We are totally committed to protecting the privacy of our site visitors and customers and to promoting the responsible consumption of alcohol. It’s that simple. That means we will not disclose information about our customers to third parties except where it is part of providing a service to you - e.g. arranging for a product to be sent to you, carrying out credit and other security checks and to help us to understand the wines and other services we can best provide you. We never sell your data to third parties. Ever.
We may update this policy from time to time to take account of any new business activity or to reflect any changes in law or best practice in relation to data protection. We will notify you if we do so. This policy was last updated on 27 April 2018.
Why do we collect your personal data?
We collect, use and store your personal data so that we can offer you the products and services you expect from us. We collect your personal data for three main reasons:
- To process and deliver your orders
- To personalise, report on and improve the products and services we provide
- To send you our latest news and wine offers via email, telephone or post based on your mailing preference
How do we collect your personal data?
When you create a customer account, visit our website, sign up to our mailing list, communicate with us or purchase our products or services, you may choose to give us certain information. For example, when you give us your name and address, tell us about your wine preference or when you purchase wine from us. It allows us to keep track of your preference, so we know when to communicate and when not to communicate with you. We also use information to make sure that you are receiving information in a relevant and timely manner.
What categories of personal data do we collect?
We may collect the following information about you:
- Your name, email address, phone number and address including postcode
- Purchases and orders made by you
- Payment methods (note that we do not store your payment information details. These are held by secure payment providers)
- When you set up an account, your password and your mailing preference
- Your wine preference through our fun wine quiz
- Your IP address and online browsing history on our website
- Your correspondence with us via email, webchat, telephone or post
Personal data we will process to fulfil your orders
We will need to process your personal data to fulfil any order you place and to comply with the law. For example:
We will share your name, address and, where applicable, telephone number with our fulfilment agents. We will share your payment details with our bank or clearing house so that we can process payment for your order. We will share your name, address and telephone numbers with an external provider to verify your age when you first purchase from us. This is because we are required by law to ensure that we sell products containing alcohol only to people aged 18 or over.
How we use and/or process your personal data
Our web server automatically recognises your domain name when you visit our web site. We also collect the email addresses of people who communicate with us via email and aggregate information on user visits. Information volunteered such as survey information and/or site registrations is also collected. The information we collect is used primarily for internal review and to improve the content of our services and offerings. It is also used to notify users about updates to our services. We do not sell your information with other organisations for commercial purposes.
To make our messages to you more relevant, we may use your personal information to create a profile of your interests and preference or to present you with personalised offers on our website, through social media channels such as Facebook and/or by placing banner advertisements on third party websites. This means we could use pieces of information you’ve either given us directly or your behaviour to create a profile. This not only gives us an idea of who our customers are, but also helps to make sure that when we get in touch with you, it is done in a way which is relevant and tailored to your preferences.
Please note that we may occasionally commission insight companies or use industry-standard profiling products offered by third parties to help us do this. This enables us to maximise the use of our marketing budget, so we’re able to offer our wine at the best price to our customers. We shall always ensure that any activity is implemented in a fair and balanced way. It is your right to opt out of your information being used for profiling, and there is information on how to do this below.
If you registered your email with us on an occasion such as, but not limited to, making a purchase, registering on our site or entering a social media or email competition, we may update you on our latest products, news and special offers via email, post & telephone with your consent. We will not sell, or make available, your name, address, email address or any other personal information to any third party (excluding partners from whom you may have linked to our site) without your permission. Our business is the business of selling and marketing wine, not people’s information.
How to unsubscribe from us
You have the right to opt out of receiving communications from us at any time. In each email we sent to you for marketing purposes, there will be a specific link for you to click on to unsubscribe or you can do so by updating your mailing preference. Alternatively, you can contact us at firstname.lastname@example.org or call 020 3603 1646.
A cookie is a small information file that is sent to your computer and is stored on your hard drive. If you have registered with us then your computer will store an identifying cookie which will save you time each time you re-visit our website, by remembering your personal details. You can change the settings on your browser to prevent cookies being stored on your computer without your explicit consent. To access your account details or place an order online you will still need to log in.
Storage methods and duration
Honest Grapes may store your information in its secured off-site databases through third-party providers. We will not keep your personal data for longer than is necessary for the purposes described in this policy. We will keep personal data while your account is active. The information may be retained and used by Honest Grapes for a reasonable period, reflecting our need to meet any legal or regulatory requirements, or to resolve a legal dispute. We may also keep different types of personal data for different lengths of time (for instances, we may need to keep certain personal data relating to your purchases in order to comply with HMRC’s VAT reporting requirements). This means we may retain information after an individual ceases to use Honest Grapes services or after the individual has ceased interacting with Honest Grapes. Except where the law, authorities or regulatory bodies require us to retain it for longer, we retain browsing history for a reasonable period after it was generated.
Protecting your security
We may use personal information provided by you in order to conduct appropriate anti-fraud checks. Personal information that you provide may be disclosed to a credit reference or fraud prevention agency, which may keep a record of that information. This is done only to confirm your identity - a credit check is not performed and your credit rating is unaffected.
Transfers of your personal data
The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or one of our suppliers. Such processing may, for example, be required in order to fulfil your order, process your payment details or provide support services.
We can’t guarantee the security of transmission of information via the Internet. We will do our best to protect your personal data, but cannot guarantee the security of data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Disclosures of your personal data
We do not disclose information to third parties outside Honest Grapes, except under the following circumstances:
- in the event that Honest Grapes sells or buys any business or assets;
- if Honest Grapes or substantially all of its assets are acquired by a third party, in which case personal data which we hold about our customers may be one of the transferred assets; or
- if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of; or to protect the rights, property, or safety of Honest Grapes, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Our site may contain links to and from the websites of our partner networks, advertisers and other third parties. If you follow a link to any of these websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check their policies before you submit any personal data.
We are committed to being a responsible supplier of alcohol and promote a responsible attitude to drinking. We may use personal information provided by you in order to conduct appropriate age verification checks. Personal information that you provide may be disclosed to an age verification agency, which may keep a record of that information. This is done only to confirm your age.
Checking your Details
If you wish to verify the details you have submitted to us you may do so by contacting us via the email address or address given below. Our security procedures mean that we may request proof of identity before we reveal information. This proof of identity will take the form of your email address and password submitted upon registration. You must therefore keep this information safe as you will be responsible for any action which we take in response to a request from someone using your email and password. We would strongly recommend that you do not use the browser's password memory function as that would permit other people using your terminal to access your personal information.
Knowing your rights
You have a number of rights under data protection laws; these are listed below:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to transfer your personal data (portability)
- The right to object
You have the right to access, modify and delete the personal information that we hold about you. If you would like a copy of some or all of your personal information, please let us know by emailing us at email@example.com or call 020 3603 1646.
Strictly necessary cookies
These allow the website to function, including creating shopping baskets and logging in/out of your account.
|_ab||Used in connection with access to admin.||2y|
|_customer_account_shop_sessions||Used in combination with the _secure_account_session_id cookie to track a user's session for new customer accounts||30d|
|_secure_account_session_id||Used to track a user's session for new customer accounts||30d|
|_secure_session_id||Used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected.||24h|
|_shopify_country||For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request.||session|
|_shopify_m||Used for managing customer privacy settings.||1y|
|_shopify_tm||Used for managing customer privacy settings.||30min|
|_shopify_tw||Used for managing customer privacy settings.||2w|
|_storefront_u||Used to facilitate updating customer account information.||1min|
|_tracking_consent||Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.||1y|
|_cmp_a||Used for managing customer privacy settings.||1d|
|c||Used in connection with checkout.||1y|
|cart||Used in connection with shopping cart.||2w|
|cart_currency||Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.||2w|
|cart_sig||A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations.||2w|
|cart_ts||Used in connection with checkout.||2w|
|cart_ver||Used in connection with shopping cart.||2w|
|checkout||Used in connection with checkout.||4w|
|checkout_token||Used in connection with checkout.||1y|
|customer_account_locale||Used in connection with new customer accounts||1y|
|dynamic_checkout_shown_on_cart||Used in connection with checkout.||30min|
|hide_shopify_pay_for_checkout||Used in connection with checkout.||session|
|keep_alive||Used in connection with buyer localization.||2w|
|master_device_id||Used in connection with merchant login.||2y|
|previous_step||Used in connection with checkout.||1y|
|discount_code||Used in connection with checkout.||session|
|remember_me||Used in connection with checkout.||1y|
|secure_customer_sig||Used to identify a user after they sign into a shop as a customer so they do not need to log in again.||1y|
|shopify_pay||Used in connection with checkout.||1y|
|shopify_pay_redirect||Used in connection with checkout.||1 hour, 3w or 1y depending on value|
|shop_pay_accelerated||Used in connection with checkout.||1y|
|source_name||Used in combination with mobile apps to provide custom checkout behavior, when viewing a store from within a compatible mobile app.||session|
|storefront_digest||Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.||2y|
|tracked_start_checkout||Used in connection with checkout.||1y|
|checkout_session_lookup||Used in connection with checkout.||3w|
|checkout_prefill||Used in connection with checkout.||5m|
|checkout_queue_token||Used in connection with checkout.||1y|
|checkout_queue_checkout_token||Used in connection with checkout.||1y|
|checkout_worker_session||Used in connection with checkout.||3d|
|checkout_session_token||Used in connection with checkout.||3w|
|checkout_session_token_<<token>>||Used in connection with checkout.||3w|
|cookietest||Used to ensure our systems are working correctly||1m|
|order||Used in connection with order status page.||3w|
|identity-state||Used in connection with customer authentication||24h|
|identity-state-<<token>>||Used in connection with customer authentication||24h|
|identity_customer_account_number||Used in connection with customer authentication||12w|
|card_update_verification_id||Used in connection with checkout.||20m|
|customer_account_new_login||Used in connection with customer authentication||20m|
|customer_account_preview||Used in connection with customer authentication||7d|
|customer_payment_method||Used in connection with checkout.||1h|
|customer_shop_pay_agreement||Used in connection with checkout.||20m|
|pay_update_intent_id||Used in connection with checkout.||20m|
|localization||Used in connection with checkout.||2w|
|profile_preview_token||Used in connection with checkout.||5m|
|login_with_shop_finalize||Used in connection with customer authentication||5m|
|preview_theme||Used in connection with the theme editor||session|
|shopify-editor-unconfirmed-settings||Used in connection with the theme editor||16h|
|wpm-test-cookie||Used to ensure our systems are working correctly.||session|
|cookieconsent_status||Used to record your cookie consent||1yr|
|cookieconsent_preferences_disabled||Used to record your cookie consent||1yr|
Reporting & analytics
|_landing_page||Track landing pages.||2w|
|_orig_referrer||Track landing pages.||2w|
|_shopify_sa_p||Shopify analytics relating to marketing & referrals.||30min|
|_shopify_sa_t||Shopify analytics relating to marketing & referrals.||30min|
|_shopify_ga||Shopify and Google Analytics.||session|
|_hjSessionUser *||Hotjar analytics||1y|
|NID||used to track & measure advertising performance (Google)||13 months|
|_ga||used to track & measure advertising performance (Google)||2y|
|_gcl_au||used to track & measure advertising performance (Google)||Persistent|
|__kla_id||used to track & measure advertising performance (Klaviyo)||2y|
|CONSENT||used to track & measure advertising performance (Google)||Persistent|
|SOCS||used to track & measure advertising performance (Google)||Persistent|
|AEC||used to track & measure advertising performance (Google)||Persistent|
Honest Grapes (at the address below) is the data controller for the purpose of the Data Protection Act 1998 (the Act). You have the right to access the information which we hold about you and your right of access can be exercised in accordance with the Act.
We are always pleased to hear from our customers (even if it is a complaint!). We are grateful for any time you spend providing us with the knowledge we need to ensure you are completely satisfied - we want you to return to the site and to recommend us to your friends and family. If you have any questions or feedback about this statement, or if you would like us to stop processing your information, please do not hesitate to contact us.
You can contact us by emailing us at firstname.lastname@example.org, call 020 3603 1646 or write to us at:
141-157 Acre Lane,