Table of Contents

Scope of This Privacy Policy

Country-Specific Terms

Who Collects and Uses Your Personal Information

Why We Collect Your Personal Information

What Personal Information We Collect

When We Collect Your Information

How We Collect Your Information

Third-Party Sources

Do You Need to Share Your Information With Us?

How Long We Keep Your Information

How We Protect Your Information

International Transfers and Data Storage

Who We Share Your Information With

Children’s Privacy

Your Rights and Choices

Updates to This Privacy Policy

Cookies and Advertising Technologies

How to Contact Us

Appendices

Appendix 1: Australian Residents

Appendix 2: Residents of Qatar, Vietnam, China, Kuwait, Saudi Arabia, Mexico, Chile, South Korea, and Azerbaijan

Appendix 3: U.S. and Guam Residents – SMS and Messaging Details

Appendix 4: U.S. State-Specific Information (including California)

1. Scope of This Privacy Policy

This Privacy Policy explains how Whine House S.p.A. ("Whine House", "we", "our", or "us") and certain authorized partners access, collect, store, use, process, disclose, or transfer your personal information—whether in electronic or paper format.

It also describes circumstances where:

Other privacy policies may apply, particularly when using specific products or services.

Third parties, such as franchisees or social media platforms, independently collect and use your information under their own privacy terms.

Note: This policy does not apply to services operated independently by third parties, such as WeChat, WhatsApp, Facebook, or Rakuten Advertising. In those cases, your data is handled according to the third party’s own privacy rules.

You might want to explore these related sections:

Who collects and uses your personal information?

With whom do we share your personal information?

Your rights regarding your personal information

2. Country-Specific Terms

To ensure compliance with local laws and deliver a personalized experience, we follow the data protection regulations of your country of residence. This includes aligning our practices with consumer protection and privacy laws in your jurisdiction.

Please refer to the relevant appendix for specific terms that apply to your region:

Australia: See Appendix 1 for details on how we use your personal information.

Qatar, Vietnam, China, Kuwait, Saudi Arabia, Mexico, Chile, South Korea, Azerbaijan: See Appendix 2 for specific purposes and legal bases for processing.

United States or Guam: See Appendix 3 to understand how we may use your phone number for messages.

California (and other U.S. states): See Appendix 4 for information about the categories of data we collect and your rights regarding data sales and sharing.

3. Who Collects and Uses Your Personal Information

Whine House S.p.A. is the data controller, meaning we determine why and how your personal information is collected and used.

We may also rely on:

Approved partners and affiliates within the Kering Group who act on our instructions as data processors.

Independent entities (e.g., franchisees, licensees, or social media platforms) that may act as their own data controllers, under their own privacy policies.

Where applicable laws use different terms (e.g., "data user", "business", or "operator"), you can understand our role as the entity that determines the purpose and method of processing your personal data.

You may also want to review:

Why we collect your personal information

How we collect your personal information

With whom we share your personal information

4. Why We Collect Your Personal Information

We collect and process your personal information for several reasons, all of which are consistent with the relevant legal requirements of your country. We do not use your data for unrelated purposes unless legally permitted.

Our primary purposes include:

A. Fulfilling Your Orders and Requests

To deliver the products and services you've requested—whether online, in-store, or through our restaurants—we process your data for:

Order registration and payment

Delivery and returns

Invoicing and internal accounting

Customization and reservation services

Customer care and after-sales support

Example: When you purchase a product or book a restaurant table, we may collect and use your name, contact details, and payment information to complete your transaction.

In some cases, third-party partners (e.g., delivery providers or payment processors) may access your data directly as part of the service delivery. These partners are selected carefully and operate under strict privacy and security requirements.

Legal Basis for Processing

Performance of a Contract: When processing is necessary to fulfill our agreement with you

Legitimate Interest: For internal business needs (e.g., analytics, improvement of services), where permitted by law

Legal Obligation: Where we’re required to retain or report data to comply with applicable laws

Note for international users: If you reside in Australia, Qatar, Vietnam, China, Kuwait, Saudi Arabia, Mexico, Chile, South Korea, or Azerbaijan, please refer to the relevant appendix for localized legal justifications.

5. What Personal Information We Collect

The personal information we collect depends on your interactions with us, including the services or products you use. This may include:

A. Identity and Contact Information

Full name

Email address

Phone number

Postal/billing address

Date of birth

Nationality

B. Transaction and Payment Information

Payment details (e.g., credit/debit card information, billing address)

Purchase history

Invoices and receipts

Delivery and return details

C. Technical and Device Information

IP address

Browser type and version

Device type and operating system

Log files and browsing data

Location data (if permitted by your device settings)

D. Preferences and Interests

Product and service preferences

Wishlist or cart contents

Communication preferences

Responses to surveys or promotions

E. Customer Service Information

Correspondence with our customer care teams

Records of service requests, complaints, or product returns

F. In-Store or Event Information

Visit logs or check-in information

Video surveillance for security (where applicable)

Booking and reservation records for services such as restaurants or private events

6. When We Collect Your Information

We collect your personal information at different points during your journey with us, including:

When you visit our website or mobile apps

When you create an account

When you make a purchase or reservation—online, in-store, or by phone

When you subscribe to our newsletters or marketing communications

When you engage with our customer service

When you attend a Whine House event or visit one of our locations

When you participate in promotions, contests, or surveys

When you interact with us on social media or messaging apps

Some data may also be collected automatically through cookies or similar technologies when you browse our website (see Cookies and Advertising Technologies).

7. How We Collect Your Information

We gather personal information through various means, including:

A. Direct Collection

Forms you fill out (online or in-store)

Orders and purchases

Contact with customer service

Event or reservation bookings

B. Automated Technologies

Cookies, pixel tags, web beacons, and other tracking tools

Website analytics and behavior tracking

Device and connection information collected upon website/app access

C. Third-Party Sources

We may also receive your information from trusted third parties, such as:

Payment service providers

Delivery and logistics partners

Social media platforms (depending on your privacy settings)

Advertising partners

Marketplaces or platforms where our products/services are sold

Any data obtained from third parties is handled in accordance with this Privacy Policy.

8. Who Are Our Third-Party Sources?

We may receive personal information about you from the following categories of third parties:

Payment processors and financial institutions: e.g., banks, PayPal, Apple Pay, Stripe

Delivery and logistics providers: who help us fulfill your orders

Marketing and advertising partners: including platforms that display our ads or run campaigns on our behalf

Social media platforms: such as Facebook, Instagram, WhatsApp, WeChat (depending on your interaction with our pages)

Retail and marketplace partners: where our products are featured or sold

IT and analytics providers: that support our website, apps, and services (e.g., Google Analytics, customer data platforms)

All third parties are carefully vetted and required to comply with strict data protection standards, including data security and confidentiality obligations.

9. Do You Need to Share Your Information With Us?

Providing your personal information is usually voluntary, but in some cases it may be necessary:

Required for a Contract: Without certain data (like your delivery address or payment details), we may be unable to complete your order or provide services.

Legal Requirements: We may need to collect data to comply with tax, accounting, or regulatory obligations.

Marketing and Preferences: You’re free to opt in or out of newsletters, promotional messages, or cookies. However, opting out may affect your experience (e.g., not receiving personalized offers).

Where we request your information, we’ll clearly indicate if it’s optional or required.

10. How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

Completing your transactions

Providing ongoing services (e.g., warranty or repairs)

Complying with legal, tax, or regulatory requirements

Handling disputes or enforcing our agreements

Retention periods vary depending on the type of data and applicable laws. For example:

Order and transaction data: kept as long as required by tax and accounting regulations

Marketing data: retained until you withdraw your consent or unsubscribe

Account data: retained while your account is active, or as needed to provide services

After this period, we securely delete or anonymize your data unless further retention is legally required.