This Privacy Policy explains how Satiate collects, uses, stores and protects personal information when you read our magazine at satiatepdx.com, sign up for our newsletter, or book one of our services, from wine-country tours and wine education classes to cellar consulting, copywriting, food photography and custom culinary itineraries. We have written it to be read, not skimmed past, and we have tried to keep it as plain as the subject allows. Last updated: October 1, 2026.
Summary
- We collect only what you choose to send us through our forms (such as your name, email and booking details), plus the basic technical data any web server receives.
- We do not use third-party analytics, advertising trackers or social-media embed scripts, and we do not set cookies by default.
- We never sell your personal information or share it for cross-context behavioral advertising.
- We use your information to reply to you, deliver the services you book, and send our newsletter if you opt in. You can unsubscribe at any time.
- You can ask to access, correct, delete or port your data, and Oregon residents can appeal our decision. Email [email protected] or use our contact form.
1. Who we are and how to reach us
Satiate ("Satiate," "we," "us" or "our") is an independent food, wine and travel magazine based in Portland, Oregon, USA. For the purposes of the EU and UK General Data Protection Regulation (GDPR), Satiate is the data controller of the personal information described in this policy. Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and the Oregon Consumer Privacy Act (OCPA), we act as the business or controller that decides why and how your information is processed.
You can contact us about anything in this policy by email at [email protected] or through our contact form.
Scope of this policy
This policy covers satiatepdx.com, our email newsletter, and the information we handle when you enquire about or book our services. It does not cover the websites of wineries, restaurants, hotels, transport companies or other businesses we write about or link to; those have their own privacy practices.
2. Information we collect
We aim to collect as little as possible. Because satiatepdx.com is a static website with no user accounts, most visitors give us no personal information at all beyond the technical data described below.
Information you give us
- Contact and booking form: your name, email address, phone number (optional), the service you are interested in, your preferred date, group size, your message, and your confirmation of the consent checkbox.
- Newsletter signup: your email address.
- Service delivery details: when you book a service, you may also tell us about dietary requirements or allergies, accessibility needs, pickup locations, the names of guests in your party, or preferences for a consultation or itinerary. Please share only what we need.
- Correspondence: anything you include when you email us, such as story tips, corrections or feedback.
- Payment information: if you pay a deposit or invoice, payment is handled by a bank or payment provider. We receive confirmation of payment and limited details such as your name, the amount and date; we do not receive or store full card numbers.
Information collected automatically
When your browser loads any page, our hosting provider's servers automatically receive standard technical information: your IP address, the date and time of the request, the page requested, your browser type and version, operating system, and the referring page. This is logged for security and troubleshooting. We do not use it to build profiles of visitors and we do not combine it with form data.
Information stored on your own device
Our site uses your browser's localStorage and sessionStorage to remember your cookie-consent choice and to show your first name on the thank-you page after you submit a form. This information stays in your browser and is not sent to us. Our Cookie Policy lists every item in detail.
Sensitive information
We do not ask for sensitive personal information. The one exception is health-related information you choose to give us, such as a food allergy or a mobility need, so that we can plan a safe tour, class or itinerary. We use it only for that purpose, share it only with the venue or provider who needs it, and delete it under the retention schedule below.
3. Where your information comes from
- Directly from you, through our forms, by email, or in conversation during a service.
- From the person who booked, if you are a guest in someone else's group (for example, a name and dietary note passed along by the organizer). If you book for others, please let them know you are sharing their details with us.
- From your browser, as the automatic technical data described above.
- From business partners, rarely, such as a winery or hotel that refers you to us at your request.
We do not buy personal information from data brokers or collect it from social-media platforms.
4. How we use your information and our legal bases
The GDPR requires us to identify a legal basis for each use of personal information. We apply the same discipline for all visitors, wherever they live.
| Purpose | Information used | Legal basis (GDPR) |
|---|---|---|
| Replying to enquiries, tips and corrections | Name, email, phone, message | Legitimate interests (responding to people who contact us); steps at your request before a contract |
| Quoting, booking and delivering services | Contact details, date, group size, preferences, guest names, dietary or accessibility notes | Performance of a contract; explicit consent for any health-related details |
| Sending the newsletter | Email address | Consent (you can withdraw at any time) |
| Invoicing, accounting and tax records | Name, contact details, payment confirmation | Legal obligation |
| Keeping the site secure and working | Server log data | Legitimate interests (security and reliability) |
| Remembering your consent and interface choices | Browser storage on your device | Strictly necessary for the service you request; consent for optional features |
| Protecting our rights and handling disputes | Relevant records | Legitimate interests; legal obligation |
We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects, and we do not use it for targeted advertising.
5. How long we keep your information
We keep personal information only for as long as we need it for the purpose it was collected, and then delete or anonymize it.
| Type of information | Retention period |
|---|---|
| Enquiries that do not lead to a booking | Up to 24 months after our last exchange |
| Booking and service records (excluding health details) | Up to 7 years, to meet tax and accounting requirements |
| Dietary, allergy and accessibility notes | Deleted within 90 days after your service is completed |
| Newsletter subscription | Until you unsubscribe; we then keep your email on a suppression list so we do not email you again |
| Server logs held by our hosting provider | Generally no longer than 90 days, unless needed to investigate a security incident |
| localStorage item (consent choice) | On your device until you clear them or change your choice |
| sessionStorage item (thank-you page first name) | On your device until you close the browser tab |
6. Who we share information with
We share personal information only when it is needed to run the site or deliver what you asked for.
Service providers (processors)
- Website hosting provider, which serves our pages and processes server logs on our behalf.
- Email and newsletter provider, which stores our correspondence and mailing list and delivers our emails.
- Payment provider or bank, which processes deposits and invoice payments.
These providers act on our instructions under contracts that require them to protect your information and not use it for their own purposes.
Partners who help deliver your service
When you book a tour, class or itinerary, we share the minimum needed with the wineries, restaurants, hotels, guides and transport providers involved, typically a name, group size, arrival time and any dietary or accessibility notes. Those businesses handle that information under their own privacy policies.
Legal and safety reasons
We may disclose information if required by law, court order or a lawful request from public authorities, or where necessary to protect the safety of guests, staff or the public, or to establish or defend legal claims.
Business changes
If Satiate is reorganized, merged or sold, personal information may transfer to the successor, which will remain bound by the commitments in this policy.
No selling or sharing for advertising
We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law. We do not process it for targeted advertising or for profiling under Oregon law. We have not done so in the past 12 months.
7. International transfers
Satiate is based in the United States, and our service providers may store data in the United States or other countries. If you contact us from the European Economic Area, the United Kingdom or Switzerland, your information will be transferred to and processed in the United States, which may not offer the same level of protection as your home country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or a provider's certification under an applicable data privacy framework, and on the transfer being necessary to deliver a service you have requested.
8. How we protect your information
We use reasonable administrative, technical and physical measures appropriate to a small publisher, including:
- HTTPS encryption for every page and form on satiatepdx.com;
- a static site architecture with no user database or login system to attack;
- self-hosted fonts and scripts, so your browser is not sent to third-party servers when you read our pages;
- strong, unique passwords and two-factor authentication on our hosting and email accounts;
- access to personal information limited to the people who need it to serve you.
No method of transmission or storage is completely secure. If we learn of of a breach that affects your personal information, we will notify you and the relevant authorities as required by law.
9. Children and age requirements
Much of our content concerns alcohol, and our tours and classes include alcohol tastings. Satiate is intended for adults of legal drinking age, which is 21 or older in the United States. We do not direct our site or services to anyone under 21, and we do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, please contact us and we will delete it promptly.
10. Your privacy rights
Depending on where you live, privacy laws give you specific rights. Whether or not a particular law formally applies to a business of our size, we extend the following rights to every reader and client.
| Right | What it means |
|---|---|
| Know and access | Confirm whether we process your information and receive a copy of it, along with the categories of sources, purposes and recipients. |
| Correction | Ask us to fix information that is inaccurate or incomplete. |
| Deletion | Ask us to delete your information, subject to records we must keep by law. |
| Portability | Receive your information in a commonly used, machine-readable format. |
| Opt out | Opt out of the sale of personal information, targeted advertising and profiling. We do none of these, but you may still submit a request. |
| Withdraw consent | Withdraw consent at any time, for example by unsubscribing from the newsletter or changing your cookie settings. |
| Object or restrict (GDPR) | Object to processing based on legitimate interests, or ask us to limit how we use your data. |
| Third-party list (Oregon) | Obtain a list of the specific third parties to which we have disclosed your personal data. |
| Non-discrimination | You will not receive worse service or prices for exercising your rights. |
Oregon residents: right to appeal
If we decline to act on a request you have made under the Oregon Consumer Privacy Act, we will explain why and tell you how to appeal. To appeal, reply to our decision or email [email protected] with the subject line "Privacy appeal." A different person from the one who handled your original request will review it, and we will tell you the outcome in writing, with our reasons, within the period required by law. If you are not satisfied with the result of your appeal, you may contact the Oregon Department of Justice.
EU and UK residents
You also have the right to lodge a complaint with the data protection authority in the country where you live or work. We would appreciate the chance to resolve your concern first.
11. Do Not Track and Global Privacy Control
Because we run no third-party tracking, analytics or advertising, there is no cross-site tracking for a Do Not Track signal to switch off. We nevertheless honor these signals. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising, and as a decision to decline optional storage, applied to that browser. You do not need to do anything else.
12. How to exercise your rights
- Email [email protected] or use our contact form, stating which right you wish to exercise. A subject line such as "Privacy request" helps us route it quickly.
- We will acknowledge your request, usually within 10 business days.
- We will verify your identity, normally by confirming that you control the email address we have on file. If the request concerns booking records, we may ask you to confirm a booking date or other details we already hold. We will never ask for more information than we need, and we use verification details only to verify.
- We will respond within 45 days (or within one month where the GDPR applies). If we need more time, we will tell you why, and the extension will not exceed what the law allows.
Authorized agents
You may use an authorized agent to make a request on your behalf. We may ask the agent for signed permission from you and may ask you to confirm your identity directly with us.
Cost
Requests are free. If requests are manifestly unfounded or excessive, for example repetitive, we may charge a reasonable fee or decline, and we will explain our reasons.
13. Changes to this policy
We may update this policy when our practices, our services or the law change. The "Last updated" date at the top shows when it was last revised. If we make a material change, such as introducing a new type of data collection or a new third-party service, we will post a notice on our site and, where appropriate, email newsletter subscribers or ask for fresh consent before the change takes effect.
14. Contact us
If you have a question, a request or a concern about privacy at Satiate, please get in touch:
- Email: [email protected]
- Contact form: our contact page
- Location: Portland, Oregon, USA
You may also wish to read our Cookie Policy, Terms of Use and Disclaimer.