Privacy Policy

Who handles your information

Brewed & Beyond is Peter Davison’s bespoke travel strategy and experience concierge brand. Peter is the contact responsible for enquiries and consultation information handled through this website. Write to peter.davison@fora.travel with the subject “Privacy request”.

Peter is an independent travel advisor affiliated with Fora as a host travel agency. Fora and travel suppliers may have their own responsibilities for information received during a booking; this notice does not replace their privacy notices. Read Fora’s Privacy Policy and its legal centre, including the regional notices relevant to your booking.

Information collected and why

• Enquiries: your name, email address, optional destination and message are used to respond, understand your brief and discuss services. Enquiries are emailed to Peter’s Fora email address.
• Consultations: your name, email address and selected appointment time are stored as an event in Peter’s Google Calendar to hold the slot, so he can confirm personally and send you a calendar invitation with a Google Meet link. No account or sign-in is required.
• Website operation: hosting and authentication services may process IP addresses, device/browser information, security logs and session identifiers to deliver and protect the website.
• Further travel planning: any additional traveller details needed for reservations will be requested separately and shared with the relevant booking partners as needed.

Please do not put passport numbers, payment-card details, medical information or other sensitive information into the enquiry form. Contact Peter first to arrange an appropriate way to share necessary details.

GDPR: purposes and lawful bases

Where the EU or UK GDPR applies, responding to a requested quote and arranging a consultation may be necessary for steps before entering a contract, and providing agreed planning services may be necessary to perform that contract. Security, fraud prevention and proportionate service administration may rely on legitimate interests, subject to your rights. Required records may be retained to meet legal obligations.

Where consent is required for optional marketing, non-essential storage or sensitive information, it must be obtained separately and can be withdrawn. Sending an enquiry is not consent to unrelated marketing.

Services and people who receive information

The website uses Lovable Cloud for hosting and account services, email delivery services for enquiries, and Google Calendar and Meet for consultations. Relevant information may also be received by Fora and selected hotels, transport providers or experience operators when needed to arrange your travel, or by professional advisers and authorities where legally required.

WhatsApp, LinkedIn, Instagram and X links take you to services governed by their own policies. A journal page containing a Vimeo video can connect to Vimeo when its embedded player loads, even before you press play. Google Fonts are loaded externally and can receive connection information such as your IP address.

See Google’s privacy policy, Vimeo’s privacy policy and WhatsApp’s privacy policy for their practices.

Cookies, storage and browser choices

Signing in uses browser storage to maintain your session. Hosting and third-party services may also use cookies or similar technologies. Your browser lets you clear storage and restrict cookies; doing so may affect sign-in or booking. External video and font connections are not blocked by this website’s current settings.

This notice is not a cookie-consent mechanism. Where prior consent is legally required for a third-party technology, that technology must be restricted until consent is obtained.

International handling and retention

Peter works internationally, and information may be accessed from China and processed by services or travel partners in the United States and other destinations. Privacy protections differ between countries. Where GDPR transfer rules apply, an appropriate transfer mechanism—such as an adequacy decision or standard contractual clauses with any necessary additional safeguards—is required. Contact Peter for details of the arrangements relevant to your information.

Information should be kept only for as long as needed to manage the enquiry, consultation or agreed service, and for applicable accounting, legal or dispute-related obligations. Retention varies by record type and by the separate obligations of Fora and suppliers; you can ask about a particular record or request deletion.

Your GDPR privacy rights

Where applicable, you may request access, correction, erasure, restriction or portability of your personal information, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. These rights are subject to legal exceptions. You can complain to your local data protection authority, including in the EU or UK.

GDPR requests generally require a response within one month, with a permitted extension for complex or numerous requests and notice explaining the extension.

California privacy rights

California’s CCPA/CPRA applies only to covered businesses; serving California visitors alone does not establish coverage. If it applies to your information, you may request to know/access it, correct it, delete it, opt out of its sale or sharing for cross-context behavioural advertising, and limit certain uses of sensitive personal information where relevant. You have the right not to be discriminated against for exercising these rights, and may use an authorised agent subject to verification.

The enquiry and booking features do not sell personal information or use it for cross-context behavioural advertising. External services have separate practices. Where California opt-out requirements apply, qualifying Global Privacy Control signals must be honoured; this notice does not certify that every external service has been assessed or that a consent or opt-out system has been implemented.

Where CCPA applies, requests to know, delete or correct generally require acknowledgement within 10 business days and a substantive response within 45 calendar days, subject to permitted extensions and exceptions.

Making a request

Email peter.davison@fora.travel, describe what you would like to exercise and identify the email used for your enquiry or booking. Only information reasonably needed to verify your identity should be requested; please do not send identity documents unsolicited.

This notice may be updated as services change. For booking responsibilities and supplier conditions, see the Terms of Service.