We collect personal information when you join GreatWineOnline or when you purchase from this web site. This information is essential to the processing and delivery of your order. The personal data, in any format, that we collect and hold, is important to us and is handled in accordance with this Policy. We are committed to ensuring that your privacy is protected. Where we ask you to provide information by which you can be identified when using any of our services, you can be assured that it will only be used in accordance with this Privacy Statement. We will always explain clearly what data we are collecting about you and why. We will only collect data we need to give you a better experience; to improve and deliver our services to you; and to meet our responsibilities to you
See also our Terms and Conditions before ordering any Products from our Website. You should understand that by ordering any of our Products, you agree to be bound by the terms and conditions which should be read together with this Privacy Policy.
WHAT DATA (PERSONAL INFORMATION) WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.
We collect Device Information using the following technologies:
– “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
– “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
– “We use beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.
Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We refer to this information as “Order Information”.
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.
HOW WE USE YOUR PERSONAL INFORMATION
We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
– communicate with you;
– maintain a Shopping Basket
– screen our orders for potential risk or fraud; and
– when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns)
SHARING YOUR PERSONAL INFORMATION
We will not sell, share, distribute or rent your personal information to third parties unless we have your permission, are required by law to do so, or as set out below to manage your shopping experience with us. We only use your personal information for our own (or for those companies we represent) legitimate interests. Your personal information will only be used for the purpose or purposes it was collected.
We also use Google Analytics to help us understand how our customers use the Site — you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
Finally, we may also be required to share your Personal Information to comply with applicable laws and regulations, to comply with a legal obligation, or to otherwise protect our rights.
KEEPING IN CONTACT WITH YOU
As an active customer of GreatWineOnline, and where you have consented to our communications with you, information is also collected to allow GreatWineOnline to send you offers which we feel will be of particular interest to you. If you would prefer not to receive this information please let us know via email:[email protected]
We use your information to notify you by e-mail about competitions, prizes, special offers etc. If you would rather not receive this information, please let us know via email:
You can also opt out of receiving email marketing communications at any time by clicking on the ‘unsubscribe’ link in the emails from us. Or you can write to us (including full details of your request) at the address provided at the end of this privacy policy.
Your information is held securely within the UK. If your information is transferred outside the UK for any purposes, then we will take measures to ensure that your data remains protected at all times to the standard imposed by the General Data Protection Regulation. We require our trusted third parties to meet GreatWineOnline Ltd’s data protection standards.
HOW LONG WE KEEP YOUR PERSONAL INFORMATION
GWO has a Data Retention Policy to ensure that your data is not held for longer than is necessary We hold the information that you provide to us while you are an active, registered user and customer, and when you register for our services. Personal Information (Data) is retained in accordance with the contract between us. This is in line with data protection legislation. This may include retention necessary to meet our contractual obligations to you, to identify issues or to resolve legal proceedings.
KEEPING YOUR PERSONAL INFORMATION SECURE
In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. Our site is maintained on a secure server. All our suppliers and contractors meet the standards we require. Restrictions are also in place so that users only have access to data that is required for them to do their job.
Staff training is undertaken regularly, and checks are made by IT staff to ensure data quality is maintained. All payment card details are processed by a third party payment processor who encrypts the details using SSL (Secure Socket Layer) technology. Once orders have been processed all encrypted credit card information on the webserver is deleted. We also have in place a comprehensive email security Policy.
Great Wine Online Limited (at the address below) is the data controller for the purpose of the Data Protection Act 2018 (the Act). You, the customer, have the right to access the information which we hold about you and your right of access can be exercised in accordance with the Act.
You can ask us to make changes in how your data is handled and we will respond promptly should a request be made. We may use your data as case studies or client reporting. You have the following rights over the personal data about you that we are holding and processing:
Right to be informed. This Policy provides you with information in relation to how your data is processed. This ensures that we are transparent about what we will do with the information you supply to us.
Right of access. You may request details of personal information which we hold about you under the Data Protection Act 2018 and the General Data Protection Regulation. This is called a Subject Access Request.
Right to request information held is accurate and how to update it. If you believe that any information we are holding on you is incorrect or incomplete, please email us at [email protected] and we will respond as quickly as possible.
Right to erasure. In certain circumstances, you may ask us to delete information about you and stop processing or publishing it (often called the Right to be Forgotten).
Right to object to the processing that is likely to cause you damage or distress. Where you challenge the accuracy or lawful processing of your information, we will consider this.
Right to receive an electronic copy of any information you have consented to us holding known as data portability. You can ask us to provide the personal data about you we hold, securely and in a machine-readable format, so it can be moved, copied or transferred to be used across different services or for you to give to another organisation.
Right to object. We will ensure that we have the right consents in place for sending you information. If you wish to stop receiving communications you can do that by sending us an email to [email protected] at any time.
GreatWineOnline Ltd has a variety of obligations to keep the data that you provide us. These include ensuring that transactions are processed correctly, identifying fraud, and complying with any laws and rules that apply to us and to our service providers. We follow clear guidelines internally to ensure that your data is not held for longer than is necessary. We hold the information that you provide to us while you are an active user of our site and services. Therefore, even if you close your account or terminate agreement with us, we may keep certain data to meet our obligations but for no longer than required or permitted by law.
GreatWineOnline Ltd does use the services of other parties to deal with matters including, but not limited to:
The providers of such services do not have access to certain personal data provided by users of our website. The Payment engine will have access to some personal data for the purpose of verifying payment.
Your information is held securely within the UK. If your information is transferred outside the UK for any purposes, then we will take measures to ensure that your data remains protected at all times to the standard imposed by the General Data Protection Regulation. We require our trusted third parties to meet GreatWineOnline Ltd’s data protection standards and we have carried out due diligence to ensure that they comply..
If you have any questions, or if you would like us to stop processing your information, please do not hesitate to contact customer services, who will be delighted to answer any questions you may have.
You can contact customer services via email at [email protected], or write to us at:
GreatWineOnline Ltd
15 Halifax Way
Welwyn Garden City
Herts AL7 2QH
If you wish to verify the details you have submitted to us you may do so by contacting us via the e-mail address or address given above. Our security procedures mean that we may request proof of identity before we reveal information. This proof of identity will take the form of your e-mail address and password submitted upon registration. You must therefore keep this information safe as you will be responsible for any action which we take in response to a request from someone using your e-mail and password.
If you wish to make a complaint about how we have processed your personal information, and we cannot resolve it, then you have the right to lodge a complaint to the Information Commissioner: The Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF www.ico.gov.uk
NOTIFICATION OF CHANGES
We keep this Statement under regular review and will update this page. You should check this page from time to time to ensure that you are aware of any changes.
Last reviewed July 23rd, 2020
