Last revised 30 March 2020
At Feel Good Grapes, we respect your privacy and are committed to protecting your personal data. In this notice, we explain how we collect and use your personal information when you visit our website.
Please note that links from our website may take you to external websites which are not operated by us or covered by this notice. We recommend that you check their privacy policies before submitting any personal information to other sites.
About Feel Good Grapes
Feel Good Grapes Limited (company number 08899771) is registered at 4 The Row, Little Ponton, Lincolnshire, NG33 5BX.
Michael James Turner is the registered company secretary and director.
For the purposes of the Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR), we are the ‘controller’ of the personal data that we collect and hold about you, which means that we make decisions as to how and why we use your data within our society.
If you have any questions about your privacy, your rights or our use of your personal data, please CONTACT US
Personal information we collect from you
You are not required (by law or by any contract with us) to provide personal information to us via our website. We will only require you to provide personal information to us where it is necessary for us to provide you with a service at your request, such as when you purchase products or services.
Corporate Offer Memberships
If you or your employer have signed up for the corporate offers, you will have access to a password protected member site. In order to access these pages you will need to provide us with personal information, such as:
Date of birth
Email and postal addresses
Your payment information such as your credit/debit card details, bank or other payment account details and/or direct debit information will not be stored by Feel Good Grapes, and will only be entered through the payment providers on offer through this site, namely PayPal and Stripe. Please make sure you have read and accepted their privacy policies.
Whilst shopping with us at Feel Good Grapes, we will collect other personal information from you, such as
Details of your orders and purchases
Your wine preferences
Your attendance at any of our tastings and events
Newsletters, emails, and competitions
Anyone can sign up for our newsletters and email marketing by providing us with your name and email address.
If you enter any of the competitions that we hold, via our website, email marketing, or social media channels, you will need to provide us with your full name, relevant online profiles, your contact details, and the details of your entry.
If you choose to complete any of the surveys or questionnaires that we run, we may record your name and contact details as well as the answers or feedback that you provide. In some cases we will anonymise this information so that we only keep aggregated data and statistics.
Data we collect on our website and social media
We may collect other personal information about you whenever you visit our website or interact with us on social media. This information may include:
Social media usernames
Any information you add to your profile on our website, as well as any posts or contributions that you submit or other content that you may upload
Information about the devices and software you use to access our online services, such as the make, model, operating system and any unique identifiers of your device, and the type and version of your browser, to ensure that your on-line experience with us is as good as we can provide.
Your IP address (which may reveal your location) and other identifiers relating to your device or browsing session
Your browsing behaviour on our website, such as the content and pages you view, links and adverts that you click and the sites or pages that referred you to our site (including where you interact with our adverts on other sites)
Information about your interaction with us on social media, such as views and impressions of our social media accounts, pages and content and any posts or content that you tag us in or post on our pages.
Where you are a member accessing corporate offer pages on our website, we may combine this information with the other information that you provide to us in relation to your membership.
Our suppliers and business contacts
We hold personal information about our suppliers and other business contacts, including names, contact details and payment details and information about your engagement with Feel Good Grapes.
Personal information we collect from other sources
We may collect personal information about you from other sources, including from third party organisations and publicly available registers.
Verifying your identity and age
We may collect additional information from third party sources such as publicly available resources such as the electoral roll, in order to verify your identity and age (such as when you wish to purchase any alcoholic products, and so that we can ensure that you are old enough to be sent promotional materials relating to alcoholic products).
Information from other sources
We may also collect information about you from other sources. For example:
Publicly available information from sources such as Companies House
Publicly available information from the electoral roll
Information you have shared publicly, including on social media
Information from other third-party databases, such as credit reference agencies.
How we use your personal information
We use personal information about you for a number of different purposes, which are explained in more detail below. In most cases, we will need to use your information for these purposes in order to fulfil our obligations under a contract with you, to comply with our legal obligations, or in pursuit of our (or third parties’) legitimate interests where these are not overridden by your rights and interests.
Corporate Offer Services
We need to use your personal information in order to manage and administer your access to corporate offer services. We use your information in this context to:
Administer your access, including verifying your age and identity, issuing your log in details and maintaining your details on our record of corporate offer members
Answer your queries and correspond with you about matters relating to your access
Take and fulfil your orders, including processing payments and refunds and arranging deliveries
Enable you to purchase tickets for, and take part in, our tastings and other events
Provide you with information about your access
Provide you with information and news about Feel Good Grapes, our performance and our services and products
Improve and develop the products and services that we offer, and the ways in which we communicate with you, to provide the best member experience that we can.
It is necessary for us to use your information in these ways in order to perform our obligations under our contracts with you, to comply with our legal obligations (such as to verify your age and identity and to maintain a record of our members) and to pursue our legitimate interests in monitoring, developing and improving our business and the services and experience that we offer.
Promotional messages and marketing
We may use your personal information to send you news and updates from Feel Good Grapes and information about our products and services including offers, promotions and new products. Depending on how you interact with us, we may contact you by email, text message, telephone, post or other methods, including on social media.
We may use data obtained from third parties (such as electoral roles) for postal marketing and online display advertising, and we use profiling to help us identify relevant audiences (see further below).
We have a legitimate interest in using direct marketing to reach out to existing and prospective members to help promote and grow our business and membership, and we need to use your personal information to do this.
If we’re contacting you by email, we may not require your consent, but you can always tell us to stop using your information for marketing purposes if you wish. Where we rely on your consent to send you marketing communications, you can withdraw your consent at any time by contacting us, using the unsubscribe links provided in emails.
Profiling is the use of personal information to evaluate certain aspects relating to a person, such as their preferences, interests or behaviour.
We use the personal information that we hold to carry out profiling on our members and other individuals for our internal business purposes and marketing and advertising campaigns. The information that we use in this context may include:
Order and purchase records
Feedback from surveys and questionnaires
Information about lifestyle, interests, preferences and behaviour
Demographic information such as age, location and financial or social status
Information about website usage and interaction with our advertising campaigns
Information obtained from third parties (such as electoral roles)
By analysing this information, we can group together people who may have similar characteristics or behaviours, which helps us to develop and improve our internal processes so that we can provide the best experience for our members.
This also allows us to tailor the information that we send to you and personalise your experience with Feel Good Grapes by identifying the news, products and services that we think may be of most interest to you and avoiding sending you unwanted content.
We have a legitimate interest in carrying out profiling in this way so that we can better understand our existing and prospective members, aim to build and improve our relationships with them and improve our service.
Most decisions that we make based on your personal information, such as which communications we choose to send to you, are made by our in house team at Feel Good Grapes.
We may engage third parties (including electoral roles) to carry out profiling and automated decision-making on our behalf, including by combining the information we hold with their own databases, and we may use automated decision-making to help tailor our online advertising services. However, we will not rely on automated decision-making for any decisions that may have a significant impact on you or your experience with us.
We need to use personal information about you in order to display relevant adverts to you online. We use retargeting to personalise your experience with us on social media (including Facebook and Pinterest) by showing you relevant adverts. When you visit our website or social media pages, a small script tells the advertising service (such as our Facebook ads account) about the content that you’ve viewed or clicked, so that we can show you similar content whilst you’re browsing on the same device.
We may also use Facebook to target our adverts at ‘lookalike’ audiences, which are lists generated by Facebook, using profiling and automated decision-making, of individuals that appear to have similar characteristics to our members and contacts.
We have a legitimate interest in using these advertising services as it allows us to improve our members’ experience with us online and to increase the effectiveness of our advertising campaigns.
Improving our website and promotions
We use data that we collect via our website (such as usage and performance data, IP addresses, browsing behaviour and device and browser information) to monitor and improve the performance, accessibility and user experience of our website and to measure and improve the effectiveness of our online adverts.
We use Google Analytics to help us collect and analyse information about use of our website, and we may combine this information with other personal information that we hold for these purposes.
How else do we use your personal information?
We may use your personal information in other contexts, for specific purposes. For example:
We use information about our suppliers and other business contacts to fulfil our contracts and to maintain our professional relationships
We will use your personal information to respond to any communications that you send us, and to inform you of any important updates
We may use your information where it is necessary for us to do so in order to meet our legal obligations or to detect and prevent fraud, money-laundering and other crimes.
We may use your information where it is necessary to protect your interests, or the interests of others, in accordance with our legal obligations. This may include in the event of criminality such as identity theft, piracy or fraud.
We will only use your personal information for the purposes for which we collected it, as set out in this notice, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose for the collection of the data.
Sharing your information within our business
We will share the information that you provide to us with our staff so that we can operate our business and provide our products and services, but access to different types of information is limited to those staff who need to access that information for their roles.
Sharing your information with third parties
We share your personal information with selected third parties to assist us in carrying out various functions of our business. Some of these are below, but this list is not exhaustive and we may change service providers from time to time.
Website and Community
We share information with
our web hosts (Wix) to host the website and related applications and infrastructure
Google and similar service providers for analytics purposes.
Marketing and advertising
Our marketing database is hosted on Wix Ascend and we may share information with marketing agencies to help us run our campaigns.
We share information with Facebook, Pinterest and other advertising services to help display relevant adverts to you.
Other third parties
We may share information with our auditors, insurers, brokers, legal advisers and banks.
We would share information where required by the law, or in order to comply with judicial proceedings, court orders or legal or regulatory proceedings.
We would share information where necessary to protect the safety of our employees, our property or the public, or where necessary for the prevention or detection of crime.
We may share information where proportionate as part of, and in the event of, a merger, business or asset sale.
We may otherwise share your personal information to the extent that we reasonably need to for our legitimate interests or to provide our products and services. We always seek to ensure that your personal data is protected and we choose carefully who we share it with.
We will never disclose or sell your personal data to others for their marketing purposes.
Sharing your information outside the EEA
The UK has strict data protection rules under the GDPR and Data Protection Act 2018 and countries within the EEA all subscribe to the same data protection rules under the GDPR. Where personal data is shared outside the UK and/or EEA, it may not be afforded the same protection and you may not have available the same rights.
We will only share your data with parties outside the UK and/or EEA where there are appropriate safeguards in place to protect your data and ensure that you have the same rights as you would in the UK.
This may be on the basis of an “adequacy decision” adopted by the European Commission or the UK Government, or through robust contractual obligations with the receiving party. We may use service providers based in the USA to process personal data where they are certified under the EU-US Privacy Shield framework (click here for more information about the Privacy Shield).
How long we keep your personal information
We keep personal information about you for as long as we may need to, for the purposes for which we collected it. Where we are providing you with any service (including our online services), we will continue to hold your data for at least as long as we provide that service to you.
We have different retention periods for different types of data, some of which are set out below, and after these periods we will delete or destroy the information unless we have a good reason not to.
We keep information about your identity and contact details for up to 10 years, and our marketing database holds information for up to 5 years.
Data collected through our website, including IP addresses and analytics data, is held for up to 3 years.
Keeping your information secure
We take the security of your personal data seriously and put in place appropriate measures to ensure that it is protected from unauthorised access or disclosure.
We implement information security policies and carry out training with staff to reduce the risk of security breaches, and we operate on a ‘principle of least privilege’ basis so that staff only have access to the information they need. We impose contractual obligations on the selected third parties that we work with to ensure that your data is protected when it is shared.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone, including our staff.
We try to ensure that all information you provide to us via the website is transferred securely. You should always check for the padlock symbol in your browser and “https” in the URL before submitting data through the website.
Most of the information you provide to us is stored on our own servers or with third party secure servers in the UK or EEA. We may use service providers with data centres in the USA, where they are certified under the EU-US Privacy Shield framework.
We have procedures in place to prevent or reduce the risk of, and respond to, data security breaches, and we will notify you and/or the relevant authority (such as the ICO) where appropriate if this happens.
You have a number of rights in respect of your personal data. If you would like any further information or to exercise any of your rights, please contact us. In most cases, we will not charge you any fee if you wish to exercise any of these rights.
The right to be informed
We have a legal obligation to provide you with concise, transparent, intelligible and easily accessible information about your personal information and our use of it. We have written this notice to comply with this right, but please contact us if you require further information.
The right to access your personal data
You have the right to ask us to confirm whether or not we hold any of your personal data. If we do, you have the right to access a copy of your data, as well as information about how, and why, we use it. In order to prevent your data being disclosed to someone who is not authorised to access it, we may have to verify your identity before we provide you with a copy of the data that we hold.
The right to correct any inaccurate or incomplete personal data
If the information that we hold about you is inaccurate or incomplete, you have the right to require us to correct that data (or complete it by supplementing it with other information).
The right to be forgotten
You have the right to require us to delete or destroy your personal data in the following circumstances:
The information is no longer needed for the purposes we collected it for
Where we rely on your consent, and you withdraw that consent
You object to us using your information for marketing purposes, or for our legitimate interests, and we have no overriding reason to keep using it
We have used your information unlawfully
We are required by law to delete your information.
If these situations apply, you may contact us to request that we erase your data from our systems.
The right to have your data transferred to you or a third party in a common format
Where your personal data is processed by automated means, you may have the right to obtain a copy of your personal data in a structured, commonly used and machine-readable format, and to ask us to transfer this data to another organisation in a safe and secure way.
The right to object to direct marketing
You can ask us at any time to stop using your information for direct marketing purposes, even if we do not rely on your consent to do this. You may exercise this right by following the instructions in any of the emails that we send to you, or by contacting us.
The right to object to us using your information for our own legitimate interests
Sometimes, we use your personal information to achieve goals that will help our business – these are our legitimate interests, and they are explained in more detail in this notice.
We aim to always ensure that your rights and information are properly protected. If you believe that the way we are using your data is not justified due to its impact on you or your rights, you have the right to object to our use of your data in these ways. If you do object to this, unless we have a compelling reason to continue we will stop using your personal data for these purposes.
The right to restrict how we use your personal data
You have the right to ask us to stop using your personal data in any way other than simply keeping a copy of it. This right is available where:
You have informed us that the information we hold about you is inaccurate, and we have not yet been able to verify or update this
You have objected to us using your information for our own legitimate interests and we are in the process of considering your objection
We have used your information unlawfully, but you do not want us to delete it
We no longer need to use the information, but you need it for a legal claim.
Rights related to automated-decision making and profiling
You have the right not to be subject to decisions made based on automated decision-making, including profiling, which will have a legal effect upon you or otherwise significantly affect you. We do not currently use any automated decision-making or undertake any profiling of our customers or other individuals.
Changes to our Privacy Notice
Any changes we make to our privacy notice in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy notice.
If you wish to make a complaint about our collection or use of your personal data, please contact us in the first instance so that we may seek to resolve your complaint.
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the statutory body which oversees data protection law in the UK. Please visit the ICO website if you wish to lodge a complaint with the ICO. If you are based in another European Union member state, you may instead lodge a complaint with the supervisory authority in your country.
If you wish to speak to us regarding your privacy, or our use of your personal data, please contact us using the following details:
POST: Feel Good Grapes Limited, 4 The Row, Little Ponton, NG33 5BX