Privacy policy
This English version is provided for convenience; the French version prevails.
Last updated: 2 November 2026.
What we collect
On the public website, a single item of personal data: your email address, if you choose to leave it (when you place an order, or if you signed up for our emails before opening). Your answers to the diagnostic stay in your browser: they are not sent to us, except when you place an order (see below). Members of the Private Cellar also have the My Cellar space, described below.
Why, and on what basis
If you signed up for our emails, your address is used to send you news from Le Cellier Privé and, a few times a month at most, advice on building your cellar. Legal basis: your consent, confirmed by a click in the email you receive after signing up (double opt-in). Without this click, the address is not added to our list.
Who processes it
Addresses are stored and emails are sent by Brevo (Sendinblue SAS, a French company), which acts as a processor and hosts the data in the European Union. We do not sell or rent your address, and we do not pass it on to any merchant.
How long
Until you unsubscribe, and at most three years after our last exchange with you. Every email contains a link to unsubscribe immediately.
Orders
When you order the Cellar Book or join the Private Cellar, we receive your first name, your email address and a short code summarising your answers to the diagnostic (budget, price per bottle, colours, regions, ageing horizon, and the plan chosen). This code also contains a randomly generated identifier, which cannot be used to identify you. These data are used only to put together and send you your Cellar Book, to manage your subscription and to write to you about it. If you attach your cellar inventory (Vivino, Excel or CSV file), it is sent to us by email with your order, solely to compose your Cellar Book; it is deleted from our mailbox within twelve months. Legal basis: performance of the contract. These data are stored by Brevo (processor, data hosted in the European Union) for the duration of the business relationship, then three years.
Payment is processed by Stripe (Stripe Payments Europe Ltd, Ireland), which receives your name, your email address and your payment details; we never have access to your card number. Stripe sends you the receipt and the invoice, and lets you manage your subscription. Invoices are kept for ten years, as required by law. For payments, Stripe acts as a separate controller; its privacy policy applies.
Private beta (October and November 2026, now ended): testers' data (first name, email, diagnostic code) are stored by Brevo for at most one year after the end of the beta, and deleted on request.
Gift cards: when you give a card, we receive from Stripe your name, your email address, the first name of the person you are giving it to and any short message. These data are used only to make the card, to email it to you (via Brevo) and to track its use; when it is used, we also record the recipient's email address. Legal basis: performance of the contract. They are kept in our Supabase database for the card's period of validity, then three years.
My Cellar (members of the Private Cellar)
If you are a member, we open an online space for you, by invitation. In it we keep: your email address and first name; your profile from the diagnostic (diagnostic code, target balance, storage locations); the wines in your Cellar Book; the bottles you add, record as bought or import from a file (wine, vintage, quantity, price paid, date, merchant, location); your openings, ratings and tasting notes; the messages we write to you. A file you import is read in your browser: only the rows you confirm are saved.
This data is used only to keep your cellar up to date and to advise you (drinking windows, budget, buying advice). Legal basis: the performance of your subscription; the tracking of your purchases and tastings also relies on your agreement, given in the space itself. It is never sold or passed on to a merchant. Each member sees only their own cellar; apart from you, only Le Cellier Privé has access to it.
Hosting: Supabase (Supabase Inc.), as processor; the database is located in the European Union (Paris). Sign-in emails are sent through Brevo. As Supabase is an American company, any access from the United States is covered by the European Commission's standard contractual clauses.
How long: for as long as you are a member. When your subscription ends, your space and its data are deleted within three months; before then, you can ask for a copy of your cellar (spreadsheet file) or for its immediate deletion.
Analytics and third-party services
We measure traffic with Cloudflare Web Analytics, which sets no cookies and does not track visitors from one site to another. Fonts are loaded from Google Fonts, which sends your IP address to Google when the page is displayed. The hosting provider (Cloudflare) keeps technical connection logs to ensure the security of the service.
So that we do not ask your age on every visit, your confirmation that you are 18 or older is remembered for 12 months in your browser (local storage and a technical cookie, “lcp_age_ok”). It is not sent to us.
Your rights
You may at any time access your data, correct it, delete it, obtain a copy of it or withdraw your consent. Data controller: Frédéric Le Foll. Write to contact@lecellierprive.com. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).