PRIVICY & DATA PROTECTION POLICY

This privacy notice describes how we collect and use personal information about you. 

Combe Hay Vineyard handles and stores personal data in a respectful way and in accordance with the principles of the General Data Protection Regulation (GDPR), Data Protection Act and other legislation.

Data protection law says that the personal information we hold about you must be:

• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary for the purposes we have told you about.
• Kept securely.

If you have any questions about this notice or how we collect and use personal information about you please contact us at combehayvineyard@gmail.com 

Who This Policy Is For

This privacy policy applies to anyone using our website and social media sites to browse for information or to purchase products or services from us. 

This policy does not include the privacy policy for contractors or partner organisations. 

Our site is not intended for children under the age of 18 and therefore this policy does not address the collection or use of data pertaining to children. 

Personal Information We May Have

Most of the personal information we process is provided to us directly by you for one of the following reasons:

In order for us to be able to provide you with products you have ordered from us or information you have requested including marketing information. 

            We also receive personal information indirectly, from the following sources in the following scenarios:

Our Website provider for the purposes of running, managing and improving our website. 

Our social media providers for the purposes of running, managing and improving our social media. 

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are: 

 (a) Your consent. You are able to remove your consent at any time. You can do this by contacting  combehayvineyard@gmail.com

(b) We have a contractual obligation.

What We Might Use Your Data For

We use the information that you have given us in order to fulfil our contractual obligations to you, to improve our website, shop and social media and marketing activities. 

We may share this information with our logistics partners and other business partners for the purpose of conducting or improving our business or where we are legally required to do so. 

The Type of Personal Information We Collect

We currently collect and process personal information from a number of sources for a variety of reasons.  We collect the following data: 

Your name, email & other contact details, payment details, delivery address and anything else provided to us on registration and over time is collected and processed to enable us to fulfil the contract we have with you.

Personal Data provided to us on registration such as names & contact details, which are provided by you for the purpose of being kept informed about the vineyard and our wine, courses, volunteering (our products and services), to enable us to keep you up to date with information and are processed on the basis of your consent for marketing purposes and to improve our service to you.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Information generated from visiting our website and social media accounts including cookies are collected to enable us to ensure our products, services, content and sites are presented to you and your device in the best possible way and enable us to administer and protect our business, including improving the functionality of our website and social media accounts and to trouble shoot where needed. We have legitimate interests in managing and improving our websites and social media accounts and thus our services for customers.  

If you request a password reset, your IP address will be included in the reset email.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Visitor comments may be checked through an automated spam detection service.

How Long We Keep Your Data

We keep your data for only a reasonable period, based on why you provided it to us.

For example, if you wanted to join the email group to be kept up to date, we would keep it until you asked us to delete it or we stopped sending updates, however, if you were a one off customer we would only keep it for 5 years after our last interaction, or until you tell us to securely dispose of it or it becomes out dated.

We may need to keep some information for a certain period to comply with legal obligations, like tax requirements. We may delete outdated personal data from time to time in line with our internal policies. 

How We Store Your Personal Information

We carry out most of the business of the vineyard ourselves and store your data securely, but we do use some Third Party organisations and their employees. For example to help manage our website, or communications, social media, or to handle our accounts. 

We try to use local UK organisations, but this is not always the case, banking for example, and there is a possibility your information may as a result be transferred to and stored outside of the UK and European Economic Area.

Cookies

This website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Website Host

This website is built on the WordPress platform. Wordpress may use cookies which are necessary for the proper operation of their system (such as attributing a comment on a blog post, or putting a product into your shopping cart), and to track the usage of this website in order to help us understand how the site is being used – and ultimately provide an improved user experience. You can read more about the WordPress Cookies and Privacy Policy on their website.

A banner requesting your consent to these Cookies should come up when you click on our site. By accepting the Cookie Notification message, you consent to the use of such cookies from WordPress. If you choose not to accept the Cookie Notification message, or if you subsequently delete or block cookies, you won’t have access to certain features that make your experience more efficient, and certain parts of this website may not function properly.

Google Analytics and Advertising cookies

Our website uses cookies collected through Google Analytics. We use cookies as follows:

• To allow us to collect statistical and performance data about how the website is used. We may collect geolocation data about your geographic location, the mobile device that is used and to confirm what browser you are using, and computer operating systems that are being used. This data doesn’t contain any identifiable information about individuals. We use this data to improve the functionality of our website and ensure you have a good experience when browsing it. You can opt out from Google Analytics for the web here.
• To deliver adverts that are relevant to you and your interests. For this purpose, we may also collect demographic and interest-based data.  This website has implemented Google Analytics in conjunction with Google Ads. Advertising cookies are used to limit the number of times you see an advertisement,  to select advertising based on what’s relevant to you and to help measure the effectiveness of the advertising campaign. They are placed by Google with our permission. You can choose whether to allow these cookies, opt-out of this feature and manage your settings for this cookie using the Ads Settings. 

You can find out more about the cookies used by Google here.

We will make sure that we do not use data about individuals that is clearly intended to be private or collect information in a privacy intrusive manner that would not reasonably be expected by you.

Third Party Sites – Courses and Other Connections

We may, provide links to and from other sites including websites and social media sites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

YOUR DATA PROTECTION RIGHTS

Under data protection law, you have the following rights:

Access

You have the right to ask us for copies of your personal information. 

Rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Erasure

You have the right to ask us to erase your personal information in certain circumstances. 

Restriction of processing

You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

To object to processing

You have the right to object to the processing of your personal information in certain circumstances.

Data portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.  Please contact us at combehayvineyard@gmail.com if you wish to make a request.

Concerns, Complaints, Changes and Just Contact

If you have any questions, comments, concerns or requests about our use of your personal information, please contact us directly in the first instance, at combehayvineyard@gmail.com

You can complain to the ICO if you are unhappy with how we have used your data.

Any changes we may make to our privacy policy in the future will be posted on this page.