Privacy Policy

Effective Date: 26 November 2025

This Privacy Policy explains how Donzella Ltd (trading as Donzella Wines) collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you agree to the practices described in this Privacy Policy.

1. Who We Are (Data Controller)

Donzella Ltd
Trading as Donzella Wines
Company Number: 13544507
Registered Address:
2–3 Stanley Court, Weston Road, Olney, Buckinghamshire, MK46 5NH

Email for Data Enquiries:
info@donzellawines.co.uk

We are the “Data Controller,” meaning we decide how and why your data is processed.

2. Personal Data We Collect

We collect the following information when you visit our website, create an account, place an order, or subscribe to our mailing list.

Information You Provide

  • Name
  • Billing address
  • Delivery address
  • Email address
  • Phone number
  • Payment details (processed securely by third-party providers)
  • Order notes or messages
  • Account login details (if created)

Information Collected Automatically

  • IP address
  • Browser type & device information
  • Pages viewed
  • Time spent on our site
  • WooCommerce essential cookies
  • Future Google Analytics 4 (GA4) tracking data

Marketing Data (Mailchimp)

  • Email address
  • Name (if provided)
  • Marketing preferences
  • Newsletter interaction (opens/clicks)

We do not store full credit/debit card numbers.

3. How Your Data Is Used (Lawful Basis of Processing)

a) To process and deliver your orders

Lawful basis: Contract
We use your data to take payment, prepare your order, and deliver it.

b) To arrange courier delivery

Lawful basis: Contract
We share necessary delivery details with:

  • DPD
  • UPS
  • DHL

c) To send marketing communications (optional)

Lawful basis: Consent
You only receive marketing emails if you explicitly opt in.
Managed through Mailchimp.

d) To improve our website & prevent fraud

Lawful basis: Legitimate Interest
Includes analytics, troubleshooting, usage insights, and fraud prevention.

e) To fulfil legal obligations

Lawful basis: Legal Obligation
Includes VAT, accounting records, and age-verification (18+).

4. Sharing Your Data With Third Parties

We only share your data with trusted partners essential to our business:

Delivery Partners

Used to deliver your order:

  • DPD
  • UPS
  • DHL

Payment Providers

Used to securely process payments:

  • Apple Pay
  • Google Pay
  • Secure card payment gateways (via WooCommerce)

Email Provider

Used to manage newsletter subscriptions:

  • Mailchimp

Analytics

Used to understand website performance:

  • Future Google Analytics 4 (GA4)

We do not sell your data.

5. Cookies & Tracking Technologies

Our website uses the following:

Essential Cookies (WooCommerce)

Required for:

  • Shopping cart
  • Checkout
  • Account login
  • Website performance

Analytics Cookies

Future use of Google Analytics 4, which tracks:

  • Page views
  • Site performance
  • Device data

You can disable analytics cookies via your browser.

Marketing Cookies (Mailchimp)

Used only when you interact with newsletter sign-up forms.

6. Marketing & Email Communications (Mailchimp)

If you sign up for our newsletter, your data will be processed by Mailchimp.

You will only receive marketing emails if you opt in.

You can unsubscribe at any time by:

This is fully compliant with GDPR.

7. Age Restriction & Responsible Drinking

We only sell alcohol to customers aged 18 or over.

By using our website, you confirm:

  • You are 18+, and
  • The recipient of the delivery is 18+.

We promote responsible drinking.
For guidance, visit: https://www.drinkaware.co.uk/

8. How Long We Keep Your Data (Retention Periods)

Personal data is kept only as long as necessary for lawful purposes.

Order Records (legal requirement)

Retained for 6 years for VAT, tax, and accounting.

Customer Accounts

Deleted after 2 years of inactivity
—or sooner if you request deletion.

Marketing Data (Mailchimp)

Kept until you unsubscribe.

Courier Delivery Data

Retained for up to 12 months to confirm delivery and resolve any courier investigations.

Analytics Data (GA4)

Retained according to Google’s standard retention period (typically 14 months).

General Enquiries

Messages sent via contact forms or email are kept for up to 12 months.

We securely delete or anonymise data when no longer required.

9. Your Rights Under UK GDPR

You have the right to:

✔ Access

Request a copy of your data.

✔ Rectification

Correct inaccurate or incomplete information.

✔ Erasure (“Right to be Forgotten”)

Request deletion of your data in certain circumstances.

✔ Restrict Processing

Limit how your data is used.

✔ Object

Stop marketing or withdraw consent.

✔ Data Portability

Receive your data in a portable format.

To exercise your rights, email: info@donzellawines.co.uk

You can also lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

10. Security Measures

We protect your data through:

  • SSL encryption
  • Secure payment gateways
  • Restricted admin access
  • Encrypted data storage where applicable
  • Staff training on safe data handling

While no online system is 100% secure, we take all reasonable steps to protect your information.

11. Links to Other Policies

For more information, please also see:

These documents work together to form our complete legal framework.

13. Contact Us

If you have any questions about this Privacy Policy or how your data is processed, contact:

Donzella Wines
info@donzellawines.co.uk
2–3 Stanley Court, Weston Road, Olney, MK46 5NH

Last Updated: 26 November 2025