EU Privacy Notice

Last updated September 20, 2026.

Data controller

The data controller for this Site is napa.fyi. For any privacy question, contact [email protected].

What we collect and why

We collect name, email address, and message content when you use our forms, and email addresses when you subscribe to our newsletter. Basic server access logs may also be kept by our hosting provider. Details are in our Privacy Policy.

Lawful bases

• Consent. Newsletter subscriptions and form submissions are processed on the basis of your consent, given when you submit the form or subscribe. You may withdraw consent at any time, for example by unsubscribing or emailing us.
• Legitimate interests. Basic server logging for security and operation of the Site is processed on the basis of our legitimate interest in keeping the Site running and secure.

Your rights

• Access. Ask for a copy of the personal data we hold about you.
• Rectification. Ask us to correct inaccurate or incomplete data.
• Erasure. Ask us to delete your data, subject to legal exceptions.
• Restriction. Ask us to limit how we process your data in certain circumstances.
• Portability. Receive the data you provided to us in a common machine-readable format.
• Objection. Object to processing based on legitimate interests.

To exercise any of these rights, email [email protected]. We will respond within one month.

Retention

We keep form messages only as long as needed to respond and maintain records of submissions, and newsletter addresses until you unsubscribe or withdraw consent. Server logs are retained per our hosting provider's standard practices.

International transfers

Our processors (Formspree for forms, Kit for the newsletter) may be based in the United States, so your data may be transferred to and stored in the US. Where this happens, it is handled under appropriate safeguards in line with applicable data protection law.

Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with your national data protection supervisory authority. We would appreciate the chance to resolve it first: contact [email protected].

Effective date: September 2026