Privacy Policy

We are the data controller responsible for your personal data.

• BIRÉTIS REGISTERED UNDER: DECELLENZA ENTERPRISES LTD
• Number: 17039276
• Email: hello@biretis.com
• Website: www.biretis.com

If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.

We collect personal data in the following situations:

a) Contact Form Enquiries

When you submit an enquiry through our website contact form, we collect:

• Your name
• Your email address
• Your phone number (if provided)
• The content of your message or enquiry

b) Customer Reviews

When you submit a review or rating on our website, we collect:

• Your name or display name
• Your email address (used to verify the review, not publicly displayed unless you choose)
• The content of your review, including your rating and written comments
• The date and time of submission
• Your IP address (for fraud prevention and moderation purposes)

c) Automatically Collected Data

When you browse our website, we automatically collect certain technical information:

• Your IP address
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website (how you arrived at our site)

This data is collected through essential website cookies and server logs. It helps us maintain the security and performance of our website.

We only use your personal data where we have a lawful reason to do so. The list below explains our purposes and the legal basis for each:

• Responding to your contact form enquiry — Legitimate interests: you have contacted us and expect a response.
• Publishing and managing customer reviews — Consent: you voluntarily submit a review for publication on our website.
• Moderating reviews to prevent fraud or abuse — Legitimate interests: to maintain the integrity and accuracy of reviews on our site.
• Maintaining the security and performance of our website — Legitimate interests: to protect our website and its users.
• Complying with legal obligations (e.g. tax, regulatory requirements) — Legal obligation.

We will never use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

BIRÉTIS.com sells wine and other alcoholic products. We do not knowingly collect personal data from, or sell to, anyone under the age of 18.

By submitting a review or contact enquiry, you confirm that you are aged 18 or over. If we discover that we have inadvertently collected data from a person under 18, we will delete it promptly. Please contact us at hello@biretis.com if you believe this has occurred.

• Contact form enquiries: up to 2 years from the date of your last communication with us
• Customer reviews: for as long as the review remains published, or until you request its removal
• IP addresses and server logs: up to 90 days, unless required for an active security investigation
• Financial and transaction records: up to 7 years to comply with HMRC requirements

Once your data is no longer needed, we will securely delete or anonymise it.

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

Service Providers

We work with trusted third-party companies who provide services on our behalf, such as:

• Web hosting and server providers
• Email delivery services (for responding to enquiries)
• IT support and website maintenance

These providers are only permitted to use your data to perform services for us, and are bound by data processing agreements.

Legal Requirements

We may disclose your data to law enforcement, regulatory bodies, or courts where we are legally required to do so — for example, in response to a valid legal request or to prevent fraud.

Business Transfers

In the event that BIRÉTIS.com is sold, merged, or restructured, your personal data may be transferred to the new owner as part of that transaction. We will notify you in advance where required by law.

BIRÉTIS.com is a UK-based entity. However, our wine is manufactured in France, and we work with production partners and suppliers based there. As a result, some personal data (such as supplier contact details or operational records) may be shared with or processed by parties located in France.

France is a member of the European Union and benefits from the UK's adequacy decision, meaning the UK Government considers the EU to provide an adequate level of data protection. Transfers of personal data from the UK to France are therefore permitted without the need for additional safeguards under UK GDPR.

Where any of our other service providers process data outside the UK or EU, we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (IDTAs)
• EU Standard Contractual Clauses recognised under UK law
• Transfers to countries with a UK adequacy decision

If you would like more information about the safeguards we have in place for international transfers, please contact us at hello@biretis.com.

As a UK resident, you have the following rights regarding your personal data. To exercise any of them, contact us at hello@biretis.com:

• Right of Access — request a copy of the personal data we hold about you (a Subject Access Request)
• Right to Rectification — ask us to correct inaccurate or incomplete data
• Right to Erasure — ask us to delete your data (the 'right to be forgotten'), subject to legal obligations
• Right to Restrict Processing — ask us to limit how we use your data in certain circumstances
• Right to Data Portability — request your data in a structured, machine-readable format
• Right to Object — object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent — where processing is based on your consent (e.g. reviews), you may withdraw it at any time without affecting past processing

We will respond to all requests within one calendar month. We will not charge a fee unless your request is clearly unfounded or excessive.

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:

• Secure HTTPS encryption across our website
• Access controls to limit who can view personal data within our organisation
• Regular security reviews of our website and systems
• Secure deletion of data once retention periods have passed

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of data transmitted to our website.

Our website uses only essential cookies necessary for the site to function. These do not track you for advertising purposes and do not require your consent under UK law.

For full details of the cookies we use and your options, please see our separate Cookie Statement available on our website.

Our website may contain links to third-party websites (for example, wine industry bodies, delivery partners, or social media platforms). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time to reflect changes in the law, our business, or our data practices. When we make significant changes, we will update the 'Effective Date' at the top of this page.

We encourage you to review this page periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please get in touch:

• Email: hello@biretis.com
• Website: www.biretis.com

We aim to respond to all privacy-related enquiries within 5 working days.