PRIVACY POLICY

Where we receive your personal data, we are the data controller and responsible for our use of your personal data.  If you have any questions about this privacy policy, please contact us as set out below:

• Ridgeview Estate Winery Limited
• Ridgeview Wine Estate, Fragbarrow Lane, Ditchling Common, Hassocks, Sussex, England, BN6 8TP
• [email protected]
• 01444 2402040

We may collect and process the following data about you:

• Identity Data – Including your first name, last name, date of birth and title.
• Contact Data – Including your address, email address, social media account details and telephone numbers.
• Transactional Data – Including details about payments to and from you and other details of products and services you have purchased from us, together with information in relation to your memberships.
• Profile Data – Including your username, log ins and password (where you have an account with us).
• Technical Data – Including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Website.
• Usage Data –  Including information about how you use the Website.
• Marketing and Communications Data – Including your preferences in receiving marketing from us and your communication preferences.
• Health and Medical Data – Including details of access or dietary requirements.

Other than where we collect your access or dietary requirements when you are attending an event we run or a guest at one of our restaurants, and you have consented for us to use such information in connection with your visit, we do not collect any special category data or information about criminal convictions.

We may collect your personal data in different ways, including:

• Information you provide to us, including:
• Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website (including the provision of your date of birth for age verification purposes), or subscribing to a membership we offer, subscribing to our services, ordering our products, posting material, contacting us about a restaurant booking, tour or event or requesting further services.
• if you enter a competition or promotion sponsored or run by us.
• If you report a problem with the Website.
• When you engage with us on social media, we collect your social media username to help respond to your comments or questions.
• When you purchase a product or service at cellar door, through our Website or over the phone.
• When you book to attend an event.
• When you provide us with feedback.
• If you contact us whether by telephone, in store or online.

As you interact with the Website, we will automatically collect Usage and Profile Data. We will also collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. Please see our cookie policy [LINK] for further details.

Occasionally there will be particular services that enable you to choose not to give us particular details. This is your right, but please remember that choosing to restrict the kind of information you provide to us will limit our ability to tailor our services to you individually.

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to stop providing products or a service to you, but we will notify you if this is the case at the time.

Any information we collect about you will be used in a proportionate, targeted way. This means we will not gather more information from you than is necessary for the purpose for which it was collected. The way we collect your personal information will determine the purposes we use it for.

View Table here 

We use CCTV recording equipment in and around our venues for the protection of our staff and visitors. Recordings may be shared with third parties, including the policy for public safety reasons. If you require more information about our use of CCTV please contact [email protected].

We will provide you with choices regarding certain personal information uses, particularly around marketing and advertising.

We may use your Identity, Contact and Marketing and Communications information to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have requested information from us and you have not opted out of receiving that marketing.

We will get your express opt-in consent before we share your personal information with any third party for marketing purposes.

You can ask us or third parties to stop sending you marketing messages at any time by:

• following the opt-out links or ‘unsubscribe’ option on any marketing message sent to you; or
• emailing, [email protected] or by contacting us at any time.

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us for other purposes.

If you have asked us not to contact you, we may need to retain your name and contact details to put you on a suppression list (this is a record of people who have withdrawn their consent and ensures we do not get in touch with you if you have chosen to do this).

We may share your personal information with third parties from time to time, as set out below:

• With other companies within the Ridgeview group.
• With trusted third party service providers, acting as processors, who provide IT, development, consultancy and administration services.
• With our professional advisors, acting as processor or controller, including lawyers, bankers, auditors or insurers.
• With third parties we partner with when providing an event, such as catering providers or security.

We may also share your personal data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use or terms and conditions of business and other agreements; or to protect the rights, property, or safety of Ridgeview Estate Winery Limited, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

We may share personal information with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal information in the same way as set out in this privacy policy.

The data that we collect from you may be transferred to, and stored at, a destination outside of the United Kingdom (“UK”) or the European Economic Area (“EEA”). Such employees may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.

Where we share your personal data with third parties located outside the UK or EEA we comply with the requirements for international data transfers.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. If you believe, or reasonably suspect, that your password is known to someone else, you should immediately inform us so that we can take the appropriate action.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

The advertisements that appear on our Website are delivered to you, on our behalf, by our web advertising partners. Information about your visits to our Website, such as the number of times you have viewed an advertisement is used to serve such third party advertisements. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours.

Our Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates or other third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

You have the right to:

• Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
• Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) If you want us to establish the data’s accuracy, (b) Where our use of the data is unlawful but you do not want us to erase it, (c) Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims, or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact [email protected].

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail, but you should also regularly check this page for any changes. This privacy policy was last updated on 05/10/23.

To view our privacy policy relating to recruitment applications please click here.