This Privacy Policy explains how City Story handles personal data when you use groundgaragekeystone.beer, make an enquiry, or book a guided culinary or market experience.
This introduction outlines how the policy is organized and where to find key information.
Data handling overview
We may collect identification and contact details, booking details, group size, preferred dates, dietary information, communication records, payment-related information, and technical data such as device and usage information. Where needed for a route or tasting arrangement, we may also process information you choose to provide about preferences or practical requirements.
We receive data when you submit a consultation request, contact us by email or phone, make a booking, share dietary or route preferences, or communicate with us before or during a tour. We also collect limited technical information automatically through the website and related service tools.
We may use essential cookies to support site security and core functions, and limited preference or analytics cookies to understand how the site is used and to improve performance. Cookies may be session-based or persistent depending on their purpose.
You can usually manage cookies through your browser controls, including blocking or deleting them. Where the website uses preference or analytics cookies, your browser settings may allow you to refuse them. If cookies are disabled, some features may not work as intended.
We use personal data to respond to enquiries, manage consultation requests, confirm availability, arrange routes and tastings, process payments, communicate about bookings, handle dietary or practical information you provide, maintain records, improve website performance, and meet legal, accounting, and security obligations.
We may share personal data with payment processors, website and hosting providers, communication tools, and other operational partners that help us manage bookings, payments, site functionality, and customer communications. Where a third party acts on our behalf, we expect it to use the data only for the agreed purpose and to apply appropriate safeguards.
We may disclose personal data to public authorities, regulators, or other parties when required to comply with legal obligations, respond to lawful requests, protect our rights, or address fraud, security, or safety concerns.
Depending on your location and the circumstances, you may have rights to access, correct, delete, restrict, or object to certain processing, and to request a copy of data you provided. Some requests may be limited where we must keep information for legal, contractual, or security reasons.
To make a privacy request, provide enough information for us to verify your identity and identify the relevant record. We may ask for additional details before responding, and we will handle the request within the period required by applicable law or, if no specific period applies, within a reasonable time.
We keep personal data only for as long as needed for the booking, service, accounting, dispute-handling, or legal purpose for which it was collected. When data is no longer needed, we delete it, anonymize it, or retain it only where law requires a longer period.
If we make material changes, we will update the policy on the website and may provide additional notice where appropriate. The revised version applies from the date it is posted unless a different effective date is stated.
