Confidentiality policy

1. Purpose and our commitment

1.1 This Confidentiality Policy describes how we collect, use, store, and protect personal information that you provide through this website.

1.2 We process personal data in accordance with the Law of Georgia on Personal Data Protection and other applicable legislation.

1.3 We are committed to processing your personal data lawfully, fairly, and transparently.

1.4 By using this website and submitting your information to us, you consent to the collection and use of your personal data as described in this Policy.

1.5 We collect only the personal data reasonably necessary to provide our services and operate this website.

1.6 We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration.

1.7 This Policy applies to all visitors and users of this website.

2. Personal data we collect

2.1 We collect personal data when you:

2.1.1 Place a booking or order (name, phone number, email address, and, where applicable, a company or business name and a delivery address, along with your booking or order details);

2.1.2 Use a company access code for a booking or a wine order, so that the contact details saved against that code can be filled in automatically;

2.1.3 Contact us directly by phone, email, or the contact form on this website;

2.1.4 Provide payment details, if and when online payment is offered for your booking or order (see Section 11).

2.2 We do not require you to create a password-protected account to use this website, and we do not collect a username or password.

2.3 Where your company uses an access code, we store the contact details saved against that code (such as contact person's name, phone number, email address, and address) so that they can be filled in automatically when a booking or order is placed. Your browser may also keep a copy of those details for a limited period so that the code does not have to be entered again.

2.4 We do not operate comment sections, forums, contests, surveys, or job-application forms on this website, and do not collect personal data through such means.

3. Non-personal information

3.1 We may automatically collect certain non-personal, technical information (e.g. IP address, browser type, device type, pages visited) through standard web analytics tools (such as Google Analytics or similar services).

3.2 This information is used in aggregate form to understand website usage and improve content and functionality; it is not used to identify you personally.

4. How we use your data

4.1 To process and respond to your booking or order, including confirmation, changes, or cancellation;

4.2 To respond to inquiries and provide customer service;

4.3 To improve our services, this website, and the visitor experience;

4.4 To comply with legal obligations, including tax and accounting requirements;

4.5 To detect, investigate, and prevent fraudulent or unlawful activity;

4.6 Where you have given consent, to send information about our products, services, or offers (see Section 10);

4.7 To process payment, if and when online payment is offered for your booking or order.

5. Sources of data

5.1 We collect personal data directly from you.

5.2 We do not, as a rule, obtain your data from third parties, except where you booked through a third-party platform or intermediary that shared your booking details with us to fulfil your request.

6. Cookies and analytics

6.1 This website may use cookies and similar technologies for core functionality and anonymized analytics.

6.2 You can control or disable cookies via your browser settings; disabling them may affect website functionality.

6.3 Where required by law, we will request your consent before placing non-essential cookies.

7. Sharing your data

We do not sell your personal data. We may share it only:

7.1 Where required by law, regulation, or a valid request from a competent authority or law enforcement body;

7.2 With service providers processing data on our behalf (e.g. hosting, email, analytics), under confidentiality obligations and only to the extent necessary;

7.3 In connection with a merger, acquisition, restructuring, or sale of all or part of our business, subject to the same protections described in this Policy.

8. Children's privacy

This website is not directed at, and is not intended for use by, individuals under 18. We do not knowingly collect personal data from minors, and will delete any such data if we become aware of it.

9. Data retention

9.1 We retain your data for as long as necessary for the purposes in this Policy, including the duration of our relationship with you.

9.2 We may retain certain data for up to ten (10) years thereafter where necessary for legal, tax, or accounting obligations, or to establish or defend legal claims.

9.3 Once these purposes no longer apply, we delete or anonymize your data.

10. Marketing communications

10.1 We will only send marketing communications if you have given consent.

10.2 You may withdraw consent at any time via our Contact page or the unsubscribe mechanism in the communication itself.

11. Payment information

11.1 If online payment is offered for your booking or order and you choose to use it, you are redirected to our banking partner's secure payment page, which is operated by that provider under its own security standards and privacy terms.

11.2 Your payment card details are entered directly on that page and are not collected by, transmitted through, or stored by this website.

11.3 We may keep a record of the payment itself — such as its amount, date, status, and a transaction reference — in order to link the payment to your booking or order and to meet our accounting obligations.

11.4 Where online payment is not offered for your booking or order, or you do not use it, payment is arranged directly between you and us outside this website.

12. Your rights

Under the Law of Georgia on Personal Data Protection, you have the right to: be informed of processing; access your data; request correction; request deletion (subject to our legal retention obligations); object to processing; request restriction of processing; and withdraw consent at any time. Contact us via our Contact page to exercise these rights.

13. Changes to this policy

We may update this Policy from time to time; the current version is always available on this website.

14. Contact us

For questions about this Policy or our processing of your data, please contact us using the details on our Contact page.