Kairos Wines

Legal

Privacy Policy.

Last updated: May 2026

This is the privacy notice for kairos-wines.com and the wine business operating under the name Kairos Wines. It describes what personal data we collect, why we collect it, what we do with it, and the rights you have under the General Data Protection Regulation (GDPR) and Greek data-protection law.

Who we are

Kairos Wines is a small wine producer based in Spili, Rethymno, Crete, Greece. For the purposes of EU data-protection law, we are the data controller for any personal data we collect through this website or in the course of our business. You can contact us at tyson@kairos-wines.com.

What we collect, and when

When you submit a form

If you sign up for our waitlist, send a wholesale enquiry, or contact us through the website, we collect the information you provide — typically your name, email address, and the content of your message. For wholesale enquiries we additionally collect your business name, country, and the volume of wine you are interested in.

We use this information to contact you about wine, respond to your enquiry, and — in the case of the waitlist — to notify you when a new release is available. We do not use it for any other purpose. We do not share it. We do not sell it.

When you visit the website

If you have given consent via our cookie banner, we may use Google Analytics to collect anonymised information about how visitors find and use the site — pages visited, approximate location (country level), device type, referring site. This information is aggregated and is used to improve the site. It does not personally identify you.

If you have not given consent, no analytics data is collected. The compliance pages at /label/* (the e-label pages reached by scanning a QR code on a bottle) never load analytics, in any circumstances. Full details are in our Cookie Policy.

Lawful basis

We process your personal data under the following lawful bases as defined by Article 6 of the GDPR:

  • Consent — for analytics cookies, and for the waitlist newsletter. You can withdraw consent at any time.
  • Legitimate interest — for responding to enquiries you have sent us (we have a legitimate interest in conducting our business and responding to people who contact us).
  • Contract — where you have bought wine from us and we need to process your data to fulfil that order.

Who we share data with

We use the following third-party services to operate our business. Each of these acts as a data processor on our behalf and is bound by contract to handle your data in accordance with this policy and applicable law.

  • Vercel Inc. — hosts this website. May process your IP address briefly to deliver pages. Vercel privacy policy.
  • HighLevel (GoHighLevel) — the CRM system where your form submission is stored and from which we send replies and newsletters. HighLevel privacy policy.
  • Google LLC — if you consent to analytics cookies, anonymised information about your visit is processed by Google Analytics. Google privacy policy.

We do not sell your personal data, share it for marketing purposes other than our own, or transfer it to any party not listed here.

International transfers

Some of the processors listed above (Vercel, HighLevel, Google) are based in the United States. Where this is the case, the transfer is protected by Standard Contractual Clauses approved by the European Commission, and/or by the EU-US Data Privacy Framework. We have reviewed these safeguards and are satisfied they provide adequate protection.

How long we keep your data

  • Waitlist signups: until you unsubscribe, or until we determine that the address is no longer active.
  • Wholesale enquiries: for as long as our business relationship continues, plus seven years after the last contact for accounting purposes (Greek tax law).
  • General contact messages: two years from receipt unless an ongoing conversation requires longer.
  • Analytics data: retained by Google Analytics for fourteen months by default, then automatically deleted.

Your rights

Under the GDPR you have the right to:

  • Ask what data we hold about you
  • Ask for it to be corrected if it is wrong
  • Ask for it to be deleted
  • Ask for it to be exported in a portable format
  • Object to processing on the basis of legitimate interest
  • Withdraw consent to any processing you have consented to
  • Lodge a complaint with the Hellenic Data Protection Authority (HDPA)

To exercise any of these rights, email us at tyson@kairos-wines.com. We will respond within thirty days, free of charge. If we cannot identify the request as legitimately yours, we may ask for proof of identity before acting.

The Hellenic Data Protection Authority can be contacted at dpa.gr.

Security

All form submissions and stored personal data are transmitted over HTTPS and stored on services protected by industry-standard security controls. We will notify you and the HDPA without undue delay if a breach occurs that is likely to put your rights or freedoms at risk.

Children

This is a wine website. It is not directed at, and we do not knowingly collect personal data from, anyone under the age of eighteen.

Changes to this policy

If we change this policy in a material way, we will update the date at the top of the page and, if you are on our mailing list, send you a note explaining what has changed. The current version is always the one published here.

Contact

Questions about privacy, requests to exercise your rights, or any other data-protection matter: tyson@kairos-wines.com.

This policy is provided for informational purposes and is intended to comply with the General Data Protection Regulation (EU) 2016/679 and Greek Law 4624/2019. It does not constitute legal advice. You should consult a qualified lawyer if you have specific legal questions about your data.