Privacy Policy
Swallow Don't Spit Wine (“we”, “us”) runs group travel experiences. This page explains what personal data we collect, why, and what your rights are. The data controller is KERIOMET S.L., Spain. Contact: [email protected].
What we collect
- Booking details — your name, email, phone number, and trip preferences when you book or enquire about a trip.
- Messages — when you contact us on WhatsApp, Instagram, Facebook, or email, we receive your messages, your name as set in that app, and your phone number or handle. If you reached us by clicking one of our ads, we also receive a reference to that ad.
- Payment information — processed by our payment providers; we never see or store your full card details.
- Website analytics and advertising data — we use cookies and tools such as the Meta Pixel to understand how the site is used and to measure our ads. These only run if you accept them in our cookie banner. You can change your mind at any time via the “Manage consent” tab at the bottom of any page, or manage cookies through your browser settings.
How we use it
- To answer your questions and organise your trip (contract / pre-contract).
- To send you information you've asked for.
- To improve our service and our advertising (legitimate interest / consent).
- We may use software, including AI-based tools, to help us manage and respond to messages. A human remains responsible for our communications.
We do not sell your personal data.
Who we share it with
Service providers who process data for us: Meta (WhatsApp Business Platform, Instagram, Facebook, advertising), Cloudflare (secure message processing and storage in the EU), our booking and payment platforms e.g. Bokun, Stripe, and email/productivity tools we use to run the business. Each processes data under their own safeguards and our instructions. Some providers may process data outside the EEA under standard contractual clauses.
How long we keep it
Booking records: as long as required for tax and legal obligations. Messages and enquiry history: up to 24 months after our last contact, so we can help you faster if you come back. Advertising data: per the retention settings of the tools used.
Your rights
Under the GDPR you can request access, correction, deletion, restriction, or a copy of your data, and object to processing based on legitimate interest. Email [email protected] and we'll sort it. You can also complain to the Spanish supervisory authority (AEPD).
Data deletion
To have your personal data deleted, email [email protected] with the phone number or email you used to contact us, and the word “delete”. We'll confirm within 30 days once done, except data we must keep by law (e.g. invoices).
Changes
We'll post any changes to this policy on this page.