Who we are
Grapes is a wine service preparing to open in Lisbon, and you can reach us at [email protected].
What we store
We store the phone number or email you give us, your language, when you consented and to which version of the consent text, and any activation code you came with, plus your name, your place and its neighbourhood if you have a shop or restaurant, and where the sign-up came from, in Cloudflare D1 in the EU. To stop abuse we also keep a scrambled form of your connection’s IP address (a salted hash), which we never turn back into the address and still treat as personal data, and the next use of the form deletes it once it is more than two minutes old. Cloudflare hosts the site and the database and runs Turnstile, the check that you are a person, which receives your IP address; Cloudflare also uses what Turnstile collects to improve its bot detection, as its Turnstile privacy addendum explains.
Why
We use your contact only to message you when Grapes opens in Lisbon, because you ticked the box asking us to, and, if you wrote to us about your shop or restaurant, to reply and arrange a visit. We keep the IP hash and run the Turnstile check because we have a legitimate interest in keeping the form free of abuse.
For how long
We keep your details until 12 months after Grapes opens in Lisbon and then delete them, or sooner if you ask us to. The IP hash is the exception: the next use of the form deletes it once it is more than two minutes old.
Your rights
You can ask us at any time to show you, correct or delete what we keep about you, to send you a copy of it or to stop using it, by writing to [email protected]. You can withdraw your consent the same way, and that does not undo what we did before you withdrew it. We answer within one month, and if you think we handled your data wrongly, you can complain to a data protection authority, in Portugal the CNPD.
Contact
For anything about your data, write to [email protected].