Privacy policy

Who we are

Reserve is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, you can contact us at hello@reservewine.uk.

What we collect

We collect the following types of information:

• Account information. If you create an account, we collect your email address. We use passwordless sign-in, either by sending you a magic link to your email address or through Google sign-in. We do not store passwords.
• Saved items. Your favourites, wish lists, and saved searches are stored against your account so that they are available when you return.
• Technical data. Like most websites, our hosting provider automatically records standard request logs, which may include your IP address, browser type, device information, and pages requested. We use this for security, reliability, and diagnostics.
• Analytics and performance data. Vercel Web Analytics and Speed Insights collect anonymous, aggregated information such as pages viewed, referring pages, approximate country, device and browser type, and web performance measurements. If you accept optional analytics, Google Analytics 4 also collects information about visits and interactions, including pages viewed, session statistics, approximate location, and browser and device information. We do not send your account email address to either analytics service.

Why we use your data

We use your personal data for the following purposes:

• To provide account access and saved features. This includes sign-in and storing your saved items.
• To keep the service secure and working properly. This includes logging, fraud prevention, debugging, and system monitoring.
• To understand and improve Reserve. We use aggregated traffic, interaction, referral, and performance information to understand which pages and features are useful and where the service needs improvement.
• To respond to support requests and legal requests. If you contact us or if we need to meet legal obligations, we may process your data for those purposes.

Our lawful bases

Under UK data protection law, we rely on the following lawful bases:

• Contract. To create and manage your account and provide the features you ask us to provide.
• Legitimate interests. To keep the service secure, maintain logs, prevent abuse, improve reliability, and understand anonymous, aggregated usage and performance information supplied by Vercel.
• Legal obligation. Where we are required to keep or disclose information under law.
• Consent. To load Google Analytics 4 and use its analytics cookies. You can refuse or withdraw this consent at any time without affecting your access to Reserve.

Cookies

Reserve uses essential cookies where necessary to keep you signed in and make requested features work. These do not require analytics consent.

Google Analytics 4 is optional and does not load unless you select “Accept analytics”. If accepted, it uses first-party cookies named _ga and _ga_<container-id> to distinguish visitors and sessions. Google states that these cookies may remain for up to two years. We use Google Analytics for product measurement, not advertising, and do not use Google Analytics advertising features.

Vercel Web Analytics does not use cookies and records anonymous, aggregated page-view information. Vercel Speed Insights records anonymous performance measurements and does not associate them with an individual visitor or IP address.

You can accept or reject Google Analytics when first visiting Reserve. You can change or withdraw that choice later using “Analytics settings” in the footer. Rejecting optional analytics does not affect the service. If you do not sign in, you can browse Reserve without creating an account.

Where your data is stored

Your account data and saved items are stored with Supabase, which provides our database and authentication services. The site itself is hosted on Vercel. Anonymous analytics and performance data is processed by Vercel. If you consent to Google Analytics, analytics data is processed by Google. These providers process data under their own security and privacy commitments and, where applicable, on our behalf.

Some of these providers may process data outside the UK. Where this happens, we use appropriate safeguards permitted under UK data protection law.

Restaurant and wine data

The wine lists, prices, and venue details shown on Reserve are factual business information published by restaurants. This information is not collected from your personal activity and is not used to identify you.

How long we keep your data

We keep your account data for as long as your account remains active.

If you ask us to delete your account, we will delete or anonymise your personal data unless we need to keep some information for legal, security, or fraud-prevention reasons.

Server logs are kept only for as long as necessary for security, diagnostics, and operational purposes.

Analytics information is kept only for as long as needed to understand usage trends and improve Reserve, subject to the retention controls and reporting periods provided by Google and Vercel. Google Analytics cookies may remain on your device for up to two years unless you withdraw consent or delete them sooner.

Sharing your data

We do not sell or share your personal data for marketing purposes.

We may share your data with service providers that help us run the site, such as:

• Supabase, for authentication and database services.
• Vercel, for hosting, anonymous web analytics, and performance monitoring. See Vercel’s privacy notice.
• Google, if you consent to Google Analytics 4. See Google’s privacy policy.
• email delivery services, where needed to send sign-in links or account-related messages.

We only share the minimum information required for those services to function.

Your rights

You have the right to:

• request a copy of the personal data we hold about you.
• ask us to correct inaccurate or incomplete data.
• ask us to delete your account and associated data.
• object to certain types of processing.
• ask us to restrict processing in some circumstances.
• ask for portability of your data, where applicable.
• withdraw consent where we rely on consent.

To exercise any of these rights, email hello@reservewine.uk. We will respond without undue delay and within the time limits required by law.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data. You can find more information on the ICO’s website.

Children

Reserve is not intended for children, and we do not knowingly collect personal data from anyone under 18.

Changes to this policy

If we change how we handle your data, we will update this page and revise the date at the top. If the changes are significant, we will notify account holders by email where appropriate.