Privacy Policy

1. Who we are

CellarBook operates an online platform for discovering and booking wine-tasting experiences at wineries across Cyprus and the wider Mediterranean. For the purposes of data-protection law, CellarBook is the data controller for the personal data described in this policy.

If you have any questions about this policy, you can contact us using the details in the "Contact us" section below.

2. Data we collect

Account data: your name, email address, and password when you create an account.

Booking data: the experiences you book, dates, number of guests, and related preferences.

Review data: the name, email, rating, and comments you provide when leaving a review.

Payment data: payments are processed by our payment provider (Stripe). We do not store full card details on our servers.

Technical and usage data: IP address, device and browser type, pages visited, and similar analytics data collected through cookies and similar technologies.

3. How we use your data

To create and manage your account, process and confirm your bookings, and communicate with you about them.

To publish and moderate reviews, prevent fraud and duplicate submissions, and maintain an honest rating system.

To operate, secure, and improve our website, and to understand how visitors use it.

To comply with our legal obligations and enforce our terms.

4. Legal bases for processing

We process your data on the following legal bases: performance of a contract (to provide the bookings you request), your consent (for example, for non-essential cookies and analytics), our legitimate interests (to secure and improve the service), and compliance with legal obligations.

5. Cookies and analytics

We use cookies and similar technologies to operate the site and, with your consent where required, to measure traffic and usage through services such as Google Tag Manager and Google Analytics.

You can manage or disable cookies through your browser settings. Disabling some cookies may affect how the site works.

6. Sharing your data

We share data with the wineries you book with, so they can prepare and deliver your experience.

We use trusted service providers that process data on our behalf, including our payment provider (Stripe) and analytics providers (Google). These providers may process data outside Cyprus.

We may disclose data where required by law or to protect our rights. We do not sell your personal data.

7. International transfers

Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's standard contractual clauses or an adequacy decision.

8. Data retention

We keep your personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. Booking and review records may be retained for the period required by applicable law.

9. Your rights

Subject to applicable law, you have the right to access, correct, delete, or restrict the processing of your data, to object to processing, and to data portability. Where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or your local supervisory authority.

10. Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure.

11. Children's privacy

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the "Last updated" date revised accordingly.

13. Contact us

If you have questions or wish to exercise your rights, please contact us at the email address below.