Last updated: 1 January 2025
1. Information We Collect
We collect the following categories of personal information when you use our website and services:
- Personal Information: Your name, email address, telephone number, and delivery address when you create an account, place an order, or contact us.
- Payment Information: Payment details are processed securely by our third-party payment providers. We do not store your full card details on our servers.
- Browsing Data: Your IP address, browser type, operating system, pages visited, and the date and time of your visits.
- Order History: Records of your purchases, preferences, and interactions with our services.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To process and fulfil your orders, including delivery and payment processing.
- To personalise your experience and provide tailored wine recommendations based on your preferences and purchase history.
- To send you marketing communications about our wines, events, and promotions, but only with your explicit consent.
- To improve our website, services, and customer experience through analysis and feedback.
- To comply with legal obligations, including tax reporting and regulatory requirements.
3. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Contract Performance: Processing is necessary to fulfil our contractual obligations to you, such as processing orders and arranging delivery.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, improving our services, and website analytics.
- Consent: Where you have given us explicit consent, such as subscribing to our newsletter or opting in to marketing communications.
- Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including tax and financial reporting requirements.
4. Data Sharing
We may share your personal information with the following categories of third parties:
- Payment Processors: To securely process your transactions.
- Delivery Partners: To fulfil and deliver your orders, including specialist wine carriers.
- Analytics Providers: To help us understand how our website is used and to improve our services.
We will never sell your personal data to third parties. We only share data where it is necessary for the purposes described above or where required by law.
5. Data Retention
We retain your personal data for the following periods:
- Order Records: 7 years from the date of purchase, as required by French tax and accounting laws.
- Analytics Data: 26 months, in line with standard analytics retention periods.
- Marketing Consent: Until you withdraw your consent. You may unsubscribe at any time.
6. Your Rights
Under the GDPR and applicable French data protection laws, you have the following rights:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request that we correct any inaccurate or incomplete data.
- Right to Erasure: You may request that we delete your personal data, subject to legal retention requirements.
- Right to Restriction: You may request that we restrict the processing of your data in certain circumstances.
- Right to Data Portability: You may request a copy of your data in a commonly used, machine-readable format.
- Right to Object: You may object to the processing of your data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact our Data Protection Officer at [email protected].
7. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:
- SSL/TLS encryption on all pages where personal data is transmitted.
- Secure servers with restricted access controls.
- Regular security audits and vulnerability assessments.
- Staff training on data protection and information security practices.
8. International Transfers
Where we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place. These include Standard Contractual Clauses approved by the European Commission, ensuring that your data receives a level of protection consistent with GDPR requirements.
9. Children's Privacy
Our website and services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under the age of 18. All wine sales are restricted to adults of legal drinking age. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by email or by posting a prominent notice on our website prior to the changes taking effect. We encourage you to review this page periodically.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer:
- Email: [email protected]
- Address: 12 Rue du Faubourg Saint-Honore, 75008 Paris, France
We are registered with the Commission Nationale de l'Informatique et des Libertes (CNIL) in France.