Privacy Policy

Last updated: October 25, 2026

Privacy Policy

This Privacy Policy explains how Gilded Lot (gildedlot.com) collects and uses personal data, and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Dutch GDPR Implementation Act (UAVG) and the Dutch Telecommunications Act rules on cookies.

1. Who Is Responsible for Your Data

The data controller is LiBrAi, a sole proprietorship established in the Netherlands.

Address: Segment 3, Box C1940, 6921 RC Duiven, The Netherlands
Chamber of Commerce (KvK): 42049145
VAT: NL004086277B63

Email: info@gildedlot.com

We have not appointed a Data Protection Officer, as this is not required for our activities. Please direct all privacy questions to the email address above.

2. What Data We Process and Why

Visiting the Website

When you visit gildedlot.com, our hosting provider’s servers automatically process technical data such as your IP address, browser type, operating system, referring page, the pages you request and the date and time of access. We need this data to deliver the website, keep it secure and diagnose errors.

  • Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR).
  • Retention: server log files are kept for a limited period, in line with our hosting provider’s standard log retention, and then deleted or anonymized.

Contacting Us

If you email us, we process your name, email address and the content of your message to respond to you.

  • Legal basis: our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR), or steps prior to entering into an agreement at your request (Art. 6(1)(b) GDPR).
  • Retention: up to 12 months after our correspondence ends, unless a longer period is required by law.

Cookies and Similar Technologies

We use cookies and similar technologies. Functional cookies that are strictly necessary for the website to work (for example, to remember your cookie choices) are placed without consent. All other cookies, including statistics, marketing and affiliate tracking cookies, are only placed after you give consent via our cookie banner.

  • Legal basis: consent (Art. 6(1)(a) GDPR) for non-essential cookies; legitimate interest (Art. 6(1)(f) GDPR) for strictly necessary cookies.
  • Withdrawing consent: you can change or withdraw your consent at any time via the “Manage Consent” link at the bottom of every page. Withdrawal does not affect processing carried out before withdrawal.

Our cookie banner and consent records are managed with the Complianz consent management plugin for WordPress. Complianz stores your consent choice in a cookie in your own browser. A full, up-to-date list of the cookies we use, their purpose and their duration is available in our Cookie Policy: Cookie Policy (EU).

Affiliate Links

Some links on Gilded Lot are affiliate links. If you have consented to marketing cookies and click such a link, the affiliate network or partner may place a cookie or use a similar identifier to record that you arrived from our site, so that a commission can be attributed if you make a purchase or sign up. We currently work with, or expect to work with, the following affiliate networks, each of which acts as an independent controller or as a processor for the advertiser:

  • Awin (Awin AG and affiliates)
  • Partnerize (Performance Horizon Group Ltd. and affiliates)
  • CJ (Commission Junction LLC)
  • Impact (Impact Tech, Inc.)

We do not receive your name or contact details from these networks. We only receive aggregated or pseudonymized reports of clicks and transactions. When you complete a purchase on a partner’s website, that partner’s own privacy policy applies. Please consult the privacy policies of these networks and partners for more information.

  • Legal basis: consent (Art. 6(1)(a) GDPR).

Newsletter (Coming Soon)

We plan to launch an email newsletter. When it launches, we will only send it to you if you have subscribed and confirmed your subscription (double opt-in). We will then process your email address and, optionally, your first name, as well as basic data on opens and clicks if you consent to this. You can unsubscribe at any time via the link in every email. We will update this policy with the name of our newsletter service provider before the newsletter launches.

  • Legal basis: consent (Art. 6(1)(a) GDPR).
  • Retention: until you unsubscribe, after which we keep only a record of the unsubscription to respect your choice.

Advertising (Future)

We may in the future display advertisements. If we do, any advertising cookies or personalized advertising will only be used with your prior consent, and this policy will be updated to name the advertising partners involved before they are activated.

3. Hosting and Service Providers

Gilded Lot runs on WordPress and is hosted by STRATO AG in Germany, within the European Union. STRATO processes data on our behalf as a processor under a data processing agreement in accordance with Art. 28 GDPR.

We may use other service providers (for example, for email or security) who process data only on our instructions and under appropriate agreements.

4. Transfers Outside the European Economic Area

Some affiliate networks or future service providers may process data outside the European Economic Area, for example in the United States or the United Kingdom. Where this happens, we make sure appropriate safeguards are in place, such as an adequacy decision (including the EU-U.S. Data Privacy Framework for certified companies, or the adequacy decision for the United Kingdom) or the European Commission’s Standard Contractual Clauses.

5. We Do Not Sell Your Data

We do not sell or rent your personal data. We do not use your data for automated decision-making or profiling with legal or similarly significant effects.

6. Your Rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to processing, including processing based on our legitimate interests;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email info@gildedlot.com. We will respond within one month. We may ask you to verify your identity.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). You may also contact the supervisory authority in your own EU country of residence.

7. Visitors Outside the EU

Gilded Lot is read worldwide. Where local laws (such as U.S. state privacy laws) give you additional rights, we will honor requests made under those laws to the extent they apply to us. As stated above, we do not sell personal information.

8. Minors

Gilded Lot is intended for adults. We do not knowingly collect personal data from anyone under 16. Content about wine and spirits is intended only for readers of legal drinking age in their country (18+ at a minimum).

9. Security

We take appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS/SSL), up-to-date software and restricted administrative access.

10. Changes to This Policy

We may update this Privacy Policy, for example when we launch our newsletter or add new partners. The date at the top of this page shows when it was last updated. Significant changes will be highlighted on this page.

11. Contact

For any questions about this Privacy Policy or your personal data, email info@gildedlot.com.