Privacy policy
This site collects one piece of personal data: the email address you leave in the "Request access" form. This page explains what we do with it, who handles it and how to have it deleted.
1. Who is responsible for your data
The data controller is fabrica Studio, the studio behind Cellar Post.
- Controller: fabrica Studio
- Address: Rosers 3, 08970 Sant Joan Despí, Barcelona, Spain
- Email: hola@fabrica.studio
- Website: fabrica.studio
We have not appointed a data protection officer: given the type and volume of data we process, the law does not require one. For anything about your data, write to the email above.
2. What Cellar Post is
Cellar Post is a concept project by fabrica Studio: a website that shows what a monthly wine and pantry subscription box could look like. The product does not exist yet and may never launch. Nothing can be bought or signed up for on this site.
We say this here because it affects your data: if you leave your email, it is so we can tell you how the project is going, not to enrol you in a service.
3. What we collect
Only what you type into the form:
- Your email address.
- The language you filled the form in (English or Spanish), so we can write to you in that language.
We do not ask for a name, company or phone number. We run no analytics, use no tracking pixels and build no profiles.
To serve the site, Cloudflare (our hosting provider) processes technical connection data, such as your IP address and request headers, in order to deliver the pages and protect the site from attacks. We do not use that data to identify you and we do not keep it. More in section 6.
4. What we use your email for, and on what legal basis
We use your email to:
- Confirm that we have received your request.
- Let you know if Cellar Post launches, changes direction or is shelved.
- Reply if you write to us.
The legal basis is your consent (Article 6(1)(a) GDPR), which you give by submitting the form. You can withdraw it at any time (section 9); withdrawing it does not affect anything done before.
If Cellar Post does launch, we will not use your email to create an account for you or to send you marketing without asking you first.
5. How long we keep it
We keep your email until Cellar Post launches or is shelved, and for no more than 24 months after you sent it. After that we delete it. If you withdraw consent earlier, we delete it then.
6. Who else handles your data
We do not sell or pass on your email to anyone. To run the site and the form we use two providers. They act as processors and handle data only on our instructions:
- Cloudflare, Inc. (United States). Hosts the site and acts as CDN and security layer. It processes the technical connection data and the form submission.
- Resend, Inc. (United States). Sends the emails: the one that reaches us with your request and the confirmation that reaches you.
The email with your request lands in fabrica Studio's mailbox, with our regular email provider.
We would only share your data with any other third party if a law or an authority required us to.
7. Transfers outside the European Union
Cloudflare and Resend are US companies, so part of the processing may happen outside the European Economic Area. Both provide the safeguards the GDPR requires for such transfers: Cloudflare is certified under the EU-US Data Privacy Framework, and both include the European Commission's standard contractual clauses in their data processing agreements.
8. How we filter spam
The form has two anti-bot checks, and neither collects data about you:
- A hidden field that a person never sees or fills in. If it arrives filled, we treat the submission as spam and discard it: nothing is sent or stored.
- A timing check: if the form is submitted less than 1.5 seconds after the page loads, we reject it. That timestamp is used only for the check and is not stored.
9. Your rights
You can exercise these rights at any time:
- Access: know what data we hold about you.
- Rectification: have it corrected if it is inaccurate.
- Erasure: have it deleted.
- Restriction: have us stop using it while a dispute is resolved.
- Portability: receive it in a machine-readable format.
- Objection: object to a specific use.
- Withdrawal of consent, at any time.
To exercise them, write to hola@fabrica.studio from the address you gave us, or reply to any message from us. We answer within one month at most. In practice, if you want off the list, just say so and we delete your email.
If you think we have mishandled your data, you can complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es. We would appreciate the chance to sort it out with you first.
10. Security
The site is served over HTTPS only. There is no user database: your email travels encrypted in transit and ends up in fabrica Studio's mailbox, which only the studio team can access. No system is infallible, but the surface here is small: one email address and nothing else.
11. Children
Cellar Post is aimed at businesses and adults. We do not knowingly collect data from anyone under 14. If you believe a minor has left their email with us, write to us and we will delete it.
12. Changes to this policy
If anything material changes (for example, if Cellar Post launches and starts processing more data), we will publish the new version here and update the date at the top. If the change affects what you already consented to, we will ask you again.
13. Contact
- Email: hola@fabrica.studio
- Phone: +34 623 96 59 99
- Address: Rosers 3, 08970 Sant Joan Despí, Barcelona, Spain
This site sets no cookies; see the cookie policy. The rules for using the site are in the terms and conditions.