Privacy policy

1. Who we are

LlamaPort is run by Global Drink Sales Limited, a company registered in England and Wales (company number 14482844), registered office 10 Egdon Close, Swindon, SN25 1US, United Kingdom. We decide how your personal data is used, which makes us the "controller" under UK and EU data protection law (GDPR). Questions: byron@llamaport.com.

2. What we collect

• Account details: name, email, country, password (stored securely, never readable by us), whether you're a business or an individual, business name and buyer type if you give them, and your age confirmation.
• What you do on LlamaPort: products and brands you view, images you enlarge, likes, passes, favourites, searches (including ones that find nothing), shares, drinks shown in Surprise me and the buttons you press there, clicks to brand websites, social pages and where-to-buy shops, requests and sign-ups. For brands: buyers you like or favourite in the Buyer directory. We record the date, and whether you're trade or a consumer, your country, and how you found us.
• Requests and messages: sample and price requests, messages, their status, and any reports about them.
• Classifieds notices you post, and answers to them.
• Your choices, such as whether you want the monthly LlamaPort news and the monthly listing email.
• Buyers' private business details, only if you choose to add them: samples address, company number, VAT number, EORI number and alcohol licence numbers. These are optional; our advice is to give them to a brand directly instead.
• Brand and supplier contacts: names, roles and work emails of people who claim or manage a listing.
• Payments: handled by Stripe. We see the plan and payment status, never your full card details. Invoices and credit notes are kept in our accounts (Xero) with the business name, address, country and VAT number.
• Technical data: device, browser and rough location from your IP address. If you're not logged in, we only link your activity to a random visitor id after you accept analytics. Without that, we still count the pages you view, your searches and clicks out to brand websites and shops, with no id attached, so the counts can't be linked to you or to each other.

3. Why we use it

• To run LlamaPort and your account (contract).
• To pass your requests and messages to brands, and handle replies (contract).
• To bill paid plans and adverts and keep our accounts (contract and legal obligation).
• To show brands how their listings are doing, and to improve the site (legitimate interests).
• To prevent spam, fraud and misuse, including checking whether a buyer's email address belongs to a business before passing on sample requests, and looking into reports (legitimate interests).
• To send brands a short monthly email about their listing (legitimate interests; you can turn it off in Settings).
• To send the monthly LlamaPort news (new brands on the shelf and how we're growing) to people who ticked yes (consent; unsubscribe from any issue, or in Settings).
• Counting pages viewed by visitors who aren't logged in, with no id attached (legitimate interests: knowing whether anyone reads the site), and linking a visitor's activity with a random visitor id (consent, via the cookie banner).
• To meet legal duties, such as tax records (legal obligation).

4. What brands can see about you

This matters, so here it is plainly:

• Brands on the free plan see numbers (for example, 40 views and 3 likes). Verified brands, free included, also see the buyer type and country of people who like or favourite their drinks. Never names.
• Brands on paid plans see those numbers broken down, for example by buyer type and country, and drinks lovers by country.
• When you make a request or send a message, the brand sees what you wrote, your buyer number, your buyer type (if you're trade) and your country. It sees your name and business only if you choose "Show who I am" for that brand, and it never gets your email or phone number unless you give them. It sees your samples address only if you choose to send it. Messages go through LlamaPort, and we can read them to keep the site safe.
• A Wanted notice in the Classifieds shows your buyer number, buyer type and country, never your name, business or email. Brands that answer it see the same until you choose "Show who I am". A Marriages notice is different: it shows your business name, and you tick to agree to that before you send it.
• Drinks lovers who message a brand show as a number and country (for example, Drinks lover 73120 · France). The brand sees their name only if they choose "Show who I am" for that brand, and never their email or phone number unless they give them.
• Trade Services: when a brand asks a supplier a question, the supplier sees the brand's name and what it wrote, once the supplier's advert is on.

5. If your business is listed in our Buyer directory or Trade Services

We list importers, distributors, retailers and venues so brands can see who buys drinks in each country. The listing shows company facts only: business name, country, buyer type, what you buy and price level, taken from public information and our own trade records.

We never show contact details or the names of people, and we never email buyers on a brand's behalf. Only brands we have checked can see the directory. Brands can like or favourite a business; nothing is sent to you, and who you work with is always your choice.

Trade Services may list companies that supply the drinks trade using public business information (name, logo, service, country, website).

Want a listing updated or removed? Email byron@llamaport.com and we will do it quickly. If you trade under your own name as a sole trader, tell us and we will remove it.

6. Who we share it with

We never sell your data. We use these service providers, who only process it on our instructions:

• Supabase: database, logins and image storage.
• Vercel: website hosting.
• Resend: sending emails.
• Stripe: payments (paid plans and adverts).
• Xero: our accounts (invoices and credit notes for paid plans and adverts).
• Anthropic: AI tools (Claude) that help our small team run and check LlamaPort, for example site health checks, data checks and reports.

We may also share data where the law requires it, or to protect our users or LlamaPort.

7. International transfers

Some providers store or process data outside the UK and EU. Where they do, we rely on approved safeguards such as adequacy decisions or standard contractual clauses.

8. How long we keep it

• Account details: while your account is open. When you close it, we delete them promptly, and from backups within 90 days.
• Activity data: kept to show long-term stats. Once an account is closed, its activity is anonymised so it no longer identifies you.
• Requests and messages: 6 years, for our records.
• Payment records and invoices: as long as tax law requires (usually 6 years).

9. Your rights

You can ask to see, correct, delete or download your data, to restrict or object to how we use it, and to withdraw consent at any time. Email byron@llamaport.com, or use Settings (the cog). You can also complain to the UK Information Commissioner's Office (ico.org.uk), though we'd like the chance to sort it out first.

10. Security

We use encryption, access controls and trusted providers to protect your data. No system is perfect, but we take it seriously and will tell you if something goes wrong that affects you.

11. Under 18s

LlamaPort isn't for under 18s, and we don't knowingly collect their data.

12. Changes

We'll update this policy when things change, and show the date at the top. For significant changes we'll email account holders.