Page 3 - Wine Importers Privacy Policy (GDPR) May 2018

6) Security of your personal information

We will take reasonable technical and organisational precautions to prevent the loss, misuse or
alteration of your personal information.
We will store any personal information you provide on our secure (password- and firewall-
protected) servers.

Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the
security of data sent over the internet.

7) How long do we keep your information
We will keep your personal information only where it is necessary to provide you with our products
or services while you are a customer.

We may also keep your information after this period but only where required to meet our legal or
regulatory obligations. The length of time we keep your information for these purposes will vary
depending on the obligations we need to meet.
8) Policy amendments

We may update this privacy policy from time-to-time by posting a new version on our website. You
should check this page occasionally to ensure you are happy with any changes.
9) Your rights

You may instruct us to provide you with any personal information we hold about you. Provision of
such information will be subject to the supply of appropriate evidence of your identity, such as a
passport and proof of address.
We may withhold such personal information to the extent permitted by law.

You may instruct us not to process your personal information for marketing purposes (by
unsubscribing) or to delete your personal information from our databases.

10) Updating information

Please let us know if the personal information which we hold about you needs to be corrected or
updated.
11) Data breach

We will report any unlawful data breach of our database(s) to all relevant authorities within 72 hours
of the breach if it is apparent that personal data stored in an identifiable manner has been stolen or
lost.

In the event of a major data breach, our Disaster Recovery or Crisis Management team will take
whatever action is required to assess and resolve the situation.

12) Data Controller
The data controller of this is: Gordon White, Administration Director whose registered address is 26
Charlotte Square,Edinburgh,EH2 4ET. Our data protection registration number is Z9691639.