At Drink Warehouse UK (DWUK) we are committed to processing personal information about our customers in ways that comply with our legal obligations as well as being clear with our customers about what we do with their personal information. Some of the key points of DWUK's privacy statement are:
We collect a range of personal information relating to you, including your:
We use your personal information as follows:
We may send you direct marketing in relation to our own products and services by phone and post, as long as this is in line with any marketing preferences that you have provided to us.
We will only send you direct marketing in relation to our own products and services by email or SMS:
Your agreement to the use of your personal information for direct marketing purposes is optional and if you choose not to consent, your visit to and use of our Websites will not be affected.
You can choose to opt out of receiving direct marketing information from us at any time, through the 'Manage Subscription Preferences' link at the bottom of any DWUK email you receive, or by contacting the DWUK Customer Service Centre:
We use technology provided by the credit reference agency Experian (“CRA”) that processes personal information that you provide to us, in order to analyse your creditworthiness, which helps us to decide if we are able to offer you an account, through which you can purchase products and services from DWUK, by phone or online.
Experian provides a Credit Reference Agency Information Notice (“CRAIN”) with further information about how it uses and shares personal information that it receives about you and/or your business, which is available to review at this link: www.experian.co.uk/crain/index
If you pass our credit checks, and our other account opening criteria (details of which will be made available to you during the account opening process) you will be entitled to open an account with us and order any of our products and services in accordance with our General Conditions of Sale. If you do not pass our credit checks you will not be able to set up an account but you may still be entitled to order our products or services (in accordance with our General Conditions of Sale) at our discretion, by making payment upfront or at the time of delivery (Cash on Delivery).
In terms of the legal bases we rely on to process your personal information, these are as follows:
When we use your personal information for the purposes specified above, we may also share your personal information with:
Otherwise, we securely erase your information once this is no longer required after 18 months
Our Websites contain links to other Internet websites. Unless otherwise explicitly stated, we are not responsible for the privacy practices or the content of such websites, including such sites' use of any personal information. Nevertheless, in the event you encounter any third party associated with our Websites (or who claims association with our Websites) who you feel is improperly collecting or using information about you, please contact email@example.com; we will be happy to forward your message to the third party.
If and when we sponsor promotions, or third parties sponsor promotions in conjunction with our Websites, either we or the third party will post relevant privacy information in the official rules and/or registration area for the promotion. That privacy information, to the extent (if any) it conflicts with this Privacy Statement, will govern that particular promotion.
We use reasonable security methods to protect the personal information that we process, including Internet standard encryption technology (“SSL“ or “Secure Socket Layer“ technology) to encode personal information that you send to us through our Websites. SSL works by using a private key to encrypt data that's transferred over the SSL connection. To check that you are in a secure area of the Website before sending personal information to us, please look at the bottom right/top left of your website browser and check that it displays an image of a closed padlock or an unbroken key.
However, please note that whilst we take appropriate technical and organisational measures to safeguard the personal information that you provide to us, no transmission over the Internet can be guaranteed to be secure. Consequently, please note that we cannot guarantee the security of any personal information that you transfer to us over the Internet.
The following section explains your rights. The various rights are not absolute and each is subject to certain exceptions or qualifications.
We will grant your request only to the extent that it follows from our assessment of your request that we are allowed and required to do so under data protection laws. Nothing in this Privacy Statement is intended to provide you with rights beyond or in addition to your rights as a data subject under data protection laws.
1. The right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights. This is why we're providing you with the information in this Privacy Statement.
2. The right of access
You have the right to obtain a copy of your personal information (if we're processing it), and other certain information (similar to that provided in this Privacy Statement) about how it is used.
This is so you're aware and can check that we're using your personal information in accordance with data protection law.
We can refuse to provide information where to do so may reveal personal information about another person or would otherwise negatively impact another person's rights.
3. The right to rectification
You can ask us to take reasonable measures to correct your personal information if it's inaccurate or incomplete. E.g. if we have the wrong date of birth or name for you.
4. The right to erasure
This is also known as \"the right to be forgotten\" and, in simple terms, enables you to request the deletion or removal of your personal information where there's no compelling reason for us to keep using it or its use is unlawful. This is not a general right to erasure; there are exceptions, e.g. where we need to use the information in defence of a legal claim.
5. The right to restrict processing
You have rights to 'block' or suppress further use of your personal information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your personal information, but may not use it further. We keep lists of people who have asked for further use of their personal information to be \"blocked\" to make sure the restriction is respected in future.
6. The right to data portability
You have rights to obtain and reuse certain personal information for your own purposes across different organisations. This enables you to move, copy or transfer your personal information easily between our IT systems and theirs (or directly to yourself) safely and securely, without affecting its usability. This only applies to your personal information that you have provided to us that we are processing with your consent or to perform a contract which you are a party to (such as pay and compensation services), which is being processed by automated means.
7. The right to object
You have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that processing takes place for the purposes of legitimate interests pursued by DWUK or by a third party. We will be allowed to continue to process the personal information if we can demonstrate “compelling legitimate grounds for the processing which override [your] interests, rights and freedoms” or we need this for the establishment, exercise or defence of legal claims.
8. Rights in relation to automated decision making and profiling
You have the right not to be subject to a decision based solely on automated processing (including profiling), which significantly affects you, subject to some exceptions. Where this is the case, you have the right to obtain human intervention, voice your concerns and to have the decision reviewed.
We review our privacy practices from time to time. We ask that you bookmark and periodically review this page for updates to our Privacy Statement. We reserve the right to modify this policy effective seven (7) days after the posting of the revised Privacy Statement.
For further information regarding these rights, about this Privacy Statement generally or to make a complaint please contact our Data Protection Officer at firstname.lastname@example.org;
Please provide as much information as possible to help us identify the information you are requesting, the action you are wanting us to take and why you believe this action should be taken.
Before assessing your request, we may request additional information in order to identify you. If you do not provide the requested information and, as a result we are not in a position to identify you, we may refuse to action your request.
We will generally respond to your request within one month of receipt of your request. We can extend this period by an additional two months if this is necessary taking into account the complexity and number of requests that you have submitted.
We will not charge you for such communications or actions we take, unless:
If after contacting DWUK you are still unhappy you may also complain to the Information Commissioner, all contact details are available on the Information Commissioner's Website: ico.org.uk