Privacy Policy

1. What data we collect

From travelers / visitors: full name, email, phone number, booking details (date, number of people). A phone number is required to complete a booking, so that the Provider can contact you on the day of the experience.

From Providers (Hosts): full name, email, phone, business/estate details, and the photos they upload.

We never store passwords in readable form. Sign-in is handled through an encrypted authentication system.

2. How we use the data

• To process and manage bookings
• To send booking confirmation emails, booking/cancellation notifications to the Provider concerned, and updates about your account
• To show your name and comment in reviews, if you choose to leave a review
• To improve how the Platform works

3. Legal basis for processing

The processing of your data is based on the performance of the contract for services (the booking), on your consent (where required, e.g. creating an account) and on the Platform’s legitimate interest in operating securely, in accordance with the General Data Protection Regulation (GDPR).

4. Who we share data with

The details of a booking (name, email, phone, number of people) are shared with the Provider of the experience, so that they can prepare for it and get in touch with you about it.

We also use third-party infrastructure providers, who process data on our behalf:

• Supabase: database hosting and authentication
• Resend: sending confirmation and notification emails
• Stripe: payment processing (once online payment is enabled)

We do not sell personal data to third parties for advertising purposes.

5. Local storage

Your list of favorite experiences is stored locally on your device (browser local storage) and is sent to our servers only when you sign in to an account.

6. Retention period

We keep booking details for as long as necessary for accounting, tax and operational reasons. Account details are kept until you ask for them to be deleted.

7. Your rights

Under the GDPR, you have the right to:

• Access the data we hold about you
• Correct inaccurate details (through “My profile”)
• Have your data deleted (the “right to be forgotten”)
• Data portability
• Object to processing, under certain conditions

To exercise these rights, you can contact us at info@agro-vino.com.

8. Data security

We apply technical security measures, such as password encryption and access control at database level (Row Level Security), so that each user can access only their own data.

9. Changes to this Policy

This Policy may be updated from time to time. The date of the last update is shown at the top of the page.