Privacy policy

Last updated: 13 November 2026

Who handles your data

The data controller is Clever Opportunity, Lda, tax number 515801437, Avenida Fernão de Magalhães, Lote 83, Apt. 1.1, 3830-749 Gafanha da Nazaré, Portugal. For anything about your data, write to encomendas@davelawines.pt.

What we collect and why

Order requests. Name, email, phone, address, postcode, town, country, wines ordered and notes. Used to answer your request, take payment, deliver and handle complaints. Legal basis: performance of a contract and pre-contractual steps (GDPR article 6(1)(b)). We keep paid orders for 10 years, for tax obligations, and unpaid requests for 1 year.

Invoicing. Name, address, tax number if given, and amounts. Used to meet tax and accounting obligations. Legal basis: legal obligation (6(1)(c)). Kept for 10 years.

Contact form. Name, email, phone and message, to reply to you. Legal basis: our legitimate interest in answering people who write to us (6(1)(f)). Kept for 2 years after the last message.

Trade price list requests. Name, company, email, phone, town and message, to send prices and proposals. Legal basis: pre-contractual steps (6(1)(b)). Kept for 2 years.

"Let me know when it is back". Email and wine, to tell you once when the wine is back. Legal basis: your consent (6(1)(a)). Kept until we notify you or you withdraw consent.

Complaints. Emails exchanged and photos you send, to resolve the complaint and defend our rights. Legal basis: contract and legitimate interest (6(1)(b) and (f)). Kept for 3 years after it is resolved.

We never ask for or store card or bank account details: we only record how and when you paid. We do not use your data for advertising, we do not sell it, and we do no profiling or automated decision-making.

Who we share it with

We use these providers, who handle data only on our behalf:

• Supabase Inc. (USA): database and form handling. Data is stored in the European Union (Paris).
• Netlify, Inc. (USA): website hosting; receives the IP address of visitors.
• Brevo (Sendinblue SAS, France): sending the emails about your order, from servers in the European Union.
• ImprovMX Inc. (USA): forwards emails sent to our @davelawines.pt addresses to our mailbox. Emails arrive at servers in France and may pass through servers in the USA.
• Google LLC (USA): our mailbox (Gmail), where the emails we exchange with you are kept.
• CTT or the chosen courier: name, address and phone, for delivery.

When these providers process data outside the European Economic Area, they do so under the standard contractual clauses approved by the European Commission (Supabase, Netlify and ImprovMX) or under the EU-U.S. Data Privacy Framework (Google). You can ask us for a copy of these safeguards.

We also share data with the authorities when the law requires it.

Data stored in your browser

This website uses no analytics or advertising cookies. It stores in your browser only what it needs to work: that you confirmed you are 18 or older, that a language was already suggested, and the panel open while you browse. You can delete these in your browser settings.

To show the vineyard weather, your browser connects to MET Norway's servers (Norway), which receive your IP address. The WhatsApp, Instagram and Facebook buttons are plain links: you only reach those platforms when you click, and they have their own policies.

Your rights

You may ask for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. You may withdraw consent at any time, without affecting what was done before. Write to encomendas@davelawines.pt; we reply within one month. Data the law requires us to keep, such as invoicing records, is only deleted when the legal period ends.

You may lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).

Minors

This website and our sales are for adults aged 18 and over only. We do not knowingly collect data from minors.

Security

Data is kept in a protected database that only the company can access, with a login, and backed up weekly. Connections to the website are encrypted (HTTPS).

Changes

If we change this policy, we will publish the new version here with its date.