Privacy
Last updated 30 August 2026
Lactone Labs Ltd (“we”) operates DRAMFINDER. This page explains what we collect and why. Two very different groups of people touch this service, and they are treated differently.
If you are a guest in a venue
We collect nothing about you. The page you open to find a dram:
- sets no cookies;
- stores nothing on your device;
- runs no analytics, advertising or tracking scripts of any kind;
- has no sign-up, so there is no account and no profile.
The flavours you tap are sent to our server to work out which bottles match, and the answer is sent straight back. That selection is not written to our database and is not associated with you.
As with any website, our infrastructure providers record ordinary technical request logs (including IP address) for short periods to keep the service running and to stop abuse. We do not use those logs to build a picture of individual guests.
If you run a venue
To give you an account and a venue page, we hold:
- Your email address — this is how you sign in. We send a one-time link; we never store a password because there isn’t one.
- Your venue details — name, web address, logo, colours, typeface and welcome message.
- Your bottle list — which bottles you carry, what’s in stock and the prices you choose to display.
The lawful basis is performance of a contract: we cannot provide the service without these. Keeping security and abuse logs rests on our legitimate interests in running the service safely.
Who else sees it
We use third-party infrastructure to host the application and store its data — currently Supabase for the database and authentication, and a cloud hosting provider for the application itself. They process data on our instructions only.
We do not sell data, share it with advertisers, or use it to train anything. One venue can never see another venue’s list, prices or guests — that separation is enforced in the database itself, not merely in the interface.
How long we keep it
Your account and venue data are kept while your subscription is active. If you cancel, we delete them within 90 days, except where we must keep billing records for longer to meet our tax and accounting obligations.
Your rights
Under UK data protection law you can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, or object to our using it. Email hello@lactonelabs.co.uk and we will respond within one month.
If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can fix it.
Changes
If we change what we collect, we will update this page and change the date above. For anything significant we will email account holders rather than relying on you to notice.