Number Twelve respects your privacy and seeks to protect your personal data. The following information describes how we gather and use that data. The amount of information we hold on you and how we use it depends on your relationship with us and on which services you use; some of the sections below may not be relevant to you.
We keep to a minimum the amount of information we hold about you.
We delete your data when it is no longer needed.
We apply appropriate security mechanisms to protect your personal data.
What information does Number Twelve collect about me? We may collect some (or all) of the following: your name, phone number, email address, IP address, social identifiers (for example, age, gender, socio-economic status), data provided by cookies and other similar technologies, functional data such as registration and system data, as well as additional usage data – for instance, your purchasing history, contact permissions, product preferences, wine stored with us or information about your attendance at one of our events.
Why does Number Twelve need my information?
We use your data to help us provide the best experience of our products and services, which includes using data to improve (and, where possible, personalise) your experiences. We use your data to communicate with you, for example, informing you about new products or services, security and other types of updates. We also use data to fulfil contracts, to send you the goods you have bought, invoices and to collect payments.
What do you use my information for?
We use data for the following purposes:
To improve your experience of our products and services
Product improvement and development
Security, safety and dispute resolution
Communications and marketing
Fulfilling contracts and collecting payment
Can I opt-out of receiving communications from Number Twelve?
Yes, you may opt out of receiving communications from us at any time by logging into your account and unsubscribing or by contacting us at email@example.com We will respect your rights under GDPR in this regard, however, this may impact the quality of service you receive from us or prevent us from providing a service to you.
How do I delete my personal data from Number Twelve and what are the consequences?
You can email firstname.lastname@example.org or contact our Customer Service team to request that your data be deleted. However, please note, that by deleting your personal data you may impact the service we can provide to you. We will not delete data which is needed to fulfil a contract until that contract is completed, or unless we agree to terminate the contract. We will inform you if deleting your data will impact our ability to perform a contract in case this affects your decision.
How long does Number Twelve keep my information?
We retain personal data for as long as necessary to provide services and products to you, to fulfil the transactions you have requested, or for other essential purposes (for example, complying with our legal obligations, resolving disputes and fulfilling our agreements). We will store your personal data for a minimum of six years after your last transaction with us unless we have a legitimate or contractual reason or a legal obligation to retain it thereafter, for example, you might hold stock in our cellars.
How is information stored?
We are committed to protecting the security of your personal data. We store data in a number of places depending on our requirements to access and use it. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide on cloud-based or computer systems that have limited access and are in controlled facilities. When there is a need to transmit data over the internet, it is protected by encryption and or passwords. Where possible, we avoid storing paper records of personal data.
What personal data do we hold and why?
When you contact us to enquire, we will use your name and contact information to respond. We will then use this information to communicate with you during the provision of our services to you. We collect and update information about users of our services. We may obtain this information via direct contact with you, from third parties such as other users who refer you to us or automatically via your use of our services.
This information may include your contact details, registration and payment details, support problems, details around participation in events, prize draws or surveys and certain relevant details of your product preferences and contact permissions.
For each visitor to our website, our web server automatically recognises the user’s domain name. We also collect the email addresses of those who communicate with us via email and anonymously aggregate information on which pages users access or visit. Information volunteered by users, such as survey information and/or site registrations, is also collected. We will only use information collected in a survey on an anonymous basis unless we have your permission to do otherwise.
If you are a registered user of our services, we will gather further relevant information, such as generic types of data accessed, time of access, the volume of use of services and traffic data from the use of our website. Traffic data includes logs, details of networks, data and systems accessed, details of the sender and recipients of messages sent over our services, times and location of log on or access, duration of sessions, clickstream and similar usage or system data. Traffic data may sometimes be traceable to and or related to not just companies but named individuals. Before you register with Number Twelve for access to services or transactional areas of our website, you can browse our website anonymously and we will not collect your data.
We may also receive your personal data when processing gift requests from customers for whom you are the recipient. We process that data initially under contract with the gift purchaser and any secondary processing such as product updates and associated events will be because we have a legitimate business interest to do so.
On request, we can provide you with access to all information, including proprietary information, that we maintain about you (but not other users unless required to do so by law) including unique identifier information (for example, your customer number or password) and contact information (for example, your name, address and phone number). You can request this information by emailing us at email@example.com or writing to us. We will correct inaccuracies on the provision of the correct details or, where relevant, you can do this by changing your registered details online. Please note, that we will never send personal information on request unless we have proof that the recipient is the owner of the data.
Who do we share your information with?
We work with third parties in the provision of some of our services, for example, research agencies to help us improve our customer service or marketing service providers who help us contact our customers and logistics partners who help deliver products.
On request, and when relevant to a service you use, we can provide details of which third parties we work with. We will also discuss and agree on any specific security questions or requirements you may have during the provision of our services.
The third parties we work with – including those who provide email and storage solutions used in our day to day work – are monitored on how they meet the requirements of current European data protection legislation and the requirements of GDPR. When we contract with third parties we enter into agreements that encourage GDPR compliance.
We do not share nor sell your personal data to anyone else.
Exemptions to the above are where we are asked to provide information as a result of a court order or to recover monies due.
Your rights regarding our use of your personal data
You can review, edit or ask us to delete your personal data we hold by contacting us directly at firstname.lastname@example.org
You can alter how we use your information, for example how we communicate with you, by changing your contact permissions via your online account or by contacting Customer Services. You will always have the right to opt-out of receiving promotional emails and other types of marketing or sales communication from us. If you opt-out, you will also have the ability to opt back in at a later date.
If you specifically wish to stop receiving emails from us, please click on the “Unsubscribe” link included at the bottom of any of our emails. We respect your choice, and we will stop sending you promotional emails once you unsubscribe. It may take up to two weeks to process your request. Alternatively, you can email us at email@example.com log in to your account and change your contact permissions. Unsubscribing from promotional emails will not affect our ability to email you for the fulfilment of a contract or service provision.
We will respond to any request to access or delete your personal data as soon as possible, but certainly within 30 days.
Contacting you via email alerts, notices and newsletters
Number Twelve only sends marketing information to those it believes it has a legitimate business interest to contact. For example, an existing customer or someone who has registered on our website. This means that, from time to time, we may send you email newsletters or other notifications about products being promoted by us or on our website or new services being offered. If you wish to stop receiving some, or all, of our communications, you can unsubscribe by logging into your account, or follow the instructions included in our emails or contact firstname.lastname@example.org
If you supply us with your postal address you may receive periodic mailings from us with information on new products and services or upcoming events. If you do not wish to receive such updates, you can unsubscribe by logging into your account, or please let us know by emailing us at email@example.com
If you supply us with your telephone number you may receive periodic calls from us to tell you about our products and services or upcoming events. If you do not wish to receive such calls, please let us know by emailing us at firstname.lastname@example.org
Interception of email
Number Twelve may intercept emails addressed to individuals within Number Twelve. The reasons we do this are related to the security of your data, to our security, to the security of our staff and others, for detection and prevention of crime and to identify correct recipients or to make sure mail is dealt with during staff absence. Number Twelve may reject, delay or remove content from emails which have a nature, content or attachments which may disrupt our systems or because they may pose security issues such as viruses.
We may also filter out emails which contain content which is considered offensive, unwanted or spam. In certain circumstances, this may, unfortunately, result in “innocent” emails being affected. We do our best to reduce such occurrences.
Number Twelve has developed and implemented strict policies and processes governing information technology and data user behaviour. These cover areas such as access control, authentication, audit, monitoring, alarms, data storage and backup, transmission standards and environment integrity.
We use reasonable endeavours to install and have appropriate security measures in place in our systems and facilities to protect against the loss, misuse or alteration of information that we have collected from you.
We do not store any credit card details on our website. The card details are encrypted and securely held by Stripe.
We minimise the personal data that is accessible to our colleagues, and where appropriate we anonymise that data for marketing purposes.
When we introduce new systems and policies that relate to personal data, we ensure that data protection and security are included in the design of those systems.
What if this privacy notice changes?