Legal
Privacy Policy
Effective date: 7 June 2026 · The Asia Wine Review Pte. Ltd.
1. Who We Are
The Asia Wine Review Pte. Ltd. ("AWR", "we", "us", or "our") operates the Asia Wine Review platform at theasiawinereview.com. We are registered in Singapore and act as the data controller for personal data collected through this platform.
For privacy matters, contact us at: hello@theasiawinereview.com
2. What Data We Collect
We collect the following personal data when you register or use our platform:
- Full name
- Email address
- Date of birth (to verify you are 18 or older)
- Mobile phone number (optional)
- Password (stored in hashed form — we cannot read it)
- Payment information (processed by Stripe — we do not store card details)
- Personal tasting notes you choose to save (private to your account)
- Usage data such as pages visited and features used
- IP address and browser/device information for security purposes
We do not collect special category data (e.g. health, ethnicity, political views) and we do not sell your personal data to third parties.
3. Why We Collect It and Our Legal Basis
Under GDPR and Singapore's Personal Data Protection Act 2012 (PDPA), we must have a lawful basis for processing your data. Here is ours:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Verifying you are 18 or older (age gate) | Legal obligation / legitimate interest |
| Processing membership payments via Stripe | Performance of a contract |
| Sending transactional emails (welcome, account notices) | Performance of a contract |
| Sending marketing emails about AWR (if consented) | Your consent |
| Improving and securing the platform | Legitimate interest |
| Complying with legal obligations | Legal obligation |
4. Who We Share Your Data With
We share your data only with trusted third-party service providers necessary to operate the platform:
- Stripe, Inc. — payment processing. Your card details are handled entirely by Stripe. See stripe.com/privacy.
- Resend — transactional and marketing email delivery. Based in the US. See resend.com/privacy.
- Supabase, Inc. — database and authentication infrastructure. Based in the US. See supabase.com/privacy.
All processors are bound by data processing agreements and are required to handle your data only as directed by us. We do not sell, rent, or share your personal data with advertisers or unrelated third parties.
International transfers: Our service providers are based in the United States. Transfers to these providers rely on standard contractual clauses (SCCs) approved by the European Commission, and we have assessed that these providers maintain adequate data protection standards.
5. How Long We Keep Your Data
- Account data: retained for as long as your account is active, plus 3 years after closure for legal and dispute purposes.
- Payment records: retained for 7 years as required by Singapore accounting and tax law.
- Tasting notes: deleted immediately when you delete them or close your account.
- Marketing consent records: retained for 5 years from date of consent.
6. Your Rights
You have the following rights over your personal data under GDPR (if you are in the EU/EEA/UK) and Singapore's PDPA:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data (subject to legal retention obligations).
- Restriction — ask us to pause processing of your data in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format (GDPR).
- Objection — object to processing based on legitimate interest, including for direct marketing.
- Withdraw consent — withdraw marketing consent at any time without affecting prior lawful processing.
To exercise any right, email hello@theasiawinereview.com. We will respond within 30 days. If you are in the EU/EEA, you may also lodge a complaint with your local supervisory authority. In Singapore, you may contact the Personal Data Protection Commission (pdpc.gov.sg).
7. Cookies and Tracking
We use essential cookies to keep you logged in and secure your session. We do not currently use advertising or tracking cookies. If this changes, we will update this policy and obtain your consent where required.
8. Children
Our platform is strictly for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered, please contact us immediately and we will delete the account.
9. Security
We use industry-standard security measures including encrypted storage, hashed passwords, and secure HTTPS connections. However, no system is completely secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authorities as required by law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and update the effective date above. Continued use of the platform after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy questions, data access requests, or complaints:
The Asia Wine Review Pte. Ltd.
hello@theasiawinereview.com