Privacy policy

Gerrard Seel is owned and run by Honest Grapes Ltd. We are totally committed to protecting the privacy of our site visitors and customers and to promoting the responsible consumption of alcohol. It’s that simple. That means we will not disclose information about our customers to third parties except where it is part of providing a service to you - e.g. arranging for a product to be sent to you, carrying out credit and other security checks and to help us to understand the wines and other services we can best provide you. We never sell your data to third parties. Ever.

We may update this policy from time to time to take account of any new business activity or to reflect any changes in law or best practice in relation to data protection. We will notify you if we do so. This policy was last updated on 27 April 2018.

If you have any questions regarding our privacy policy, please email us at info@honestgrapes.co.uk or call 020 3603 1646.

Why do we collect your personal data?

We collect, use and store your personal data so that we can offer you the products and services you expect from us. We collect your personal data for three main reasons:

• To process and deliver your orders
• To personalise, report on and improve the products and services we provide
• To send you our latest news and wine offers via email, telephone or post based on your mailing preference

How do we collect your personal data?

When you create a customer account, visit our website, sign up to our mailing list, communicate with us or purchase our products or services, you may choose to give us certain information. For example, when you give us your name and address, tell us about your wine preference or when you purchase wine from us. It allows us to keep track of your preference, so we know when to communicate and when not to communicate with you. We also use information to make sure that you are receiving information in a relevant and timely manner.

What categories of personal data do we collect?

We may collect the following information about you:

• Your name, email address, phone number and address including postcode
• Purchases and orders made by you
• Payment methods (note that we do not store your payment information details. These are held by secure payment providers)
• When you set up an account, your password and your mailing preference
• Your wine preference through our fun wine quiz
• Your IP address and online browsing history on our website
• Your correspondence with us via email, webchat, telephone or post

Personal data we will process to fulfil your orders

We will need to process your personal data to fulfil any order you place and to comply with the law. For example:

We will share your name, address and, where applicable, telephone number with our fulfilment agents. We will share your payment details with our bank or clearing house so that we can process payment for your order. We will share your name, address and telephone numbers with an external provider to verify your age when you first purchase from us. This is because we are required by law to ensure that we sell products containing alcohol only to people aged 18 or over.

How we use and/or process your personal data

Our web server automatically recognises your domain name when you visit our web site. We also collect the email addresses of people who communicate with us via email and aggregate information on user visits. Information volunteered such as survey information and/or site registrations is also collected. The information we collect is used primarily for internal review and to improve the content of our services and offerings. It is also used to notify users about updates to our services. We do not sell your information with other organisations for commercial purposes.

To make our messages to you more relevant, we may use your personal information to create a profile of your interests and preference or to present you with personalised offers on our website, through social media channels such as Facebook and/or by placing banner advertisements on third party websites. This means we could use pieces of information you’ve either given us directly or your behaviour to create a profile. This not only gives us an idea of who our customers are, but also helps to make sure that when we get in touch with you, it is done in a way which is relevant and tailored to your preferences.

Please note that we may occasionally commission insight companies or use industry-standard profiling products offered by third parties to help us do this. This enables us to maximise the use of our marketing budget, so we’re able to offer our wine at the best price to our customers. We shall always ensure that any activity is implemented in a fair and balanced way. It is your right to opt out of your information being used for profiling, and there is information on how to do this below.

If you registered your email with us on an occasion such as, but not limited to, making a purchase, registering on our site or entering a social media or email competition, we may update you on our latest products, news and special offers via email, post & telephone with your consent. We will not sell, or make available, your name, address, email address or any other personal information to any third party (excluding partners from whom you may have linked to our site) without your permission. Our business is the business of selling and marketing wine, not people’s information.

How to unsubscribe from us

You have the right to opt out of receiving communications from us at any time. In each email we sent to you for marketing purposes, there will be a specific link for you to click on to unsubscribe or you can do so by updating your mailing preference. Alternatively, you can contact us at info@honestgrapes.co.uk or call 020 3603 1646.

Cookies

A cookie is a small information file that is sent to your computer and is stored on your hard drive. If you have registered with us then your computer will store an identifying cookie which will save you time each time you re-visit our website, by remembering your personal details. You can change the settings on your browser to prevent cookies being stored on your computer without your explicit consent. To access your account details or place an order online you will still need to log in.

Please click here for our cookie policy.

Storage methods and duration

Honest Grapes may store your information in its secured off-site databases through third-party providers. We will not keep your personal data for longer than is necessary for the purposes described in this policy. We will keep personal data while your account is active. The information may be retained and used by Honest Grapes for a reasonable period, reflecting our need to meet any legal or regulatory requirements, or to resolve a legal dispute. We may also keep different types of personal data for different lengths of time (for instances, we may need to keep certain personal data relating to your purchases in order to comply with HMRC’s VAT reporting requirements). This means we may retain information after an individual ceases to use Honest Grapes services or after the individual has ceased interacting with Honest Grapes. Except where the law, authorities or regulatory bodies require us to retain it for longer, we retain browsing history for a reasonable period after it was generated.

Protecting your security

We may use personal information provided by you in order to conduct appropriate anti-fraud checks. Personal information that you provide may be disclosed to a credit reference or fraud prevention agency, which may keep a record of that information. This is done only to confirm your identity - a credit check is not performed and your credit rating is unaffected.

Transfers of your personal data

The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or one of our suppliers. Such processing may, for example, be required in order to fulfil your order, process your payment details or provide support services. 

We can’t guarantee the security of transmission of information via the Internet. We will do our best to protect your personal data, but cannot guarantee the security of data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Disclosures of your personal data

We do not disclose information to third parties outside Honest Grapes, except under the following circumstances:

• in the event that Honest Grapes Ltd. sells or buys any business or assets;
• if Honest Grapes or substantially all of its assets are acquired by a third party, in which case personal data which we hold about our customers may be one of the transferred assets; or
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of; or to protect the rights, property, or safety of Honest Grapes, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Third-party sites

Our site may contain links to and from the websites of our partner networks, advertisers and other third parties. If you follow a link to any of these websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check their policies before you submit any personal data.

Age verification

We are committed to being a responsible supplier of alcohol and promote a responsible attitude to drinking. We may use personal information provided by you in order to conduct appropriate age verification checks. Personal information that you provide may be disclosed to an age verification agency, which may keep a record of that information. This is done only to confirm your age.

Checking your Details

If you wish to verify the details you have submitted to us you may do so by contacting us via the email address or address given below. Our security procedures mean that we may request proof of identity before we reveal information. This proof of identity will take the form of your email address and password submitted upon registration. You must therefore keep this information safe as you will be responsible for any action which we take in response to a request from someone using your email and password. We would strongly recommend that you do not use the browser's password memory function as that would permit other people using your terminal to access your personal information.

Knowing your rights

You have a number of rights under data protection laws; these are listed below:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to transfer your personal data (portability)
• The right to object

 You have the right to access, modify and delete the personal information that we hold about you. If you would like a copy of some or all of your personal information, please let us know by emailing us at info@honestgrapes.co.uk or call 020 3603 1646.

Cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. We use cookies for the following purposes:

Strictly necessary cookies

These cookies are required for the website to run and cannot be switched off. Such cookies are only set in response to actions made by you such as language, currency, login session, privacy preferences. You can set your browser to block these cookies but this might affect the way our site is working.

NAME	FUNCTION	DURATION
_ab	Used in connection with access to admin.	2y
_customer_account_shop_sessions	Used in combination with the _secure_account_session_id cookie to track a user's session for new customer accounts	30d
_secure_account_session_id	Used to track a user's session for new customer accounts	30d
_secure_session_id	Used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected.	24h
_shopify_country	For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request.	session
_shopify_m	Used for managing customer privacy settings.	1y
_shopify_tm	Used for managing customer privacy settings.	30min
_shopify_tw	Used for managing customer privacy settings.	2w
_storefront_u	Used to facilitate updating customer account information.	1min
_tracking_consent	Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.	1y
_cmp_a	Used for managing customer privacy settings.	1d
c	Used in connection with checkout.	1y
cart	Used in connection with shopping cart.	2w
cart_currency	Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.	2w
cart_sig	A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations.	2w
cart_ts	Used in connection with checkout.	2w
cart_ver	Used in connection with shopping cart.	2w
checkout	Used in connection with checkout.	4w
checkout_token	Used in connection with checkout.	1y
customer_account_locale	Used in connection with new customer accounts	1y
dynamic_checkout_shown_on_cart	Used in connection with checkout.	30min
hide_shopify_pay_for_checkout	Used in connection with checkout.	session
keep_alive	Used in connection with buyer localization.	2w
master_device_id	Used in connection with merchant login.	2y
previous_step	Used in connection with checkout.	1y
discount_code	Used in connection with checkout.	session
remember_me	Used in connection with checkout.	1y
secure_customer_sig	Used to identify a user after they sign into a shop as a customer so they do not need to log in again.	1y
shopify_pay	Used in connection with checkout.	1y
shopify_pay_redirect	Used in connection with checkout.	1 hour, 3w or 1y depending on value
shop_pay_accelerated	Used in connection with checkout.	1y
source_name	Used in combination with mobile apps to provide custom checkout behavior, when viewing a store from within a compatible mobile app.	session
storefront_digest	Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.	2y
tracked_start_checkout	Used in connection with checkout.	1y
checkout_session_lookup	Used in connection with checkout.	3w
checkout_prefill	Used in connection with checkout.	5m
checkout_queue_token	Used in connection with checkout.	1y
checkout_queue_checkout_token	Used in connection with checkout.	1y
checkout_worker_session	Used in connection with checkout.	3d
checkout_session_token	Used in connection with checkout.	3w
checkout_session_token_<<token>>	Used in connection with checkout.	3w
cookietest	Used to ensure our systems are working correctly	1m
order	Used in connection with order status page.	3w
identity-state	Used in connection with customer authentication	24h
identity-state-<<token>>	Used in connection with customer authentication	24h
identity_customer_account_number	Used in connection with customer authentication	12w
card_update_verification_id	Used in connection with checkout.	20m
customer_account_new_login	Used in connection with customer authentication	20m
customer_account_preview	Used in connection with customer authentication	7d
customer_payment_method	Used in connection with checkout.	1h
customer_shop_pay_agreement	Used in connection with checkout.	20m
pay_update_intent_id	Used in connection with checkout.	20m
localization	Used in connection with checkout.	2w
profile_preview_token	Used in connection with checkout.	5m
login_with_shop_finalize	Used in connection with customer authentication	5m
preview_theme	Used in connection with the theme editor	session
shopify-editor-unconfirmed-settings	Used in connection with the theme editor	16h
wpm-test-cookie	Used to ensure our systems are working correctly.	session
cookieconsent_status	Used to record your cookie consent	1yr
cookieconsent_preferences_disabled	Used to record your cookie consent	1yr

Reporting & analytics

These cookies allow us to measure visitors traffic and see traffic sources by collecting information in data sets. They also help us understand which products and actions are more popular than others.

NAME	DESCRIPTION	DURATION
_landing_page	Track landing pages.	2w
_orig_referrer	Track landing pages.	2w
_s	Shopify analytics.	30min
_shopify_d	Shopify analytics.	session
_shopify_fs	Shopify analytics.	30min
_shopify_s	Shopify analytics.	30min
_shopify_sa_p	Shopify analytics relating to marketing & referrals.	30min
_shopify_sa_t	Shopify analytics relating to marketing & referrals.	30min
_shopify_y	Shopify analytics.	1y
_y	Shopify analytics.	1y
_shopify_ga	Shopify and Google Analytics.	session
customer_auth_provider	Shopify analytics.	session
customer_auth_session_created_at	Shopify analytics.	session
shop_analytics	Shopify analytics.	1y
unique_interaction_id	Shopify analytics.	10min
_hjIncludedInSessionSample	Hotjar analytics	30min
_hjAbsoluteSessionInProgress	Hotjar analytics	Session
_hjSessionUser *	Hotjar analytics	1y
_hjSession	Hotjar analytics	Session
_hjFirstSeen	Hotjar analytics	30min

Marketing cookies

These cookies are usually set by our marketing and advertising partners. They may be used by them to build a profile of your interest and later show you relevant ads. If you do not allow these cookies you will not experience targeted ads for your interests.

NID	used to track & measure advertising performance (Google)	13 months
_ga	used to track & measure advertising performance (Google)	2y
_gcl_au	used to track & measure advertising performance (Google)	Persistent
__kla_id	used to track & measure advertising performance (Klaviyo)	2y
CONSENT	used to track & measure advertising performance (Google)	Persistent
SOCS	used to track & measure advertising performance (Google)	Persistent
AEC	used to track & measure advertising performance (Google)	Persistent

CCTV

This privacy notice explains how Honest Grapes Ltd., trading as Gerrard Seel, uses your data when captured on CCTV.

Honest Grapes Ltd. has CCTV in operation at various sites, including our offices and other premises. CCTV will capture images in real time wherever the cameras are pointed. These cameras may capture footage of you whilst you are on the premises. Cameras have been situated both inside and outside the buildings. There are signs in place to inform you where cameras are in use. 

In addition, our fleet vehicles have dashboard cameras which may capture footage of pedestrians and other vehicles while in use. All of these vehicles have stickers on them to indicate that they are equipped with cameras. 

Who will be using your data? 

Honest Grapes Ltd. will be the data controller for the data you provide to us. 

We may also contract third party organisations to process your data on our behalf (e.g. suppliers of business systems such as our Business Management System).

What personal data do we use? 

• static and moving images of people
• vehicle registration numbers

What types of special category personal data do we need from you? 

We do not deliberately set out to capture any special category personal data. However, cameras may incidentally record information which falls within these categories. Additionally, footage cameras may be used as evidence regarding criminal offences or related security measures. 

Why do we use your data? 

• to ensure the health and safety of employees, service users and visitors to the sites
• to detect, prevent or reduce the incidence of crime
• to prevent and respond effectively to all forms of possible harassment and disorder
• to reduce the fear of crime
• to create a safer environment
• to provide emergency services assistance
• to assist with health and safety and other serious occurrences, including employment issues, for example, disciplinary investigations, where appropriate to do so
• for the defence of the company or its employees with regards to legal or insurance claims

What legal reasons allow us to use your data in this way? 

Our legal basis for processing your personal data is: 

• that it is necessary to meet a legal obligation
• that it is necessary to perform tasks in the public interest
• that we have a legitimate interest in processing this information

Our basis for processing special category persona data is: 

• there is a substantial public interest in processing this information, for the purposes of detecting and preventing crime

Who may we share your data with or receive it from?

Sometimes we need to share your information with others. We will only do this when it is necessary, or if we are required to do so by law. We do not plan to share it with anyone else or use it for anything else. When it is necessary, we may disclose footage to specific partners.

We may be asked to provide footage to assist the police with any criminal damage or their investigations. We may also be asked for footage from insurance companies should there be an incident involving car accidents or damage to cars parked on our premises. 

However, there is no planned regular or scheduled sharing of CCTV footage with any external organisation. Should this situation change, this privacy notice will be updated and reissued, to keep you fully aware of how the company plans to use CCTV footage which you may be captured in. 

CCTV footage will only be processed internally by our staff who are authorised to do so and any other departments where there is a legitimate and lawful reason for their involvement, such as HR colleagues in the event of an investigation. 

From time to time CCTV on entry points to our premises may be used for monitoring purposes, to see if there are any issues with security or access. At no time will individuals be the focus of this monitoring. 

May personal data be transferred overseas? 

Honest Grapes Ltd. may for operational purposes transfer personal data overseas. In these cases, we will ensure that your personal data is protected and there are safeguards for the protection of your rights.

How long is your data kept for? 

This information is for two weeks and then deleted automatically unless it is required for further actions, such as police enquiries or insurance claims. In this event, it will be held until the related matters are closed with no chance of appeal.

Does the service make decisions using fully automated processes? 

No.

Data captured by a CCTV camera could be matched by the authorities (e.g. police) against the DVLA national database in order to identify car owners. However, the decision to contact that owner and/or take action will always be made by a human.

What rights do you have over this use of your data? 

• to be informed about how we use your data
• to access a copy of your data that we process
• to have us rectify or correct your data that we process
• to restrict our processing of your personal data
• to object to the use of your data
• to have your personal data erased
• to request that we transfer your information to you or another organisation
• to object to fully automated decision making
• to withdraw your consent (if it is the legal reason why we use your data)

Contacting us

Honest Grapes (at the address below) is the data controller for the purpose of the Data Protection Act 1998 (the Act). You have the right to access the information which we hold about you and your right of access can be exercised in accordance with the Act.

We are always pleased to hear from our customers (even if it is a complaint!). We are grateful for any time you spend providing us with the knowledge we need to ensure you are completely satisfied - we want you to return to the site and to recommend us to your friends and family. If you have any questions or feedback about this statement, or if you would like us to stop processing your information, please do not hesitate to contact us.

You can contact us by emailing us at info@honestgrapes.co.uk, call 020 3603 1646 or write to us at:

Data Controller
Honest Grapes
141-157 Acre Lane,
London
SW2 5UA

 

Contact details of the Information Commissioners' Office

If you are unhappy with how your data has been processed by Honest Grapes Ltd. or you feel your data protection rights have been breached, you have the right to complain to the Information Commissioner's Office at: 

www.ico.org.uk

Or

Wycliffe House
Water Lane
Wilmslow
SK9 5AF