Corking Wines Limited is the Data Controller and has an appointed Data Protection Officer. They can be contacted with any questions you may have via the contact routes contained within this document.
All information which you provide directly to us is stored on secure servers within the UK. Any website visit and payment transactions are encrypted using SSL technology and our web hosts and secure payment partners are fully compliant with the Payment Card Industry Data Security Standard (PCI DSS). Appropriate levels of security are applied in the collection, storage and use of your credit or debit card details. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Our Legitimate Interests
Our "Legitimate Interests" include the interests of Corking Wines as a company and how we conduct our business to enable us to provide you with the best possible service and products, and allowing us to give you a quality and secure experience.
As a business we have an interest in marketing our wines and other products to you, therefore we may process your information to personalise the marketing communications that you receive, to ensure that those products are relevant to you.
Our legitimate interests do not override your interests and we will not use your personal data for activities that would have an unreasonable impact on your privacy (unless we have your consent or a legal obligation to do so). When we process your personal data we will always consider the potential impact on your privacy and your privacy rights under current data protection laws.
Legitimate interests can also be relevant to processing that is in your interests. An example of this may be that we process your data to ensure our website is secure and to protect you against fraud when you are making a transaction on our website.
In what instances do we collect your data?
When you visit our website, communicate with us, make a purchase with us or create a user account on our website, there is certain information that you may decide to give to us - For example when you make a purchase and submit your name and address or when making a query to our customer services team.
Whenever you use any website or app (not just ours), little pieces of information are collected by the systems used to run that website. This usually includes cookies and other information such as device manufacturer, browser and operating system type. This information is used to make sure have the best possible experience on Corking Wines website.
The personal data we collect enables us to process your order, for example name and address, as well as allowing us to personalise and improve our service and product offering to you.
The personal data that we may collect includes:
- Your name and contact details. Contact details may include billing and delivery address(es), email address and telephone/mobile number, if you provided it at point of registration/purchase. • Date of birth, if you provided it at point of registration.
- Your user password (stored as an encrypted file), for when you set up a user account with us.
- Your browsing history on Corking Wines website.
- Your communications with us. • Any ratings and reviews that you submit.
- Your order history.
- When you purchase products, your payment card details, if provided (again which are encrypted).
How we use your personal data (and how it helps):
- To manage any user account that you have registered on Corking Wines website, so that you can place orders and consequently so that we can fulfil them.
- For order processing and fulfilment and communication regarding your orders.
- To improve the range of wines that we offer you and to help identify new products that you may be interested in.
- To serve personalised wine recommendations on the Corking Wines website and via third party websites such as Facebook and Instagram.
- To suggest wines to you that we think you may like in the offers that you receive from us and to allow you to keep using your personal wine adviser.
- To help better understand your thoughts on our wines, website and customer service.
- To comply with the law and to detect any illegal activities such as fraud.
Will you share my personal data?
For Corking Wines to provide you with our products and services, some of your personal data may be shared with 3rd party data processors who help us deliver our services. We are careful to ensure that these 3rd parties understand their responsibilities under GDPR and that your personal data is held securely.
We will not sell or share your personal data for any third party company marketing activities.
Processing of your order:
To deliver your order, parts of your personal data need to be passed to our couriers to enable them to complete the delivery, for example your name and address. Also, payments for our products are made through our secure payment processor which includes the transfer of name, address and order details to enable completion of your order.
Complying with a legal request for information from the police, HMRC or the ICO:
It’s rare but, if illegal activity is discovered, such as fraud, by ourselves or our payment processors, information including your personal data may be passed to relevant law enforcement agencies for further investigation. This would also be the case if we received a lawful request to release your personal data by law enforcement agencies.
Sending and determining the content of email communications:
To enable you to receive our email offers your personal data including but not limited to, name and email needs to be shared with our email service provider partner. Also, our personalised wine recommendations are powered by a 3rd party platform – some personal data needs to be shared with this platform to enable you to receive offers that we think you might like.
Improving our service, products and website:
Some personal data may be shared with 3rd parties to allow us to better understand our sales and customer behaviour. This data remains secure and is not used for any other purpose than analysis. Some website visit data may also be tracked and analysed by our analytics partner to allow us to improve your experience on Corking Wines website. Some personal data may be shared to allow you to give feedback on our products and services. To allow us to improve our service to you.
As part of a company sale or merger:
In the event that Corking Wines is acquired or merges with another company, your personal data may be passed to the ultimate holding company.
When will we communicate with you?
If you have purchased from us, you may receive updates of your order progress via email and/or SMS from us and our delivery carriers. There may be instances we may need to contact you in relation to an order, for example if it is known that a delivery may be delayed.
If you have purchased from us, or registered as a user on our site, we may update you on our wine offers and news via e-mail, post or telephone. You of course have the option to opt-out of receiving marketing communications from us at any time.
How to update your communication preferences.
If you wish to change your communication preferences you can log into your Corking Wines customer account and make the changes here. Alternatively, email us, or call or write to us using the details provided at the end of this policy. If you wish to opt-out of receiving our wine offers and news emails you can easily do this by clicking the 'unsubscribe' link that is in the footer of every email sent or by simply replying to any email to let us know that you know longer wish to receive marketing emails from us.
How long is your personal data held?
Third party websites
Corking Wines website may contain links to and from third partner websites. If you follow a link to any website from ours, please note each website will have their own privacy policies. We do not accept any responsibility or liability for these policies. It is your responsibility to check any 3rd party website privacy policies before you submit any personal data to said 3rd party websites.
The right to be informed
The right to rectification
The right to erasure
You have the right to request the erasure of personal data held by us. However, there are certain elements of data or instances that we are not legally allowed to erase, for example, sales data that is required for HMRC reporting or data that forms part of a criminal investigation. A practical example would be although a customer account may have been deleted as per customer request, copies of invoices relating to that customer may still exist.
If it is simply that you no longer want to receive our marketing emails, there is an ‘unsubscribe’ link in every marketing communication that you receive which allows you to inform us that you no longer wish to receive these communications.
The right to access
You have the right to request access to the personal data that we hold on you. To ensure that we’re releasing the data to the correct person, we are required to take reasonable steps to ensure that this request is you and generally, we will ask for two forms of identity.
We are obliged to process your request within one month of your request. The personal data record can be provided to you in electronic or hard copy format as per your request.
The right to data portability
You have the right to reuse your personal data for your own purposes on another service. This includes us helping to transfer your personal data held by us to another IT environment in a safe and secure way, without hindrance to usability.
This isn’t likely to arise with Corking Wines but has been included here so you are clear on your rights under GDPR.
The right to object