Legal
Privacy Policy
Last updated: August 2026
1. Data controller
The data controller for personal data collected through Bottiglia is Leisure Media Group, Copenhagen, Denmark. You can contact us at info@leisuretalk.dk.
2. What data we collect
- Account data — your name and email address when you register.
- Order data — wines selected, quantities, shipping address, and order status when you place an order.
- Contact data — messages you send via the contact form.
- Browsing behaviour — pages visited and wines viewed. We log this in aggregate on our own servers, and, if you accept analytics cookies, also in Google Analytics.
- Sommelier conversations — the questions you ask our AI sommelier, so it can answer them.
- Essential cookies — a session cookie for authentication,
age_verifiedto remember your age confirmation, andcookie_consentto remember your cookie choice. These are set without consent because the site cannot work without them. - Analytics cookies —
_gaand_ga_<id>, set by Google Analytics to recognise returning visitors. These are set only if you accept them, and never before. We use no advertising cookies at all.
There are two ways to pay, and they handle your data differently. Buying a single wine from its own page is a card payment processed through the Bottiglia platform using Stripe Connect and passed on to the producer, less our platform fee — you enter your card details directly with Stripe and we never see or store them. Ordering through the cart is invoiced instead: the producer sends you their bank details and you pay them directly, so no card data is involved at all.
3. Legal basis for processing
We process your personal data on the following legal bases under GDPR:
- Contract — to process your orders and deliver the service you have requested.
- Consent — for analytics cookies. Nothing is measured until you accept, and you can withdraw your consent at any time in section 9 below.
- Legitimate interest — to improve platform functionality, detect fraud, and communicate about your orders.
- Legal obligation — where applicable law requires us to retain or disclose data.
4. How we use your data
- To process and forward your orders to producers.
- To send transactional emails (order confirmations, account welcome).
- To respond to support and contact enquiries.
- To improve the platform based on aggregated usage data.
- To answer your questions to the AI sommelier.
- To detect and prevent fraud or misuse.
We do not sell your data. We do not use it for advertising or profiling — the advertising and personalisation signals in Google Analytics are switched off.
5. Third-party services
Bottiglia works with a small number of trusted third-party providers. Each processes data only as necessary to deliver the service:
Supabase
Database and authentication. Your account and order data is stored in a Supabase-hosted PostgreSQL database in the EU (Ireland region). Privacy policy ↗
Vercel
Hosting and infrastructure. The Bottiglia application runs on Vercel's edge network. Privacy policy ↗
Resend
Transactional email delivery. Order confirmations and account emails are sent via Resend. Privacy policy ↗
Stripe
Payment processing for card payments made from a wine's own page. Card details are entered directly with Stripe and never reach our servers. We send Stripe the order details needed to take the payment and pay out the producer: the wine, quantity, your email and, where relevant, your shipping address. Cart orders are invoiced by the producer instead and do not involve Stripe. Privacy policy ↗
Anthropic
AI sommelier. The questions you type to the sommelier are sent to Anthropic's Claude API together with the wine's details in order to generate an answer. Do not enter personal information into the sommelier chat. Privacy policy ↗
Google Analytics
Website analytics, and only if you accept analytics cookies. Google receives your IP address, the pages you view and a randomly generated identifier. We have advertising and personalisation signals switched off, so this data is not used to target ads. Privacy policy ↗
6. Data retention
We retain your account data for as long as your account is active. Order data is retained for 5 years for accounting and legal compliance purposes. If you request deletion of your account, we will delete your personal data within 30 days, except where retention is required by law.
7. Your rights under GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data (subject to legal retention obligations).
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Complaint — lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.
To exercise any of these rights, email info@leisuretalk.dk. We will respond within 30 days.
8. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email. The date at the top of this page reflects the most recent update.
9. Your cookie choice
You can change or withdraw your consent to analytics cookies at any time, with no effect on your account or your ability to order. Withdrawing takes effect immediately and stops any further measurement.
10. Contact
For privacy-related questions or requests, email info@leisuretalk.dk. We aim to respond within 5 business days.