Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

2. Data We Collect

We only collect personal data that you voluntarily provide to us. This may include:

• Full name
• Professional or company email address
• Company name
• Information relating to your rating request (number of wines, message)

We do not collect any sensitive personal data, nor do we collect data from minors under the age of 18.

3. How We Use Your Data

We use your personal data solely for the following purposes:

• To process and respond to your rating request
• To send you a personalised quote and payment instructions
• To communicate with you regarding your submission and its results
• To comply with our legal and contractual obligations

We will never use your personal data for unsolicited marketing communications without your prior consent.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contractual necessity — to carry out the rating service you have requested
• Legitimate interests — to manage our business operations and respond to enquiries
• Legal obligation — to comply with applicable laws and regulations

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general, data relating to rating requests is retained for a maximum of 5 years from the date of our last interaction.

6. Data Sharing

We do not sell, rent, or trade your personal data to any third party. We may share your data with trusted service providers (such as payment processors or email delivery services) solely to facilitate the rating service, and only under strict confidentiality agreements.

We may disclose your personal data if required to do so by law or by a competent authority.

7. International Data Transfers

Your data is stored and processed primarily in the United Kingdom. If data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, such as Standard Contractual Clauses or an adequacy decision.

8. Cookies

This website does not currently use tracking or advertising cookies. We may use strictly necessary technical cookies to ensure the proper functioning of the website. No personal data is collected through cookies without your consent.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data, subject to legal obligations
• Right to restriction — to limit how we process your data in certain circumstances
• Right to portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests

To exercise any of these rights, please contact us via our form. We will respond within 30 days.

10. Right to Lodge a Complaint

If you believe that your personal data has been processed in a manner inconsistent with your rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any significant changes will be communicated on this page with an updated "last updated" date. We encourage you to review this policy periodically.

12. Contact Us

For any questions or requests relating to your personal data or this Privacy Policy, please use our contact form.