Privacy policy

Effective 22 September 2026.
 
1. Who is responsible for your information
 
Vinco Wines Limited, trading as Vinco Fine Wines, company number 16141013, 150b Bridge Street, Wye, Ashford, Kent, TN25 5DP, is the controller of the personal information described here. Registered with the Information Commissioner's Office, registration number ZB939153.
 
For anything about your information, email andrew@vincowines.com.
 
2. What we collect
 
- Contact details: name, email address, telephone number, postal and delivery addresses.
- Order details: what you buy, sell or store with us, prices, delivery and storage records.
- Account details, if you have one: login details and the preferences you give us.
- Cellar details, if you are a member: statements you upload, the wine you hold and where, notes you write, and photographs of labels you take.
- Proof of age and identity, where we need it to sell alcohol or to meet our legal obligations.
- Payment details: handled by our payment providers. We never see or store your full card number.
- Correspondence: emails, messages and notes of calls with you.
- How you use our websites: only with your consent, as explained in our Cookie Policy.
 
3. Why we use it, and our legal basis
 
- Take, deliver and store orders; sell wine on your behalf; run your membership: to perform our contract with you.
- Check age and identity; keep tax, duty and AWRS records: to meet our legal obligations.
- Answer enquiries; keep our records accurate; prevent fraud; improve our service: our legitimate interests in running the business properly.
- Send offers and news by email: your consent, or where you have bought from us before, our legitimate interest in telling you about similar wine (you can say no at any time).
- Analytics and non-essential cookies: your consent.
 
4. Who we share it with
 
We only share what each needs, under contract, to provide their service:
 
- Shopify and Shopify Payments: our online shop and card payments
- Stripe: some membership payments
- Supabase (servers in London), Vercel and Render: hosting for our members' portal and internal systems
- HubSpot (EU data hosting): our customer records and email, including our mailing list and consultation bookings
- Resend: emails sent from the members' portal
- Microsoft 365: our email and documents
- PostHog (EU): website analytics, only with your consent
- Anthropic: to read photographs of wine labels and answer questions about a member's own cellar
- London City Bond: the warehouse that stores wine in your name
- Couriers, to deliver your wine
- Our professional advisers (accountants, lawyers), and HMRC or other authorities where the law requires it
 
We do not sell your information.
 
5. Information sent outside the UK
 
Some of these providers process information in the European Economic Area or the United States. Where they do, we rely on UK adequacy regulations or on the UK International Data Transfer Agreement or Addendum, which require your information to be protected to UK standards.
 
6. How long we keep it
 
Order, tax and duty records: six years after the end of the financial year they relate to, as HMRC requires. Membership and cellar records: for as long as you are a member and six years after. Marketing preferences: until you ask us to stop. Everything else: no longer than we need it.
 
7. Your rights
 
You can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, object to how we use it, or give it to you in a form you can take elsewhere. You can withdraw consent at any time. Email andrew@vincowines.com. We will reply within one month. Some rights have limits, for example we must keep tax records even if you ask us to delete them.
 
If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
 
8. Security
 
Access to your information is limited to the people who need it, protected by passwords and two-step sign-in, and held by providers who meet recognised security standards.
 
9. Changes
 
We will post any changes here with a new effective date.