Privacy policy

The short version

The site has one enquiry form. It appears on two pages — Contact and Become a partner — and they are the same form: one set of fields, one destination, one record. The only difference is which of our teams the enquiry is routed to.

If you fill it in, we store what you typed so we can reply to you. There is no analytics, no advertising, no tracking pixel and no third-party script that follows you. We do not sell anything to anyone.

What we collect, and only when you send the form

• What you typed: whether you are a partner or a venue, your name, your organisation, your city, your email address or mobile number, and your message.
• Your IP address and browser string, and the page you arrived from. These are kept to deal with abuse of the form — they are what lets us rate-limit a flood without rate-limiting you.
• When you sent it.

That is the complete list. If you never submit the form, we store nothing about your visit.

Every form on the site

There is one, listed in full so this can be checked rather than taken on trust:

• The enquiry form — on Contact and Become a partner. Fields: audience, name, organisation, city, email or mobile, message. Plus your IP address, browser string and the page you arrived from. Sent to the Coremin team that handles that kind of enquiry. Kept for 24 months.

There is no newsletter sign-up, no account registration, no download gate and no chat widget. If one is added, it belongs in this list before it goes live.

What we do not do

• No analytics of any kind, first or third party.
• No advertising, no retargeting, no pixels.
• No cookies except the one Laravel sets to protect the form against cross-site request forgery, and the session cookie that goes with it. Neither identifies you and neither follows you to another site.
• No selling, renting or sharing of your details for marketing.
• No profiling and no automated decision-making.

Fonts are loaded from Google Fonts, which means Google sees the request your browser makes for them. We are moving these to be served from our own domain so that stops being true.

Why we are allowed to hold it

Because you asked us to contact you. You gave us your details for that purpose and we use them for that purpose. The IP address and browser string are held on the separate basis of keeping the form usable — without them an automated flood would take the form down for everyone.

Who sees it

The people at Coremin who answer enquiries, and our hosting and email providers, who process it on our instructions and for no purpose of their own. Partner enquiries and venue enquiries go to different internal addresses. We do not pass your enquiry to a hospitality partner without telling you.

How long we keep it

Enquiries are kept for 24 months and then deleted, unless you have become a customer, in which case the commercial relationship governs. Ask us to delete yours sooner and we will.

What you can ask for

• A copy of what we hold about you.
• Correction of anything wrong.
• Deletion.
• That we stop contacting you — one email ends it, and we do not ask why.

Write to partners@sourcetoglass.com. We answer within thirty days and usually within two working days.

The scan surface

This policy covers this website. When a guest scans a bottle, that is a separate surface with its own rules, and they are stricter: reading a label requires no account, no cookie and no sign-up, and nothing identifying the person scanning is recorded. A guest may choose to register with a mobile number or an email address to see nearby venues, more offers and to leave reviews — everything beyond that is optional. We store the venue’s location, because sorting a list by distance requires it. We do not store the guest’s.

That surface will carry its own notice before it launches.

Children

This is a business-to-business site and is not directed at children. We do not knowingly collect anything from anyone under 18.

Changes

If this changes materially we will date the change at the top. We do not quietly rewrite it.