Privacy & GDPR Policy
Effective Date: January 2026
Welcome to AMPEL. We take your privacy seriously and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and store your information when you visit our website or use our fine wine portfolio management services.
Who We Are
AMPEL Limited
Registered in England & Wales
Website: ampel.wine
Contact Email: paul.hammond@ampelglobal.com
1. What Data We Collect
We collect the following types of personal data when you interact with us:
| Data Type | Examples |
|---|---|
| Contact Details | Name, email address, phone number, shipping and billing addresses |
| Order Information | Purchase history, payment method (via secure third-party processors) |
| Portfolio Data | Wine collection details, valuations, storage locations |
| Marketing Preferences | Newsletter opt-in status, email engagement |
| Technical Data | IP address, browser type, device type, cookies (with consent) |
| Age Verification | Date of birth (to comply with alcohol sales laws) |
We do not collect sensitive data (e.g. religion, health info) unless required by law.
2. Why We Use Your Data (Legal Bases)
We only process your data when we have a lawful reason to do so:
| Purpose | Legal Basis |
|---|---|
| To process and deliver orders | Contractual necessity |
| To manage payments and fraud prevention | Legal obligation and legitimate interests |
| To provide portfolio intelligence services | Contractual necessity |
| To send you marketing emails (if you opt in) | Consent |
| To improve our website and services | Legitimate interests |
| To verify your age (over 18 requirement) | Legal obligation |
3. Marketing & Consent
We will only send you marketing emails if you have explicitly opted in. You can unsubscribe at any time by clicking the link in our emails or contacting us directly.
We do not use pre-ticked boxes or add you to marketing lists without your consent.
4. Cookies & Analytics
We use cookies to:
- Enable website functionality (essential cookies)
- Understand how visitors use our site (analytics cookies)
- Improve user experience and performance
We ask for your consent before setting non-essential cookies. You can manage cookie settings anytime via our cookie banner.
5. How We Share Your Data
We only share data with trusted third parties who help us operate our business securely:
| Partner Type | Examples |
|---|---|
| Payment Processors | Stripe (we never store full payment details) |
| Email Marketing | Brevo (if you subscribe) |
| Analytics Providers | Google Analytics |
| Storage Partners | NEXUS Bonded Warehouses |
We ensure all third parties comply with UK/EU data protection laws through contracts and due diligence.
6. International Data Transfers
Some of our service providers may store or process data outside the UK/EU. When this happens, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- International Data Transfer Agreements (IDTAs)
- UK/EU adequacy decisions (where available)
7. How Long We Keep Your Data
We only keep your data for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Order and payment records | 6 years (for tax/legal purposes) |
| Portfolio data | Duration of account plus 2 years |
| Marketing contact details | Until you unsubscribe or 2 years of inactivity |
| Age verification data | Retained only as long as necessary to verify legal purchase age |
| Cookie data | Depends on cookie type (see settings) |
8. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Delete your data ("right to be forgotten")
- Object to how we use your data
- Restrict or limit our use of your data
- Withdraw consent at any time (e.g. unsubscribe from emails)
- Data portability – get a copy of your data in a usable format
To exercise any of these rights, contact us at: paul.hammond@ampelglobal.com
We may need to verify your identity before fulfilling certain requests.
9. Data Security
We take data protection seriously. We use:
- HTTPS encryption (SSL/TLS) across our site
- Secure, access-controlled storage systems
- PCI-compliant payment processors
- Two-factor authentication for admin systems
- Regular backups and software updates
10. Children's Privacy
Our website and services are not intended for anyone under the age of 18. We do not knowingly collect data from minors.
11. Updates to This Policy
We may update this policy from time to time to reflect changes in the law or our services. We'll notify you via email or a notice on our website if the changes are significant.
Last updated: January 2026
12. Contact Us
If you have any questions about this policy or how your data is used, please contact:
Privacy Officer – AMPEL Limited
Email: paul.hammond@ampelglobal.com
United Kingdom
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk.