Privacy Policy

1. Introduction

ExceptFriday (Tax ID: RO40772158, Trade Register: J12/1064/2019) ("Company", "we", "our") operates the Vinar platform, including the website (www.vinar.ro) and the mobile applications available for iOS and Android. This privacy policy explains how we collect, use, disclose and protect your personal information when you use our services.

Please read this policy carefully. By accessing or using our web platform or mobile applications, you agree to the practices described in this privacy policy.

2. Information We Collect

We collect the following types of information:

2.1 Information you provide directly

• Account information: name, email address, password, phone number
• Delivery information: full address, delivery instructions
• Payment information: bank card details (processed securely through third-party providers)
• Preferences: favourite wine types, reviews, wish lists
• Communications: messages sent to customer support

2.2 Information collected automatically

• Usage data: pages visited, products viewed, time spent on the platform
• Device information: device type, operating system, browser
• IP address and approximate location data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Process and deliver your orders
• Create and manage your account
• Provide personalised wine recommendations
• Send communications about orders, offers and news (with your consent)
• Improve our services and user experience
• Prevent fraud and ensure platform security
• Meet our legal obligations

4. Information Sharing & Third-Party Providers

We do not sell your personal information. We may share information with:

• Service providers: courier companies, payment processors, hosting providers
• Commercial partners: wineries and wine producers for order fulfilment
• Authorities: where required by law or to protect our legal rights
• In the event of a merger or acquisition: data may be transferred to the new owner

4.1 Firebase (Google)

We use Firebase services for authentication, data storage and analytics. Firebase processes data such as email addresses, unique device identifiers, usage data and preferences. Data is processed in accordance with the Google Privacy Policy and stored in secure data centres. For more information, visit firebase.google.com/support/privacy.

5. Data Security

We implement technical and organisational security measures to protect your information, including SSL encryption, restricted data access and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Your Rights

Under GDPR, you have the following rights:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("the right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to lodge a complaint with ANSPDCP (Romanian data protection authority)

7. Cookies

We use essential cookies for the operation of the site and analytical cookies to understand how you use the platform. You can manage your cookie preferences from your browser settings or from our consent panel.

8. Data Retention

We retain personal data for as long as you have an active account or as long as necessary to provide our services. Transaction-related data is retained in accordance with legal requirements (a minimum of 10 years for tax documents).

9. Age Verification & Protection of Minors

Our platform is intended exclusively for persons aged at least 18 years. We do not knowingly collect personal data from minors, nor do we direct our services to persons under 18.

9.1 Age Verification

• When creating an account, users must confirm they are at least 18 years old
• We store the age confirmation (date of birth or confirmation that the user is over 18) to ensure compliance
• Upon delivery, the courier verifies the recipient's identity and age with a valid identity document
• Delivery is refused if the recipient cannot prove they are at least 18 years old

9.2 Policy on Minors

We do not knowingly collect, store or process personal data belonging to minors. If you discover that a minor has provided personal data through our platform, please contact us immediately at [email protected] and we will delete that information.

9.3 Advertising & Marketing

We do not carry out marketing or advertising activities targeting minors. All our marketing campaigns are configured to exclude persons under 18 and comply with regulations concerning the advertising of alcoholic beverages.

10. Changes to This Policy

We reserve the right to update this policy. We will notify you by email or by displaying a notice on the platform about any significant changes.

11. Contact

For any questions relating to this policy or to exercise your rights, you can contact us: