Loading...
Loading...
How we collect, use, and protect your personal information.
Effective date: April 2026
When you create an account through our authentication provider (Clerk), we collect your name, email address, and profile picture. If you sign in via a social provider (Google, Apple), we receive the basic profile information you authorise.
When you check in at a wine farm, we record the farm, the date and time, and any tasting notes or ratings you choose to add. This data powers your personal Wine Passport and stamp collection.
We store your wine preferences, favourite farms, saved routes, and notification settings so we can personalise your experience.
We use PostHog to collect anonymised usage data such as pages visited, features used, device type, and general location (region-level). This helps us understand how people use Cellavie and where we can improve.
We process your personal information for the following purposes:
• Personalisation — recommending wine farms, routes, and events that match your preferences and past visits.
• Passport Tracking — maintaining your check-in history, stamps, missions, and achievements.
• Farm Recommendations — surfacing farms you are likely to enjoy based on your tastes and location.
• Communications — sending transactional emails (booking confirmations, passport updates) and, with your consent, marketing communications about new features or events.
• Platform Improvement — analysing aggregated usage patterns to improve performance, design, and content quality.
When you check in at a wine farm, we share your check-in data (name, date, and any public tasting notes) with the farm owner so they can understand their visitor patterns and improve their offerings. Farm owners cannot access your email address or other account details unless you explicitly enquire with them.
We use trusted third-party services to operate Cellavie: Clerk (authentication), Stripe (payments), Vercel (hosting), Cloudinary (image hosting), PostHog (analytics), and MongoDB Atlas (database). Each provider processes data only as needed to deliver their service and under strict contractual obligations.
We may disclose personal information where required by South African law, a court order, or a valid request from a regulatory authority.
We do not sell your personal information to third parties.
The Protection of Personal Information Act, 2013 (POPIA) grants you the following rights regarding your personal information:
You may request confirmation of whether we hold personal information about you and request a copy of that information.
You may request that we correct or update inaccurate, incomplete, or misleading personal information.
You may request that we delete your personal information where it is no longer necessary for the purpose for which it was collected. We will honour deletion requests unless we are legally required to retain the data.
You may object to the processing of your personal information for direct marketing purposes. You can also object to processing on reasonable grounds relating to your particular situation.
To exercise any of these rights, please contact us at privacy@cellavie.co.za. We will respond within 30 days as required by POPIA.
We retain your account data for as long as your account remains active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law (for example, financial transaction records required by SARS).
Check-in data that has been shared with farm owners in aggregated, anonymised form may persist in their analytics dashboards after your account is deleted.
Analytics data collected via PostHog is retained for 12 months and is anonymised at the point of collection.
We take reasonable technical and organisational measures to protect your personal information. All data is encrypted in transit (TLS) and at rest. Authentication is handled by Clerk, a SOC 2 Type II certified provider. Our database is hosted on MongoDB Atlas with encryption, network isolation, and regular backups.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on the platform. The “Effective date” at the top of this page indicates the most recent revision.
If you have any questions about this Privacy Policy or wish to exercise your rights under POPIA, please contact our Information Officer:
Email: privacy@cellavie.co.za
You also have the right to lodge a complaint with the Information Regulator of South Africa at inforeg@justice.gov.za.