Privacy and GDPR Policy

Effective Date: 26/11/2024

MyOwnSomm.com ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy and GDPR Policy outlines how we collect, use, share, and store your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

1. Personal Information We Collect

We collect the following personal data to provide our services:

• Name
• Address
• Phone number
• Email address
• Wine and Somm reviews

We do not store any payment or credit card information. All payment processing is handled securely by our payment partner, Stripe.

2. How We Use Your Information

Your personal data is used for the following purposes:

• To provide and improve our services.
• To connect you with Somms for fulfilling wine orders.
• To process your subscription payments via Stripe.
• To maintain your wine and Somm reviews for service enhancement.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: To deliver services you subscribe to.
• Consent: Where required, we rely on your consent (e.g., marketing communications).
• Legitimate interests: For purposes such as service improvement, provided your rights do not override those interests.

4. Sharing Your Information

We only share your personal data with the following third parties to facilitate the services we provide:

• Somms: Your name, address, phone number, and email address for fulfilling wine orders.
• Shopify or WooCommerce: To facilitate order creation and management.
• Stripe: To process subscription payments securely.

We do not sell or share your personal data with any other third parties for marketing or other purposes.

5. Data Retention

• Your personal data (name, email address, phone number, and address) will be retained for 30 days after your subscription ends. This allows you the opportunity to resubscribe without re-entering your information.
• After 30 days, sensitive personal data will be permanently deleted.
• We will retain non-sensitive data, such as wine reviews and Somm reviews, indefinitely to enhance our services and maintain customer experience.

6. Your Rights Under GDPR

As a user based in the European Union (if applicable), you have the following rights under GDPR:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data (subject to legal and contractual obligations).
• Right to Data Portability: Request a transfer of your data to another service provider.
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Object: Object to the processing of your data for certain purposes.

To exercise these rights, contact us at info@myownsomm.com

7. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. This includes:

• Encryption of sensitive data during transmission.
• Secure integration with trusted third-party providers like Stripe, Shopify, and WooCommerce.
• Regular audits and encrypted backups of our data storage and processing systems.

8. Cookies

Our website may use cookies to enhance your experience. You can manage your cookie preferences through your browser settings.

When you first visit our website, you will be prompted to accept or reject non-essential cookies. You may update your preferences at any time using the Cookie Settings link available on our site.

9. International Transfers

Your personal data may be transferred to and stored in countries outside the European Economic Area (EEA), including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data during such transfers.

10. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will delete it promptly.

11. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

12. Updates to This Policy

We reserve the right to update this Privacy and GDPR Policy from time to time to reflect changes in our practices or applicable laws. Significant updates will be communicated to you via email or website notifications.

13. Contact Information

If you have questions or concerns about this policy or how we handle your personal data, please contact us at:

Email: info@myownsomm.com