Privacy Policy

vintagefinewines.com

Last updated: 17 June 2026

1. Who We Are

This Privacy Policy applies to the website vintagefinewines.com (the “Website”), operated by Vintage Fine Wines (“we”, “us”, “our”).

We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact details:

Vintage Fine Wines

Website: vintagefinewines.com

Email: [INSERT CONTACT EMAIL]

For data protection queries, please use the contact details above and mark your correspondence “Data Protection Enquiry”.

2. What Personal Data We Collect

2.1 Data you provide directly

When you use our Website, place an order, or contact us, we may collect:

• Full name and title
• Postal and delivery address
• Email address and telephone number
• Date of birth (to verify you are aged 18 or over, as required by law for alcohol purchases)
• Payment information (processed securely via our payment provider; we do not store full card details)
• Order history and preferences
• Any messages or correspondence you send us

2.2 Data collected automatically

When you visit the Website, we automatically collect certain technical data, including:

• IP address and approximate location
• Browser type and version
• Pages visited, time spent, and referring URLs
• Device and operating system information
• Cookie identifiers (see Section 7)

2.3 Data from third parties

We may receive data about you from payment processors, fraud prevention services, and analytics providers in connection with your use of the Website.

3. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

• Contract: to process and fulfil your orders, manage your account, and handle returns or complaints.
• Legal obligation: to verify your age before selling alcohol, comply with tax and financial regulations, and prevent fraud.
• Legitimate interests: to improve our Website, maintain security, send service-related communications, and conduct fraud detection. We have assessed that our legitimate interests are not overridden by your rights.
• Consent: where we send you marketing emails or use non-essential cookies. You may withdraw consent at any time.

4. How We Use Your Personal Data

We use your personal data to:

• Process and fulfil orders, including delivery and returns
• Verify that you are aged 18 or over before completing a purchase of alcohol
• Manage your account and customer relationship
• Send order confirmations, shipping notifications, and other transactional communications
• Respond to enquiries and provide customer support
• Send marketing communications (only with your consent, and you may opt out at any time)
• Improve our Website, products, and services through analytics
• Detect and prevent fraud and other illegal activity
• Comply with our legal and regulatory obligations

5. Age Verification

It is illegal to sell alcohol to anyone under the age of 18. By placing an order on vintagefinewines.com you confirm that you are aged 18 or over. We may use your date of birth or other information you provide to verify your age, and we reserve the right to cancel orders where age cannot be confirmed or where there is reason to believe alcohol may be supplied to a person under 18.

6. Sharing Your Personal Data

We do not sell your personal data. We share it only where necessary with trusted third parties, including:

• Payment processors (to securely handle transactions)
• Delivery and logistics partners (to fulfil your orders)
• IT service providers and website hosting providers
• Analytics providers (e.g. Google Analytics, in anonymised or pseudonymised form)
• Fraud prevention and identity verification services
• Professional advisers (accountants, solicitors) under confidentiality obligations
• Government authorities and law enforcement where required by law

All third parties are required to protect your data and use it only for the purposes for which it is shared. Where third parties are based outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or the UK adequacy framework).

7. Cookies

Our Website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us operate the Website, understand how it is used, and personalise your experience.

7.1 Types of cookies we use

• Essential cookies: necessary for the Website to function (e.g. shopping cart, session management). These cannot be switched off.
• Analytics cookies: help us understand how visitors use the Website (e.g. Google Analytics). These are only set with your consent.
• Marketing cookies: used to show you relevant advertising across other websites. These are only set with your consent.

7.2 Managing cookies

When you first visit our Website you will be asked to consent to non-essential cookies. You can change your cookie preferences at any time via the cookie settings link in the footer of the Website, or by adjusting your browser settings. Please note that disabling certain cookies may affect Website functionality.

For further information about cookies, including how to see and manage cookies on your device, visit

www.allaboutcookies.org

8. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes set out in this Policy and to comply with our legal obligations. Our standard retention periods are:

• Order and transaction records: 7 years (to comply with HMRC requirements)
• Account data: for the duration of your account, plus 2 years after closure
• Marketing consent records: until you withdraw consent, plus 1 year
• Age verification records: as required by law and for the duration of any legal obligation
• Website analytics data: up to 26 months in anonymised or pseudonymised form

When data is no longer required, it is securely deleted or anonymised.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure: to request deletion of your data in certain circumstances.
• Right to restrict processing: to ask us to limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making: we do not make solely automated decisions that have a legal or similarly significant effect on you.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within one month. We may need to verify your identity before processing your request. There is no charge for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.

10. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These include:

• SSL/TLS encryption for data transmitted to and from the Website
• Secure payment processing via PCI DSS-compliant third-party providers
• Access controls and authentication for staff accessing personal data
• Regular security reviews and updates

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) as required by law.

11. Third-Party Websites

Our Website may contain links to third-party websites. This Privacy Policy applies only to vintagefinewines.com. We are not responsible for the privacy practices of other websites and encourage you to review their privacy policies before providing any personal data.

12. Children

Our Website is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date at the top of this page indicates when it was last revised. We will notify you of material changes by email or by a prominent notice on the Website.

14. Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. If you remain unhappy, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Tel: 0303 123 1113

www.ico.org.uk

© 2026 Vintage Fine Wines. All rights reserved.