Privacy Policy
Privacy Policy for Epitome Vineyard
Last Updated: August 4, 2025
1. Introduction
Welcome to Epitome Vineyard (epitomevineyard.com). We are committed to protecting the privacy of our visitors and customers. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make inquiries, or book a stay at our villa.
By using our website and services, you agree to the collection and use of information in accordance with this policy.
2. Who We Are
Epitome Vineyard
Tabanera Street s/n
Colonia las Rosas, Tunuyán, Mendoza
Argentina
https://epitomevineyard.com/index.php/contact/
Argentina: +54 262 236 3679
3. What Personal Information We Collect
We collect various types of personal information, depending on how you interact with our website and services. “Personal Information” refers to data that can identify you as an individual.
Information You Provide Directly:
Contact Information: Name, email address, phone number, mailing address (e.g., when you make an inquiry, subscribe to our newsletter, or make a reservation).
Reservation Details: Dates of stay, number of guests, special requests, payment information (credit card details are processed securely by our payment processor and not stored directly by us).
Communications: Information you provide when you contact us via email, contact forms, or phone.
Information Collected Automatically (via Cookies and Tracking Technologies):
Device and Usage Information: IP address, browser type, operating system, unique device identifiers, referring URL, pages viewed, time spent on pages, clickstream data.
Geolocation Data: General location derived from your IP address (e.g., country, region, city) for analytics purposes.
Cookies and Similar Technologies: We use cookies and similar tracking technologies (like pixels and web beacons) to understand website usage, improve your experience, and for analytics. Please see our separate [Link to Cookie Policy – highly recommended to have one] for more details.
4. How We Use Your Personal Information
We use your personal information for the following purposes, based on the legal grounds outlined below:
To Provide and Manage Services (Contractual Necessity / Legitimate Interest):
Process and confirm your villa reservations.
Respond to your inquiries and provide customer support.
Manage your account (if applicable).
Fulfill our contractual obligations to you.
For Communication (Legitimate Interest / Consent):
Send you reservation confirmations, updates, and important information related to your stay.
Send you newsletters or marketing communications about Epitome Vineyard, special offers, and events, if you have explicitly consented to receive them. You can opt out at any time.
For Website Improvement and Analytics (Legitimate Interest):
Understand how visitors use our website to improve its functionality and user experience.
Analyze website traffic and trends.
Monitor and prevent fraudulent activity and enhance security.
For Legal and Compliance Purposes (Legal Obligation / Legitimate Interest):
Comply with applicable laws, regulations, and legal processes.
Protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others.
Enforce our terms and conditions.
5. Legal Basis for Processing (for GDPR / UK-GDPR)
For individuals located in the European Union or the United Kingdom, we process your personal information based on the following legal grounds:
Contractual Necessity: When processing is necessary for the performance of a contract with you (e.g., processing your reservation).
Legitimate Interests: When processing is necessary for our legitimate interests (or those of a third party) and your fundamental rights and freedoms do not override those interests (e.g., website analytics, security, direct marketing where permissible). We ensure these interests are balanced with your rights.
Consent: Where you have given explicit, affirmative consent for specific processing activities (e.g., for sending marketing emails). You have the right to withdraw your consent at any time.
Legal Obligation: When processing is necessary to comply with a legal obligation (e.g., tax, accounting, or regulatory requirements).
6. How We Share Your Personal Information
We may share your personal information with the following categories of recipients:
Service Providers: Third-party companies that perform services on our behalf, such as payment processing, website hosting, analytics, email delivery, and customer support. These service providers are contractually obligated to protect your information and use it only for the purposes for which we disclose it to them.
Legal and Regulatory Authorities: When required by law or in response to valid legal requests (e.g., court orders, subpoenas).
Business Transfers: In connection with a merger, sale of assets, financing, or acquisition of all or a portion of our business by another company.
With Your Consent: We may share your information with other third parties when you provide us with your explicit consent to do so.
We do not sell your personal information to third parties.
7. International Data Transfers
As Epitome Vineyard is based in Argentina, and our website visitors may come from various countries, your personal information may be transferred to, stored, and processed in countries outside of your own, including Argentina, Canada, the United States, or other regions where our service providers operate.
When transferring personal information outside of the European Economic Area (EEA), the UK, or Canada, we take appropriate safeguards to ensure your data receives an adequate level of protection, such as:
Standard Contractual Clauses (SCCs): Implementing SCCs approved by the European Commission or the UK Information Commissioner’s Office.
Adequacy Decisions: Relying on countries deemed to provide an adequate level of data protection by the European Commission or other relevant authorities.
Consent: Relying on your explicit consent for the transfer.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
For example:
Reservation data will be retained for the period necessary to manage your booking and for relevant tax and accounting records.
Marketing consent will be retained until you withdraw your consent or for a reasonable period thereafter.
Website analytics data is typically retained for [e.g., 26 months in Google Analytics 4, or as per your specific GA4 settings].
9. Your Privacy Rights
Depending on your location and applicable privacy laws, you may have the following rights regarding your personal information:
For GDPR / UK-GDPR (EU & UK Residents):
Right to be informed: To receive clear and transparent information about our data processing activities.
Right of access: To request a copy of the personal information we hold about you.
Right to rectification: To request that we correct any inaccurate or incomplete personal information.
Right to erasure (“Right to be forgotten”): To request that we delete your personal information under certain circumstances.
Right to restrict processing: To request that we limit the way we use your personal information under certain circumstances.
Right to data portability: To receive your personal information in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
Right to object: To object to the processing of your personal information for direct marketing purposes or when processing is based on legitimate interests.
Rights in relation to automated decision-making and profiling: To not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. (Note: We do not currently engage in such automated decision-making.)
Right to withdraw consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.
For CCPA (California Residents):
Right to know: To request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the purposes for collecting it, and the categories of third parties with whom we share it.
Right to delete: To request the deletion of personal information we have collected from you, subject to certain exceptions.
Right to opt-out of sale or sharing: Epitome Vineyard does not sell or share your personal information as defined by the CCPA. Therefore, an opt-out link is not provided as we do not engage in these activities.
Right to correct: To request the correction of inaccurate personal information we maintain about you.
Right to limit use and disclosure of sensitive personal information: We do not collect “sensitive personal information” as defined by the CCPA that would trigger this right.
Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
For PIPEDA (Canadian Residents):
Accountability: We are responsible for the personal information under our control and have designated individuals to oversee our compliance.
Identifying Purposes: We identify the purposes for collecting personal information before or at the time of collection.
Consent: We obtain your meaningful consent for the collection, use, and disclosure of your personal information, unless inappropriate.
Limiting Collection: We limit the collection of personal information to that which is necessary for the purposes identified.
Limiting Use, Disclosure, and Retention: We do not use or disclose personal information for purposes other than those for which it was collected, except with your consent or as required by law. We retain personal information only as long as necessary.
Accuracy: We keep personal information accurate, complete, and up-to-date as necessary for the purposes for which it is used.
Safeguards: We protect personal information with security safeguards appropriate to the sensitivity of the information.
Openness: We make specific information about our policies and practices relating to the management of personal information readily available to you.
Individual Access: Upon request, we will inform you of the existence, use, and disclosure of your personal information and give you access to that information. You may challenge the accuracy and completeness of the information and have it amended as appropriate.
Challenging Compliance: You have the right to address a challenge concerning our compliance with the above principles to the person accountable for our compliance.
How to Exercise Your Rights:
To exercise any of these rights, please contact us at https://epitomevineyard.com/index.php/contact/. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before processing your request.
Complaints:
If you are an EU or UK resident and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with a supervisory authority in your country of residence.
If you are a Canadian resident and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC).
10. Security of Your Personal Information
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
11. Links to Other Websites
Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
12. Children’s Privacy
Our website is not intended for individuals under the age of [e.g., 16 or 13, depending on your target audience and the strictest applicable law]. We do not knowingly collect personal information from children without parental consent. If we become aware that we have collected personal information from a child without verifiable parental consent, we will take steps to remove that information from our servers.
13. Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. We encourage you to review this Privacy Policy periodically for any changes.
14. Contact Us
If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your rights, please contact us:
