This English version is provided for information only. Only the French version is legally binding.

Privacy policy

Data controller

The controller for your data is the site's publisher, whose full identity is given in the legal notice.

Data collected

We only collect the data you provide us directly, depending on which request you make:

• Quote request: company name, SIRET, contact details (first name, surname, email, phone, role), requested delivery date, free-text message, and the configuration of your personalised bottle (logo, text, font).
• Tasting booking: first name, surname, email, phone, requested date and message.
• Design studio request: first name, surname, email, phone, company, comment and attached files (logo, font).
• Signing in to your account: your email address, to send you the secure sign-in link.
• Messages in your account: the messages exchanged with Encrage about your requests.
• Blog newsletter (optional): your email address.

Purpose of processing

This data is used only to handle your request, manage the commercial relationship and run your client account. It is never sold to third parties for commercial purposes.

Legal basis

Each processing activity relies on one of the bases provided for by the GDPR:

• Quote, tasting and studio requests: taking pre-contractual steps at your request (Article 6.1.b).
• Signing in and messages in your account: performance of the contract between us (Article 6.1.b).
• Form security (anti-spam): our legitimate interest in protecting the site from abuse (Article 6.1.f).
• Newsletter: your consent (Article 6.1.a), which you can withdraw at any time.

Recipients and processors

To run the site, Encrage relies on technical service providers that process your data on its behalf and on its instructions, solely for the purposes described above (processors within the meaning of Article 28 of the GDPR):

• Supabase: database, file storage (visuals and proofs, BAT) and sign-in link authentication. This is where your account and quote request data is hosted.
• Resend: sending of transactional emails (sign-in link, confirmation and follow-up of your quote request).
• Vercel: hosting and delivery of the site (technical logs, including IP addresses).
• Cloudflare Turnstile: anti-bot check on forms (IP address and browser technical signals).

Some of these providers are based in the United States. The resulting data transfers rely on the safeguards provided by the GDPR: an adequacy decision (Data Privacy Framework) or the European Commission's standard contractual clauses.

Retention period

Your data is kept for 3 years from the last contact, then deleted. A newsletter address is kept until you unsubscribe, which you can do at any time.

Your rights

Under the GDPR, you have the right to access, correct, delete, restrict, object to the processing of, and port your data. To exercise these rights, write to rgpd@encrage.store. You may also lodge a complaint with the French data protection authority, the CNIL.

Cookies and analytics

We use Plausible Analytics, which sets no tracking cookies and collects no personally identifiable data. The site only sets cookies that are strictly necessary for it to work (remembering your language, keeping you signed in to your account): under the regulations, these do not require consent.