Privacy Policy

1. Introduction

WineKite is operated by Enowise P.C. (ENOWISE Ι.Κ.Ε., VAT 802092030, D' Athens Tax Office, Paraschou 24, 11473 Athens, Greece) ("we", "us", or "our"), the data controller responsible for your personal data. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Greek data protection law. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the WineKite platform ("the Platform").

2. Information We Collect

We may collect the following types of information:

Personal Information

• Name and email address when you create an account
• Profile information you choose to provide
• Booking request details (dates, group size, preferences)
• Wine preferences, saved wines, tasting logbook entries, and followed wineries
• Communications with wineries through the Platform

Automatically Collected Information

• Device information (browser type, operating system)
• Diagnostic and error reports (e.g., crash logs) that help us keep the Platform reliable
• IP address and approximate location
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process and facilitate booking requests with wineries
• Personalize your experience (e.g., winery recommendations, saved preferences)
• Send you service-related notifications and updates
• Respond to your inquiries and provide customer support
• Monitor and improve the reliability, security, and performance of the Platform
• Comply with legal obligations

4. Information Sharing

We may share your information in the following circumstances:

• With wineries: When you submit a booking request, the relevant winery receives the information necessary to process your request
• Service providers: We rely on third-party providers who process data on our behalf, including Clerk (account authentication and management), Google Maps (interactive maps and address/location lookup), Rollbar (error monitoring), and Shlink (link shortening), alongside our EU-based hosting provider
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

5. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use the Platform. You can control cookie settings through your browser. Note that disabling cookies may affect the functionality of certain features.

6. Data Security

Your account and platform data are hosted on servers located within the European Union. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States — for example, Clerk (authentication) and Google (maps and geocoding). Where your personal data is transferred outside the EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, our providers' certifications under the EU–US Data Privacy Framework.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements.

9. Your Rights

Under applicable data protection laws (including the GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@winekite.com.

10. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at info@winekite.com.