Great Wheatley Vineyard Limited (“Great Wheatley Vineyard”) is a Limited Company incorporated in England and Wales registered under company number 13578851, with registered office at Millhouse, 32–38 East Street, Rochford, Essex, SS4 1DB and is a ‘controller’ under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. Great Wheatley Vineyard has prepared this data privacy notice to describe its practices regarding the collection, storage, use, transfer and other processing of individually identifiable information when you contact us, use our services or interact with our websites such as greatwheatley.com; (together the ‘websites’)
We collect personal information from you when you complete an online purchase via our website or if you provide us with your personal information details by email, telephone or any other means of communication. In particular we may collect and process the following personal information from you which is defined as ‘personal data’:
- your name, which may include your signature
- your date of birth
- your address and email address
- your telephone number
- your financial information, including your bank details or card payment details
- your IP address, location data, cookie and social identifiers
- your social media usernames
The basis on which we process your personal data is one or more of the following:
- It is necessary for the performance of our contract with you
- It is necessary for us to comply with a legal obligation
- It is in our legitimate interest to do so
- You have given us your consent (this can be withdrawn at any time by contacting contact@greatwheatley.com)
We may use your information for the following purposes:
- Communicating with you about our goods and services
- interacting with you via our websites and social media platforms
- Promotion of our goods and services, including but not limited to, informing you of services that may be of interest to you
Great Wheatley Vineyards will not transfer personal data about you to third parties for the purpose of providing or facilitating third-party advertising to you. We will not sell personal data about you to a third party.
We may transfer your personal data to trusted third parties in some circumstances, including:
- Service providers based in the United Kingdom who provide IT and system administration services to us
- Banks and payment processors
- identification verification services
- Debt collection agencies if you do not pay our invoices
- Where sharing is required to fulfil a contract
- By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes
- We may from time to time transfer your personal data to a country outside of the EEA. For example, when we store personal data on a cloud server
- We shall ensure that all the information that you provide to us is kept secure using appropriate technical and organisational measures
- In the event of a personal data breach we have in place procedures to ensure that the effects of such a breach are minimised and shall liaise with the Information Commissioner's office (ICO) and with you as appropriate
- More information can be obtained by contacting contact@greatwheatley.com
You have the following rights under the GDPR:
- Request access to your personal data. Please do so in writing to the Registered Office Address
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Right to withdraw consent