Privacy Policy
Welcome to Wiston Estate
1. Introduction
1.1 Wiston Estate Partnership (“we”, “us”, “our”) is committed to protecting and respecting your privacy.
1.2 This policy explains how we collect, use, and protect your personal data when you visit our website or interact with our services.
1.3 This policy applies where we act as a data controller, meaning we determine how and why your personal data is processed.
1.4 Our website uses cookies and similar technologies. Where required, we will ask for your consent before placing non-essential cookies on your device.
2. About us
2.1 Wiston Estate Partnership operates this website.
2.2 We are registered in England and Wales (VAT number: 434 4080 18).
2.3 Registered office: Wiston Estate Office, Wiston Park, Steyning, West Sussex, BN44 3DD.
2.4 Principal place of business: Wiston Estate Winery, North Farm, London Road, Washington, West Sussex, RH20 4BB.
2.5 Contact details. If you have any questions about this policy or how we handle your personal data, please contact us:
Email: [email protected]
Telephone: 01903 877845
This inbox is monitored by the appropriate member of our management team responsible for data protection.
3. Personal data we collect
We may collect and process the following categories of personal data:
3.1 Contact data – including your name, email address, and telephone number.
3.2 Booking data – including restaurant reservations, tour bookings, and event attendance details (via SevenRooms or similar systems).
3.3 Transaction data – including purchases made through our website or on-site, and associated payment and delivery details.
3.4 Marketing data – including your communication preferences and engagement with our emails (via Mailchimp).
3.5 Technical and usage data – including IP address, browser type, device information, and website usage patterns (via analytics tools such as Google Analytics).
3.6 Account data – if you create an account on our website.
3.7 Correspondence data – including any communications you send to us.
3.8 Age verification data – confirmation that you are over 18 where required for alcohol purchases.
4. How we use your personal data
We use your personal data for the following purposes:
4.1 To fulfil orders and bookings
Including processing purchases, managing reservations, and delivering services.
(Legal basis: contract)
4.2 To respond to enquiries and provide customer support
(Legal basis: legitimate interests and/or contract)
4.3 To improve our website and services
Including analysing website usage and performance.
(Legal basis: consent for analytics cookies)
4.4 To send marketing communications
Including news, events, and offers where you have opted in.
(Legal basis: consent)
4.5 To comply with legal and regulatory obligations
Including accounting, licensing, and tax requirements.
(Legal basis: legal obligation)
4.6 To protect our business and prevent fraud
(Legal basis: legitimate interests)
5. Marketing communications
5.1 We will only send marketing emails where you have given clear consent.
5.2 You can unsubscribe at any time by:
- Clicking the unsubscribe link in any email, or
- Contacting us directly
5.3 We use Mailchimp to manage and send marketing communications.
6. Sharing your personal data
We share your personal data only where necessary, including with:
6.1 Service providers supporting our operations, including website hosting, maintenance and development providers, as well as:
- WooCommerce & Meteorik (website and ecommerce platforms)
- SevenRooms, Innstyle, AirB&B & booking.com (booking systems)
- Mailchimp (email marketing)
- Payment providers including Stripe & Klarna
- Accounting and Epos systems such as Oracle NetSuite and Lightspeed
6.2 Analytics and advertising providers, including:
- Google (analytics and advertising services)
- Meta (Facebook and Instagram advertising)
6.3 Professional advisers and insurers, where necessary for legal, financial, or risk management purposes.
6.4 We do not sell your personal data.
7. International data transfers
7.1 Some of our service providers are located outside the UK.
7.2 Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:
- UK-approved data transfer agreements
- Adequacy decisions where applicable
8. Data retention
We retain personal data only for as long as necessary:
- Transaction data – up to 7 years (legal requirement)
- Booking and enquiry data – typically up to 12 months
- Marketing data – until you unsubscribe or after a period of inactivity
- Website analytics data – up to 26 months
We may retain data for longer where required by law or to protect legal rights.
9. Your rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request transfer of your data
You also have the right to raise a concern directly with us about how your personal data is handled (see Section 10 below).
To exercise your rights, contact us at [email protected].
You also have the right to complain to the Information Commissioner’s Office.
10. Raising concerns
10.1 If you have any concerns about how we handle your personal data, you can contact us directly using the details above.
10.2 We will investigate your concern and aim to respond as promptly as possible, typically within 30 days.
10.3 We encourage you to contact us first so we can resolve any issues before you approach the Information Commissioner’s Office.
11. Cookies and tracking technologies
11.1 We use cookies and similar technologies to:
- Ensure our website functions properly
- Analyze website usage
- Deliver relevant, personalised or non-personalised advertising
11.2 We use tools including:
- Google Analytics
- Meta (Facebook and Instagram) Pixel
11.3 Non-essential cookies (analytics and marketing) are only used where you have given consent via our cookie banner.
11.4 You can accept or reject cookies and manage your preferences at any time.
12. Managing cookies
Most web browsers allow you to control cookies through settings. You can block or delete cookies, but this may affect how the website functions.
13. Data security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.
14. Updates to this policy
We may update this policy from time to time. The latest version will always be available on our website.