1. Information we collect
- Sign-up (required): email, name, phone number and password (stored as a one-way hash)
- Barrel pick inquiries: customer type, company or club name, spirits of interest, delivery method, quantity and budget, your message and our conversation
- Collected automatically: cookies for keeping you logged in and remembering your language, and your IP address for abuse prevention (kept in server memory for up to 24 hours)
2. How we use it
- Identifying you, logging you in and managing your account
- Consulting on barrel pick inquiries and updating you on samples and barrel progress
- Sending service emails such as confirmations, replies, progress updates and login codes
- Blocking fraudulent sign-ups and login attempts
3. Retention
When you delete your account, your account, inquiries, conversations and barrel records are deleted immediately. Copies in our disaster-recovery backups are removed within 30 days. Where the law requires us to keep certain records, we keep them only for the required period.
4. Service providers and international transfer
We use the following providers to run the service. Your information is stored on and transmitted through servers in the United States. By signing up you consent to this transfer; if you do not wish it, you may choose not to sign up or delete your account.
- DigitalOcean, LLC (San Francisco data center, USA) — website server and database · all account and inquiry data · until account deletion
- Resend, Inc. (USA) — sending service emails · email address, name and email content · for the provider's delivery-log period
- Cloudflare, Inc. (USA) — website delivery and security · connection data such as IP address · for the duration of delivery
5. Sharing with third parties
We never share your personal information with third parties without your consent. If a distillery or importer needs your details during a barrel pick, we will tell you first and ask for your consent.
6. Your rights
You can update your name and phone number or delete your account at any time under My page › Account. To request access to, correction or deletion of your information, or to restrict its processing, email us at the address below and we will act on it promptly.
7. Security
- All traffic is encrypted with HTTPS.
- Passwords are hashed with scrypt; not even we can see your original password.
- Admin pages are restricted to designated administrator accounts.
- Data is backed up daily, and backups are accessible only to the server administrator.
8. Contact
For privacy questions or requests, email [email protected].
