Privacy Policy
GDPR Privacy notice
Awin Barratt Siegel Wine Agency (ABS) takes the handling and storage of all data very seriously. This privacy notice is here to inform you of our process, the ability to request access to the data and to let you know why we hold this data.
We are committed to maintaining the trust and confidence of all partners, customers and visitors to our website. We want you to know that ABS will not be renting or trading email lists with other companies and businesses for marketing purposes. In this Privacy Notice, we’ve provided detailed information on when and why we collect your personal information, how we use it and how we keep it secure.
Mailing Lists
As part of the registration process with us, we collect limited personal information. We use this to tell you about product information, offers and tastings, but also to check our records are up to date. This is all kept on our mailing list.
We use MailChimp, to deliver our newsletter. We gather statistics around email opening and exploration using industry standard technologies to monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time by clicking the unsubscribe link or by emailing our data protection officer Adam Crookshank. The below table details why and how we use your data, as a controller and processor but also the legal basis for doing so.
|
Purpose/Activity |
Type of data |
Lawful basis for processing data taken from GDPR |
|
Register you as a new customer |
(a) Identity |
Performance of a contract with you. |
|
To process and deliver your order, including: 1. managing payments, fees and charges; and 2. managing your queries through our Customer Service team – this may include recording calls to our teams. |
(a) Identity |
Performance of a contract with you. legitimate interests- ensuring our customer service quality standards are met. |
|
To collect and recover money owed to us in respect of your order |
(a) Identity |
Necessary for our legitimate interests (to recover debts due to us). |
|
To carry out fraud assessments |
(a) Identity |
Necessary for our legitimate interests of ensuring payments are not fraudulent |
|
To notify you in relation to our legal obligations and documents, including changes to our terms or Privacy Policy |
(a) Identity |
Necessary for our legitimate interests of ensuring our customers are updated on these changes. |
|
To help us improve our offering to our customers, including asking you to leave a review or take a survey, or provide customer insights |
(a) Identity |
Necessary for our legitimate interests (to study how customers use our products/services, to improve our offering to our customers, to develop them and grow our business). |
|
To enable you to partake in a competition run by ABS or its partners |
(a) Identity |
Performance of a contract with you to fulfil the promotion and run the competition/prize draw. We may also subsequently use your entries for the legitimate interests of understanding our customer base more effectively. |
|
To administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
(a) Identity |
Legitimate interests |
|
To deliver relevant content and other marketing material to you and measure or understand the effectiveness of the advertising we serve to you |
(a) Identity |
Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business to inform our marketing strategy and to improve our offering to you |
Whose information we hold.
We process personal information about our:
- customers and clients
- enquirers
- suppliers
- advisors and other professional experts
- employees
Children
Our Website is not directed at, nor do we knowingly collect personal data from people under the age of 18.
Information Sharing
We do not share any information with any third parties.
Access to your personal information
You are entitled to view, amend, or delete the personal information that we hold. Email your request to our data controller Adam
Storage and security
All data is held on the ABS main server, which is on a secure LAN site. The security of this location is handled by our IT infrastructure provider. The physical security is handled by ABS and covered by ABS Insurance policies.
Destruction
If data deletion is requested we will attempt to do this electronically within 1 hour of the request. If the data is in a paper format this will be placed in a confidential waste container and destroyed in our shredder.
Data that is needed for audit will continue to be held under business to business conditions and destroyed after 6 years.
Useful links
Information commissioner office- www.ico.org.uk
ICO complaints- www.ico.org.uk/concerns/