This Privacy Policy explains how Bloemfontein Vineyard (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you use our website or interact with our services. We are committed to handling your data lawfully, transparently, and securely.

This Policy applies to all users and visitors, including those in South Africa, the United Kingdom, and other locations.

​

1. Information We Collect

We may collect the following categories of personal information:

1.1 Information you provide to us

• Name and surname

• Email address

• Phone number

• Billing and shipping addresses

• Payment information (processed securely by third-party processors; we do not store card data)

• Booking or reservation details

• Messages or inquiries submitted through contact forms

• ​

1.2 Information collected automatically

When you visit our website, we may automatically collect:

• IP address

• Device and browser type

• Pages viewed

• Time spent on the site

• Cookies and tracking technologies

• ​

1.3 Information from third parties

We may receive information from:

• Payment providers

• Delivery partners

• Marketing platforms (e.g., newsletter systems)

​

2. How We Use Your Information

We use personal information for the following purposes:

• To process and deliver orders

• To handle payments and invoices

• To manage bookings, tours, and event reservations

• To communicate with you regarding orders, inquiries, or support

• To send newsletters or promotional content (only with your consent)

• To improve our website and customer experience

• To comply with legal obligations in South Africa and the United Kingdom

​

3. Legal Basis for Processing

Depending on your location, we process your data under one or more of the following legal bases:

• Consent

• Performance of a contract (e.g., fulfilling an order or booking)

• Legitimate interests (e.g., website analytics, security)

• Legal obligation (e.g., tax or compliance requirements)

​

4. Cookies

We use cookies to improve website performance, personalize content, and analyze usage.

You may adjust your browser settings to refuse cookies, but doing so may affect certain website functions.

A detailed Cookie Policy can be provided if required.

​

5. How We Share Your Information

We may share your information with:

• Payment processors

• Delivery and logistics partners

• Reservation or booking platforms

• Email marketing tools

• IT service providers

• Regulatory authorities if required by law

We do not sell your personal information.

​

6. International Transfers

Since we operate in both South Africa and the United Kingdom, your personal data may be transferred between these regions.

We ensure all transfers comply with POPIA and UK GDPR requirements, using:

• Adequate safeguard mechanisms

• Data processing agreements

• Secure transfer protocols

​

7. Data Retention

We retain personal information only as long as necessary for:

• Fulfilling orders and providing services

• Legal and accounting requirements

• Resolving disputes and enforcing agreements

When data is no longer required, it is securely deleted or anonymized.

​

8. Your Rights

Depending on your location, you have the following rights:

Under UK GDPR

• Access your data

• Correct inaccurate information

• Request deletion (“right to be forgotten”)

• Object to processing

• Request data portability

• Withdraw consent at any time

Under POPIA (South Africa)

• Know what personal information is being collected

• Request access or correction

• Object to processing

• Request deletion where appropriate

• Lodge a complaint with the Information Regulator

To exercise your rights, contact us using the details below.

​

9. Data Security

We take appropriate technical and organizational measures to protect personal information from:

• Loss

• Misuse

• Unauthorized access

• Disclosure

• Alteration

However, no online system is completely secure, and users submit data at their own risk.

​

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of these third-party websites.

​

11. Children’s Privacy

This website is not intended for individuals under the legal drinking age. We do not knowingly collect data from minors.

​

12. Updates to This Policy

We may update this Privacy Policy occasionally. The “Last updated” date will reflect the latest version. Continued use of the site means you accept any changes.