Last updated: August 12th, 2026
Who We Are
The Wicklow Wine Company Limited ("we", "us", "our") is the data controller responsible for your personal information. We are an Irish-registered company operating an online wine retail store at www.wicklowwineco.ie and a physical retail premises.
The Wicklow Wine Company Limited
7 Main Street, Wicklow Town, Co. Wicklow, A67 VN23
+353 (0)404 66767
Ireland
This privacy policy explains how we collect, use, store, and protect your personal information when you visit our website, create an account, place an order, or otherwise interact with us. It is governed by the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Irish Data Protection Acts 1988 to 2018.
Age Restriction
This website sells alcoholic beverages. Under the Intoxicating Liquor Acts 1988 to 2008, it is an offence to sell alcohol to a person under the age of 18. You must be aged 18 or over to purchase from us or to create an account on this site.
We operate an age verification gate on our website. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a person under 18, we will delete it promptly.
What Personal Information We Collect
Information You Provide Directly
When you interact with our website or contact us, you may provide:
- Name, email address, phone number, and postal address when placing an order or creating an account
- Billing and shipping address for order fulfilment
- Payment confirmation (we do not store your full card details — see "Payment Processing" below)
- Account login credentials (email and password)
- Saved addresses and order history within your account
- Any information you include in messages to us through our contact form, email, or phone
Information Collected Automatically
When you browse our website, our platform (Shopify) automatically collects limited technical information to ensure the site functions correctly:
- Browser type and version
- Operating system
- Pages visited and time spent on the site
- Referring website
We use Shopify's built-in analytics only. We have configured our analytics to collect anonymous, aggregated data. We do not use Google Analytics or any third-party tracking or advertising tools. We do not build individual browsing profiles of our visitors.
Information from Service Providers
Our platform provider (Shopify) and payment processor (WorldPay) may collect information necessary to process your transactions and prevent fraud. This is handled directly by those providers and is subject to their own privacy policies.
How and Why We Use Your Information
Under GDPR, we must have a lawful basis for each way we use your personal information. Here is how we use it and the legal basis for each:
| What we do | Legal basis (GDPR Art. 6) |
|---|---|
| Process and fulfil your orders (including payment, shipping, and Click & Collect) | Contractual necessity — we need this information to deliver what you've purchased |
| Create and manage your customer account | Contractual necessity — you've requested an account with us |
| Send you order confirmations, shipping updates, and collection notifications | Contractual necessity — transactional communications related to your purchase |
| Send you marketing emails about wines, events, and offers (only with your permission) | Consent — you can withdraw this at any time |
| Respond to your enquiries and provide customer support | Legitimate interest — to be responsive and maintain our relationship with you |
| Detect and prevent fraud | Legitimate interest — to protect our business and our customers |
| Maintain anonymous site analytics to improve our website | Legitimate interest — to understand how our site is used in aggregate |
| Comply with tax, accounting, and other legal obligations | Legal obligation — Irish tax law requires us to retain certain records |
We do not use your personal information for profiling, automated decision-making, or targeted advertising.
Who We Share Your Information With
We do not sell, rent, or trade your personal information. We never have and we never will.
We share your information only with the following parties, and only to the extent necessary:
Shopify — Our e-commerce platform. Shopify hosts our website, processes orders, and provides our built-in analytics and email marketing tools. Shopify International Limited (registered in Ireland) is our primary contracting entity. Shopify's privacy policy: https://www.shopify.com/legal/privacy
WorldPay — Processes your card payments securely. We do not see or store your full card number. WorldPay handles this directly in compliance with PCI-DSS standards.
[COURIER — TBD] — When we ship orders, we share your name, delivery address, and phone number with our delivery partner so they can deliver your order and contact you if needed.
Sage 50 — Our accounting software. Order and transaction records are transferred to Sage for bookkeeping and tax compliance.
We may also disclose your information if required to do so by law, court order, or regulation, or to protect the rights, property, or safety of our business, our customers, or others.
International Data Transfers
Your personal data is stored at rest in Europe by Shopify International Limited (Ireland), which uses data centres within the European Economic Area.
However, Shopify transfers some data to Shopify Inc. (Canada) for processing purposes. This transfer is protected by:
- The European Commission's adequacy decision for Canada (recognising Canada as providing adequate data protection)
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Shopify's Data Processing Addendum (DPA), which binds all their sub-processors
Shopify's sub-processors may also be located in the United States and Singapore, all operating under SCCs and contractual data protection obligations.
We do not transfer your data outside Europe for any other purpose. We do not use any advertising, tracking, or analytics services that transfer data internationally.
Cookies
Our website uses cookies — small text files stored on your device — to make the site work properly.
Essential Cookies
These are required for the website to function and cannot be disabled. They include:
- Shopping cart contents
- Session management (keeping you logged in)
- Cookie consent preferences
- Fraud prevention tokens
Analytics Cookies
Shopify's built-in analytics uses cookies to collect anonymous, aggregated information about how visitors use our site (such as which pages are most popular). These cookies do not identify you personally.
We do not use any third-party analytics cookies (such as Google Analytics) or marketing/advertising cookies.
Managing Cookies
When you first visit our site, you will see a cookie consent banner where you can accept or decline non-essential cookies. You can also manage cookies through your browser settings at any time. Disabling essential cookies may prevent parts of the website from functioning correctly.
How Long We Keep Your Information
We retain your personal information only for as long as necessary for the purposes described in this policy:
| Data type | Retention period | Reason |
|---|---|---|
| Order and transaction records | 6 years from the date of the transaction | Irish tax law (Taxes Consolidation Act 1997) requires retention of financial records for 6 years |
| Customer account information | Until you request deletion of your account | Contractual — to maintain your account |
| Marketing consent and email preferences | Until you unsubscribe or withdraw consent | We keep a record that you unsubscribed to ensure we don't contact you again |
| Customer support correspondence | 2 years from resolution | Legitimate interest — to handle any follow-up queries |
| Anonymous analytics data | Aggregated indefinitely | This data cannot identify you |
When retention periods expire, we securely delete or anonymise your information.
Your Rights
Under GDPR, you have the following rights over your personal information:
Access — You can request a copy of the personal information we hold about you.
Correction — You can ask us to correct any inaccurate or incomplete information. You can also update your details directly through your account.
Deletion — You can ask us to delete your personal information. We will do so unless we are legally required to retain it (for example, tax records for 6 years).
Restriction — You can ask us to temporarily stop processing your information in certain circumstances.
Portability — You can request your information in a structured, commonly used, machine-readable format.
Withdrawal of consent — Where we rely on your consent (such as marketing emails), you can withdraw it at any time. The easiest way is to click the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.
Objection — You can object to processing based on legitimate interest. We will stop unless we can demonstrate compelling legitimate grounds.
To exercise any of these rights, contact us at:
The Wicklow Wine Co,
7 Main Street
Wicklow Town
Co. Wicklow
A67 VN23
Ireland
+353 404 66 767
We will respond within one month. We may need to verify your identity before fulfilling your request. There is no charge for exercising your rights.
Data Security
We take reasonable and appropriate measures to protect your personal information from loss, misuse, and unauthorised access:
- Our website is secured with SSL/TLS encryption (HTTPS) for all pages
- Payment card data is handled entirely by our PCI-DSS compliant payment processor — we never see or store your full card details
- Access to customer data within our Shopify admin is restricted to authorised staff
- Customer account passwords are encrypted and not accessible to us
No method of transmission or storage is completely secure. If you believe your account has been compromised, please contact us immediately.
Data Breaches
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
- Notify the Data Protection Commission within 72 hours of becoming aware of the breach, as required by GDPR Article 33
- Notify you directly without undue delay if the breach is likely to result in a high risk to your rights and freedoms, as required by GDPR Article 34
Supervisory Authority
You have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal information properly:
Data Protection Commission 21 Fitzwilliam Square South Dublin 2, D02 RD28 Ireland Website: https://www.dataprotection.ie Phone: +353 1 765 0100 / 1800 437 737
Third-Party Links
Our website may contain links to other websites (such as wine producers or industry bodies). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal and regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email or by a prominent notice on our website.
Contact Us
If you have any questions about this privacy policy or how we handle your personal information:
The Wicklow Wine Co,
7 Main Street
Wicklow Town
Co. Wicklow
A67 VN23
Ireland
+353 404 66 767