Skip to content

Last updated 13 August 2026

Privacy, in plain language.

What this site can collect, why it is used and where the current product still needs a production decision.

Who is responsible

WineExperts is responsible for personal data submitted through this website. Privacy questions can be sent to hello@winesexpert.com. A legal-entity name and postal contact must be added here before public launch.

Information the current site handles

  • Newsletter sign-ups: email address, explicit marketing choice, sign-up time, page and form context, and optional campaign or referral context.
  • Request context: country code supplied by the host, IP address for rate limiting and consent evidence, and user-agent information available to the server.
  • Consent choice: the browser stores one local value named we-consent, containing granted or denied and the time of the choice.
  • Optional analytics: approval can update a configured tag manager. The consent banner does not create a tag manager or tracking queue when none is installed.

Why it is used

Newsletter and lead-magnet email is processed on consent. Essential security, request validation and rate limiting are processed to protect the service and prevent abuse. Optional analytics or advertising storage remains denied unless a visitor takes a positive approval action.

Where information goes

When newsletter credentials are configured, sign-up details are sent to Beehiiv to manage the subscription and any double opt-in flow. The hosting provider will process ordinary request logs when the site is deployed. WineExperts does not sell personal data. No other production processor should be inferred from a development integration that is not enabled.

Retention and the current launch boundary

The present application does not have its production database connected, and a final production retention schedule has not been approved. Newsletter information remains with the mailing provider until a subscriber unsubscribes or it is deleted under the provider account. A defined retention schedule, legal-entity details and final processor list are required before public launch; this notice must be updated at the same time.

Your choices and rights

You can decline optional storage and still use the site. Clear the we-consent value in browser storage to make the banner ask again. Every marketing email must include an unsubscribe route. Depending on the circumstances, UK data-protection law can give you rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent.

If a privacy concern is not resolved, you can complain to the UK Information Commissioner’s Office. The ICO’s current storage and access guidance explains the consent rules used here.