The Twelve Green Bottles Wine Company Ltd ("We") are committed to protecting and respecting your privacy.
For the purpose of the Data Protection Act 1998 (the Act), the data controller is Twelve Green Bottles, 4, Leg Street, Oswestry, Shropshire, SY11 2NL.
Our nominated representative for the purpose of the Act is Neil Jenkins.
Information we may collect from you
We may collect and process the following data about you:
〈 Information you give us. You may give us information about you by filling in forms on our site www.twelvegreenbottleswine.co.uk (our site) or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our site, subscribe to our service, search for a product, place an order on our site, participate in discussion boards or other social media functions on our site, enter a competition, promotion or survey and when you report a problem with our site. The information you give us may include your name, address, e-mail address and phone number, financial and credit card information, wine selection preferences, personal description and photograph.
〈 Information we collect about you. With regard to each of your visits to our site we may automatically collect the following information:
• technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
• information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
〈 Information we receive from other sources. We may receive information about you if you use any of the other websites we operate or the other services we provide. [In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on this site.] We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.
Uses made of the information
We use information held about you in the following ways:
〈 Information you give to us. We will use this information:
• to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
• to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
• to provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you. If you are an existing customer, we may contact you either by telephone or by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale or negotiations of a sale to you. If you are a new customer, and where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this. If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please tick the relevant box situated on the form on which we collect your data;
• to notify you about changes to our service;
• to ensure that content from our site is presented in the most effective manner for you and for your computer.
〈 Information we collect about you. We will use this information:
• to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
• to allow you to participate in interactive features of our service, when you choose to do so;
• as part of our efforts to keep our site safe and secure;
• to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
• to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.
〈 Information we receive from other sources. We may combine this information with information you give to us and information we collect about you. We may us this information and the combined information for the purposes set out above (depending on the types of information we receive).
Disclosure of your information
We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may share your information with selected third parties including:
〈 Business partners, suppliers and sub-contractors for the performance of any contract we enter into with [them or] you.
〈 Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. [We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, women in SW1). We may make use of the personal data we have collected from you to enable us to comply with our advertisers' wishes by displaying their advertisement to that target audience].
〈 Analytics and search engine providers that assist us in the improvement and optimisation of our site.
We may disclose your personal information to third parties:
〈 In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
〈 If Twelve Green Bottles or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
Where we store your personal data
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted [using SSL technology]. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at Twelve Green Bottles, 4 Leg Street, Oswestry, Shropshire, SY11 2NL.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Access to information
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.
TYPES OF COOKIES AND OTHER TECHNOLOGIES USED BY GOOGLE
Some or all of the cookies or other technologies described below may be stored in your browser, app or device. To manage how cookies are used, including rejecting the use of certain cookies, you can visit g.co/privacytools. You can also manage cookies in your browser (though browsers for mobile devices may not offer this visibility). Other technologies used to identify apps and devices may be managed in your device settings or in an app’s settings.
Cookies and other technologies used for functionality allow you to access features that are fundamental to a service. Things considered fundamental to a service include preferences, such as your choice of language, information relating to your session, such as the content of a shopping basket, and product optimisations that help maintain and improve that service.
Some cookies and other technologies are used to maintain your preferences. For example, most people who use Google services have a cookie called ‘NID’ or ‘ENID’ in their browsers, depending on their cookies choices. These cookies are used to remember your preferences and other information, such as your preferred language, how many results you prefer to have shown on a search results page (for example, 10 or 20) and whether you want to have Google’s SafeSearch filter turned on. Each ‘NID’ cookie expires 6 months from a user’s last use, while the ‘ENID’ cookie lasts for 13 months. Cookies called ‘VISITOR_INFO1_LIVE’ and ‘YEC’ serve a similar purpose for YouTube and are also used to detect and resolve problems with the service. These cookies last for 6 months and for 13 months, respectively.
Other cookies and technologies are used to maintain and enhance your experience during a specific session. For example, YouTube uses the ‘PREF’ cookie to store information such as your preferred page configuration and playback preferences like explicit auto-play choices, shuffle content and player size. For YouTube Music, these preferences include volume, repeat mode and auto-play. This cookie expires eight months from a user’s last use. The cookie ‘pm_sess’ also helps maintain your browser session and lasts for 30 minutes.
Cookies and other technologies may also be used to improve the performance of Google services. For example, the ‘CGIC’ cookie improves the delivery of search results by autocompleting search queries based on a user’s initial input. This cookie lasts for six months.
Google uses the ‘CONSENT’ cookie, which lasts for two years, to store a user’s state regarding their cookies choices. Another cookie, ‘SOCS’, lasts for 13 months and is also used to store a user’s state regarding their cookies choices.
Cookies and other technologies used for security help to authenticate users, prevent fraud and protect you as you interact with a service.
The cookies and other technologies used to authenticate users help ensure that only the actual owner of an account can access that account. For example, cookies called ‘SID’ and ‘HSID’ contain digitally signed and encrypted records of a user’s Google Account ID and most recent sign-in time. The combination of these cookies allows Google to block many types of attack, such as attempts to steal the content of forms submitted in Google services.
Some cookies and other technologies are used to prevent spam, fraud and abuse. For example, the ‘pm_sess’, ‘YSC’ and ‘AEC’ cookies ensure that requests within a browsing session are made by the user, and not by other sites. These cookies prevent malicious sites from acting on behalf of a user without that user’s knowledge. The ‘pm_sess’ cookie lasts for 30 minutes, while the ‘AEC’ cookie lasts for 6 months. The ‘YSC’ cookie lasts for the duration of a user’s browsing session.
Cookies and other technologies used for analytics help collect data that allows services to understand how you interact with a particular service. These insights allow services to both improve content and build better features that enhance your experience.
Some cookies and other technologies help sites and apps understand how their visitors engage with their services. For example, Google Analytics uses a set of cookies to collect information and report site usage statistics without personally identifying individual visitors to Google. ‘_ga’, the main cookie used by Google Analytics, enables a service to distinguish one visitor from another and lasts for two years. Any site that implements Google Analytics, including Google services, uses the ‘_ga’ cookie. Each ‘_ga’ cookie is unique to the specific property, so it cannot be used to track a given user or browser across unrelated websites.
Google services also use ‘NID’ and ‘ENID’ cookies on Google Search, and ‘VISITOR_INFO1_LIVE’ and ‘YEC’ cookies on YouTube, for analytics.
The ‘NID’ cookie is used to show Google ads in Google services for signed-out users, while the ‘ANID’ and ‘IDE’ cookies are used to show Google ads on non-Google sites. If you have personalised ads enabled, the ‘ANID’ cookie is used to remember this setting and lasts for 13 months in the European Economic Area (EEA), Switzerland and the United Kingdom (UK), and 24 months everywhere else. If you have turned off personalised ads, the ‘ANID’ cookie is used to store that setting until 2030. The ‘NID’ cookie expires six months after a user’s last use. The ‘IDE’ cookie lasts for 13 months in the European Economic Area (EEA), Switzerland and the United Kingdom (UK), and 24 months everywhere else.
Depending on your ad settings, other Google services, such as YouTube, may also use these and other cookies and technologies, such as the ‘VISITOR_INFO1_LIVE’ cookie, for advertising.
Some cookies and other technologies used for advertising are for users who sign in to use Google services. For example, the ‘DSID’ cookie is used to identify a signed-in user on non-Google sites and to remember whether the user has agreed to ad personalisation. It lasts for two weeks.
Through Google’s advertising platform, businesses can advertise in Google services, as well as on non-Google sites. Some cookies support Google showing ads on third-party sites and are set in the domain of the website that you visit. For example, the ‘_gads’ cookie enables sites to show Google ads. Cookies that start with ‘_gac_’ come from Google Analytics and are used by advertisers to measure user activity and the performance of their ad campaigns. The ‘_gads’ cookies last for 13 months and the ‘_gac_’ cookies last for 90 days.
Some cookies and other technologies are used to measure ad and campaign performance and conversion rates for Google ads on a site that you visit. For example, cookies that start with ‘_gcl_’ are primarily used to help advertisers determine how many times users who click on their ads end up taking an action on their site, such as making a purchase. Cookies used for measuring conversion rates are not used to personalise ads. ‘_gcl_’ cookies last for 90 days.
See more information about cookies used for advertising here.
Cookies and other technologies used for personalisation enhance your experience by providing personalised content and features, depending on your settings at g.co/privacytools or your app and device settings.
Personalised content and features include things such as more relevant results and recommendations, a customised YouTube homepage and ads that are tailored to your interests. For example, the ‘VISITOR_INFO1_LIVE’ cookie may enable personalised recommendations on YouTube based on past views and searches. And the ‘NID’ cookie enables personalised autocomplete features in Search as you type search terms. These cookies expire six months after a user’s last use. Another personalisation cookie, ‘UULE’, sends precise location information from your browser to Google’s servers so that Google can show you results that are relevant to your location. The use of this cookie depends on your browser settings and whether you have chosen to have location turned on for your browser. The ‘UULE’ cookie lasts up to six hours.
Non-personalised content and features are distinct from personalised content and features insofar as they are influenced by things like the content that you’re currently viewing, your current Google search and your general location.
MANAGING COOKIES IN YOUR BROWSER
Most browsers allow you to manage how cookies are set and used as you’re browsing, and to clear cookies and browsing data. Also, your browser may have settings letting you manage cookies on a site-by-site basis. For example, Google Chrome’s settings at chrome://settings/cookies allow you to delete existing cookies, allow or block all cookies, and set cookie preferences for websites. Google Chrome also offers Incognito mode, which deletes your browsing history and clears cookies on your device after you close your incognito windows.
MANAGING OTHER TECHNOLOGIES IN YOUR APPS AND DEVICES
Most mobile devices and applications allow you to manage how other technologies, such as unique identifiers used to identify a browser, app or device, are set and used. For example, the advertising ID on Android devices or Apple’s Advertising Identifier can be managed in your device’s settings, while app-specific identifiers may typically be managed in the app’s settings.