functionality and, with your consent, analytics cookies (Google Analytics) to understand how visitors use the site. You can manage preferences through our cookie banner.

7. Data Retention

Order records are kept for 10 years to comply with Italian tax law. Marketing data is kept until you unsubscribe. Booking records are kept for 3 years for service quality.

8. Your Rights

Under GDPR you have the right to: access your data, request correction or deletion, object to processing, request portability, and lodge a complaint with the Italian data protection authority (Garante).

9. Security

We use SSL encryption, secure payment gateways and access controls to protect your data. No method of transmission is 100% secure, but we follow industry best practice.

10. Contact the Data Controller

For any privacy enquiry, write to privacy@vinoestate.com or to: VinoEstate — Marchetti Family Estate, Via delle Vigne 12, 53024 Montalcino, Italy.