Privacy Policy

GDPR Privacy notice

Awin Barratt Siegel Wine Agency (ABS) takes the handling and storage of all data very seriously. This privacy notice is here to inform you of our process, the ability to request access to the data and to let you know why we hold this data.

We are committed to maintaining the trust and confidence of all partners, customers and visitors to our website. We want you to know that ABS will not be renting or trading email lists with other companies and businesses for marketing purposes. In this Privacy Notice, we’ve provided detailed information on when and why we collect your personal information, how we use it and how we keep it secure.

Mailing Lists

As part of the registration process with us, we collect limited personal information. We use this to tell you about product information, offers and tastings, but also to check our records are up to date. This is all kept on our mailing list.

We use MailChimp, to deliver our newsletter. We gather statistics around email opening and exploration using industry standard technologies to monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time by clicking the unsubscribe link or by emailing our data protection officer Adam Crookshank. The below table details why and how we use your data, as a controller and processor but also the legal basis for doing so.


 

Purpose/Activity

Type of data

Lawful basis for processing data taken  from GDPR

Register you as a new customer

(a) Identity 
(b) Contact 
(c) Profile

Performance of a contract with you.

To process and deliver your order, including:

1. managing payments, fees and charges; and

2. managing your queries through our Customer Service team – this may include recording calls to our teams.

(a) Identity 
(b) Contact
(c) Financial 
(d) Transaction 
(e) Marketing and Communications

Performance of a contract with you. legitimate interests- ensuring our customer service quality standards are met.

To collect and recover money owed to us in respect of your order

(a) Identity 
(b) Contact 
(c) Financial 
(d) Transaction

Necessary for our legitimate interests (to recover debts due to us).

To carry out fraud assessments

(a) Identity 
(b) Contact 
(c) Financial 
(d) Transaction
(e) Technical

Necessary for our legitimate interests of ensuring payments are not fraudulent

To notify you in relation to our legal obligations and documents, including changes to our terms or Privacy Policy

(a) Identity 
(b) Contact 
(c) Profile

Necessary for our legitimate interests of ensuring our customers are updated on these changes.

To help us improve our offering to our customers, including asking you to leave a review or take a survey, or provide customer insights

(a) Identity 
(b) Contact 
(c) Profile 
(d) Marketing and Communications

Necessary for our legitimate interests (to study how customers use our products/services, to improve our offering to our customers, to develop them and grow our business).

To enable you to partake in a competition run by ABS or its partners

(a) Identity 
(b) Contact 
(c) Profile 
(d) Usage 
(e) Marketing and Communications

Performance of a contract with you to fulfil the promotion and run the competition/prize draw. We may also subsequently use your entries for the legitimate interests of understanding our customer base more effectively.

To administer and protect our business and  website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identity 
(b) Contact 
(c) Profile
(d) Technical

Legitimate interests

To deliver relevant content and other marketing material to you and measure or understand the effectiveness of the advertising we serve to you

(a) Identity 
(b) Contact 
(c) Profile
(d) Usage 
(e) Marketing and Communications
(f) Technical

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business to inform our marketing strategy and to improve our offering to you

Whose information we hold.

We process personal information about our:

  • customers and clients
  • enquirers
  • suppliers
  • advisors and other professional experts
  • employees

Children

Our Website is not directed at, nor do we knowingly collect personal data from people under the age of 18.

Information Sharing

We do not share any information with any third parties.

Access to your personal information

You are entitled to view, amend, or delete the personal information that we hold. Email your request to our data controller Adam

Storage and security

All data is held on the ABS main server, which is on a secure LAN site. The security of this location is handled by our IT infrastructure provider. The physical security is handled by ABS and covered by ABS Insurance policies.

Destruction

If data deletion is requested we will attempt to do this electronically within 1 hour of the request. If the data is in a paper format this will be placed in a confidential waste container and destroyed in our shredder.

Data that is needed for audit will continue to be held under business to business conditions and destroyed after 6 years.

Useful links

Information commissioner office- www.ico.org.uk

ICO complaints- www.ico.org.uk/concerns/