Loading page
Legal
Graft Collab Consultancy FZCO operates Breakfast Wine Club and is responsible for the personal data processed through this platform. This policy explains what we collect, how we use it and the choices available to you.
Account details (name, email, date of birth for the 21+ requirement), your membership and billing status, event bookings and attendance, your private wine collection and tasting journal, palate-quiz answers, referral activity, and technical logs needed to run the service. Collection data may include quantity, purchase price and storage location; tasting data may include your score, flavours, place and notes. A private wishlist may include your intent, priority and note. You may also add private descriptive differences and a private bottle or label image for a wine in your library. Market observations and licensed professional scores come from attributed providers and are kept separate from details you enter. If you choose to complete your member profile, we also collect the profile details you provide, such as your bio, wine qualifications, occupation and place of work. Community data includes connection requests, accepted connections, blocks and your per-connection contact-sharing choices.
Event activity includes check-in and submitted tasting or guessing responses and scores. Authorised organisers and educators can access the information needed to run and review those activities. Your results may include published educator reference assessments. This is separate from publishing your private collection or journal to other members.
A mobile or WhatsApp number added to your profile is treated as private contact information. Its disclosure is governed by your profile and accepted-connection sharing settings, rather than being public by default. If you add a social username, such as Instagram, we store that self-reported username so we can link to the profile when you turn on its sharing control.
To provide your membership (contract): admissions, allowances, certificates, member content and your private wine library. Event access is represented by individual admissions and membership allowances, rather than a transferable cash-like event balance. To personalise wine recommendations from your tastings. We may show an anonymous club average only after enough distinct members have rated the same wine; individual notes and collection details are not included. To send service emails (bookings, waitlist offers, billing). Marketing messages only with your recorded preferences — you can change them at any time. The Trade application defaults described below are separate from the optional club newsletter choice at signup.
Providing a WhatsApp number does not by itself give us permission to send marketing messages there. Club newsletter consent is separate from necessary service messages. If we offer a link to an external Substack publication, subscribing there is managed by Substack and is not recorded as your Breakfast Wine Club newsletter preference.
Payment processing by Stripe (we never store card numbers), email delivery through Resend, and infrastructure providers needed to host and secure the service. Instagram usernames are self-reported profile links; BWC does not need to retrieve a member's Instagram content to display that link. Venue administrators may use Google Places search to select a location, Trade applicants may search for their workplace, and members may search for a tasting location. Search text and the selected place are sent to Google for that lookup. We store the confirmed venue or workplace details and the location text saved with a private tasting. Hosting and provider processing may take place outside the UAE; the applicable transfer arrangements depend on the provider and the production hosting location. We do not sell personal data.
If you explicitly look up a bottle barcode, the barcode alone is sent to Open Food Facts to request community-maintained product details. We do not send your identity, collection details or tasting notes. If you choose to search Google Images, your browser opens Google with the wine description as the search query; BWC does not receive Google's results. If you paste a chosen image address, BWC downloads, optimizes and stores that image together with the source address. Uploaded private photos are not sent to Google.
Where enabled, wine-data lookups can send a wine identifier or search description to providers such as Grapeminds or Wikidata. These lookups do not require your private tasting notes or cellar quantities. Public BWC social and news feeds may cache material obtained through Instagram or Telegram; they are separate from your private member profile and contact-sharing choices.
You may access, correct, export or delete your data. Use the Download my data and Delete my account options in your account settings, or contact the club. Deletion is a request processed after relevant account and payment dependencies are resolved; it is not always immediate. It removes private profile, cellar, tasting and Trade records and personal files, including certificate PDFs, and anonymises retained account and certificate records. Financial, security and audit records may be retained where required. Export your information and download certificates before requesting deletion. Where applicable law provides, you may also request information about processing or transfers, object to processing, request a restriction, or ask for human review of an automated decision. These requests may require identity verification and are subject to applicable legal exceptions.
Profile sharing is optional. You control whether professional details, your workplace and a social-profile link appear on your member profile. Private Instagram or WhatsApp contact details are shown only where the applicable profile and accepted-connection sharing controls allow it. Blocking another member overrides directory, profile, connection and contact visibility. You can turn sharing controls off again at any time.
Account and member-service data is retained while you use an account, including a free account. Ending a paid subscription does not delete the account or its data. Deletion requests are handled as described above. Necessary financial, dispute, fraud-prevention and audit records may be retained separately to meet legal obligations and resolve outstanding matters. Restricted backup copies may remain until those backups expire; deleting an active record does not instantly remove every recovery copy.
Trade applicants provide professional contact details, workplace, qualifications, work history and interests. Optional answers may include nationality, languages, venue operations and buying preferences. We reuse existing profile details and preserve submitted application snapshots, review decisions and a versioned history of consent. These records are private to the member and authorised administrators; applying does not publish them in the directory.
We use application information to review eligibility, administer membership and plan BWC sessions. Necessary application and membership emails are separate from optional event invitations and marketing. Commercial planning for Graft Collab, personalised introductions, Academy and Store messages, editorial emails, event photography, directory listing and session-specific partner sharing require the applicable permission. Refusing an optional permission does not affect eligibility. We do not sell personal data.
On a new Trade application, contact and sharing options are preselected. Review them and clear any you do not agree to before submitting; saved choices can be changed on your Trade page. Submitting an application is not a request to make your professional answers public. You can change or withdraw permissions on that page. Existing profile visibility controls still apply; Trade approval never makes a private profile public. A WhatsApp group invitation is optional, and joining exposes your phone number and WhatsApp profile to other group participants. A workplace search uses Google Places. Do not include confidential employer information or another person’s private contact details.
Your data download includes your Trade profile, draft, submitted answers and consent and review history. Account deletion removes these professional records, subject to the separate retention of legally required membership and payment records described above. Consent withdrawal does not affect processing already lawfully carried out.
We use cookies for sign-in sessions and security, and browser storage for features such as unfinished tasting notes and dismissed prompts. Some drafts remain on your device. Blocking or clearing this storage can sign you out or remove unsaved work. Passwords are stored as hashes. If you enroll a passkey, we store its public credential and related device metadata, not your fingerprint, face scan or private key. Your device or passkey provider handles that verification. Session, device and network information helps protect accounts and investigate misuse. If you use an available third-party sign-in provider, we process the identity information needed to link it to your account.
A certificate verification link can reveal the recipient name, certificate title, number and issue date to anyone with the link. Public news and external links may contain third-party content. Opening another service, sharing a link or joining an external group is also subject to that service’s privacy practices. Your private wine collection and tasting journal are not made public by using those links.
Last updated 18 September 2026.