Privacy policy

Last updated: September 2026

1. Introduction

This Privacy Policy explains how Flint & Vine Limited, trading as Flint Vineyard ("Flint Vineyard", "we", "us" or "our"), collects, uses, stores and protects your personal information when you visit our website, purchase our products, subscribe to our communications, attend our events, make an enquiry or otherwise interact with us.

We are committed to protecting your privacy and processing your personal information in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or engaging with our services, you acknowledge that your personal information will be processed as described in this Privacy Policy.

2. Who We Are

Flint & Vine Limited is the data controller responsible for your personal information.

Flint & Vine Limited
Registered Office
The Grange
Stody Road
Brinton
Melton Constable
Norfolk
NR24 2QH
United Kingdom

Email: enquiries@flintvineyard.com
Telephone: +44 (0)1986 893942

Company registration number: 09647448

ICO registration number: ZB673546

Correspondence about this Privacy Policy should be sent to our operating address: Flint Vineyard, Middle Road, Earsham, Bungay, NR35 2AH, United Kingdom.

3. Information We Collect

The personal information we collect depends on how you interact with us.

Information you provide directly

This may include:

Name
Postal address
Email address
Telephone number
Billing and delivery addresses
Order and purchase information
Event, tour, tasting or hospitality enquiry details
Information provided when contacting us by email, telephone or through our website

Date of birth or age confirmation, where age verification is required

Information you provide if you apply for a job with us
Marketing preferences

We do not collect or store full payment card details. Card payments are handled directly by our payment providers.

Information collected automatically

When you visit our website, we may automatically collect information including:

IP address
Browser type and version
Device information
Website usage information
Pages viewed
Referring websites
Interactions with our website and marketing communications

We collect this information through cookies and similar technologies. Please see our Cookie Policy for further information.

Information collected when you visit us

If you visit our premises, your image may be recorded by CCTV. Please see section 14 for further information.

Information from third parties

We may receive information from trusted service providers who support our business, including:

Shopify
Klaviyo
Payment providers
Website analytics providers
Advertising and marketing platforms

The information we receive from these providers typically includes order and transaction records, delivery and fulfilment information, marketing engagement data such as email opens and clicks, and website analytics data.

4. How We Use Your Personal Information

We use personal information for the following purposes:

To fulfil orders and provide services

This includes:

Processing purchases
Taking payments
Delivering products
Managing customer accounts
Responding to enquiries
Providing customer support

To manage events and hospitality enquiries

This includes:

Vineyard tours
Wine tastings
Corporate visits
Private events
Hospitality bookings
Trade visits

To communicate with you

We may contact you regarding:

Orders
Bookings
Enquiries
Customer service matters
Operational updates

Marketing communications

We may send you marketing communications from Flint Vineyard where:

you have asked to receive them or have actively subscribed; or
you have purchased, or discussed purchasing, a product or service from us and we are permitted to contact you under the electronic marketing rules known as the “soft opt-in”.

Where we rely on the soft opt-in, we will only use contact details collected directly from you during a sale or negotiations for a sale. We will only contact you about our own similar products and services that we reasonably consider related to what you purchased or enquired about, such as Flint Vineyard wines and closely related vineyard tastings, tours, experiences and offers.

We will give you a clear opportunity to opt out when we collect your contact details and in every marketing email we send.

Our marketing communications may include:

vineyard news;
wine releases;
vineyard events and experiences;
relevant special offers; and
seasonal updates relating to our wines and services.

You can unsubscribe at any time by using the unsubscribe link in any marketing email or by contacting us at enquiries@flintvineyard.com.

Opting out of marketing will not prevent us from sending essential communications about an order, booking, enquiry or service you have requested.

To improve our business and services

We may analyse how customers interact with our website, communications, products and services in order to:

Improve customer experience
Improve our products and services
Measure marketing effectiveness
Better understand customer interests and preferences

Security and fraud prevention

We may use personal information to protect our website, customers, business and systems from fraud, abuse and other unlawful activity.

5. Our Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Performance of a contract

Where processing is necessary to fulfil an order, booking, enquiry or other agreement with you.

Legal obligation

Where we are required to process information to comply with legal or regulatory requirements.

Legitimate interests

We may process your personal information where this is necessary for our legitimate business interests, including:

operating and improving our business;
responding to enquiries;
maintaining customer relationships;
sending existing customers marketing about our own similar products and services where the soft opt-in applies;
understanding how customers interact with our communications, website, products and services;
measuring and improving the relevance and effectiveness of our marketing;
maintaining accurate marketing preferences and suppression records; and
protecting our business from fraud and misuse.

Where we rely on the soft opt-in to send electronic marketing, our lawful basis for processing your personal information under UK GDPR is our legitimate interest in maintaining appropriate relationships with existing customers and promoting our own similar products and services.

We consider the nature of our relationship with you, the type and frequency of the communications, your reasonable expectations and the potential effect on your privacy. We balance our interests against your rights and freedoms and provide clear ways for you to opt out.

Consent

Where you actively choose to subscribe to marketing communications, we may rely on your consent. You can withdraw your consent at any time by using the unsubscribe link in our emails or contacting us.

Withdrawing your consent will not affect processing that took place before it was withdrawn.

How our lawful bases apply

The table below summarises the main lawful bases we rely on for different uses of your personal information.

Purpose	Lawful basis
Orders and bookings	Contract
Legal and financial records	Legal obligation
Customer service and operational updates	Contract or legitimate interests
Marketing actively requested	Consent
Customer marketing under soft opt-in	Legitimate interests (electronic marketing is also governed by PECR)
Competition administration	Contract, under the terms of entry
Fraud prevention	Legitimate interests and legal obligation where we are required to act
Site security and CCTV	Legitimate interests
Recruitment and job applications	Pre-contractual steps, legitimate interests, and legal obligation for right to work checks
Non-essential cookies	Consent, unless the technology is exempt under PECR

6. Marketing, CRM and Profiling

We use customer relationship management and marketing tools, including Shopify and Klaviyo, to manage customer information, communication preferences and marketing activity.

Where available, we may record how and when your details were collected, whether you actively subscribed or whether we are contacting you under the soft opt-in, and any subsequent changes to your marketing preferences.

We may analyse information relating to:

purchases;
website activity;
event attendance;
email engagement; and
customer interactions.

This helps us understand customer interests and preferences, provide more relevant communications and improve our products, services and experiences.

We do not use website or email engagement to override an unsubscribe request. We periodically review our marketing records and may stop sending marketing to people who have not engaged with our communications or services for a period of time.

We do not carry out automated decision-making that produces legal or similarly significant effects.

7. Competitions, Prize Draws and Giveaways

From time to time we may run competitions, prize draws and promotional campaigns.

Where you enter a competition, prize draw or giveaway, we will use your personal information to:

Administer the promotion
Contact winners
Deliver prizes
Comply with legal and regulatory requirements

Entering a competition, prize draw or giveaway will not automatically subscribe you to marketing communications. Where we invite you to receive marketing, this will be presented as a separate and optional choice that does not affect your ability to enter.

8. Cookies and Website Tracking

We use cookies and similar technologies to operate and improve our website.

These technologies may be used to:

Enable website functionality
Remember your preferences
Analyse website usage
Measure marketing performance
Deliver relevant advertising

We currently use technologies and services including:

Shopify cookies
Google Analytics
Meta Pixel

Where required by law, we will request your consent before placing non-essential cookies on your device.

Further information can be found in our Cookie Policy.

9. Sharing Your Information

We do not sell your personal information.

We may share personal information with trusted third-party service providers who help us operate our business, including:

Website hosting providers
Shopify
Klaviyo
Payment processors
Delivery and fulfilment providers
IT and cloud service providers
Analytics providers
Marketing and advertising partners

We only share information where necessary and appropriate safeguards are in place.

We may also disclose information where required by law or to protect our legal rights.

10. International Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure it remains protected and that any transfers comply with applicable data protection laws.

11. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, including to:

Provide our products and services
Manage customer relationships
Respond to enquiries
Comply with legal and regulatory obligations
Resolve disputes
Protect our legal rights

Retention periods vary depending on the nature of the information and the purpose for which it was collected. We periodically review the personal information we hold and will delete or anonymise information when it is no longer required.

Where you unsubscribe from marketing communications, we may retain limited information to ensure your marketing preferences are respected in future.

12. Security

We take appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, disclosure or alteration.

While we take reasonable steps to safeguard personal information, no method of transmission or storage can be guaranteed to be completely secure.

13. Children's Data and Age Verification

Our products and services are intended for adults.

As a producer and seller of alcoholic products, we may use age verification measures to help ensure compliance with applicable laws relating to the sale and promotion of alcohol.

We do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, please contact us so that we can investigate and take appropriate action.

14. CCTV at Our Premises

We operate closed circuit television (CCTV) at our premises.

We use CCTV to protect the safety of visitors, staff and the public, to protect our property and stock, and to help prevent, detect and investigate crime. Our lawful basis is our legitimate interests in protecting our people, premises and property. Where footage is used in connection with a criminal investigation, we may also rely on legal obligation.

Signs are displayed in the areas covered by CCTV. Footage is stored securely, access is restricted to authorised personnel, and we retain it for 30 days unless it is needed for an ongoing investigation, insurance claim or legal proceedings.

We may share CCTV footage with the police, our insurers or our legal advisers where it is lawful and necessary to do so. We do not use CCTV for marketing, and we do not use facial recognition or any other automated identification technology.

You have the right to request a copy of CCTV footage of yourself. Please see section 16.

15. Job applicants

We ask for information from job applicants to assist with our recruitment process. The information will be used solely in connection with considering and acting upon an application. We may retain your information, but only for the purpose of considering your application for current or future available positions.

We may perform these functions ourselves or use a third party provider to perform these functions on our behalf. Where we use a third party they will be required to use your personal information only to perform services for us.

Your Rights

Under data protection law, you may have the right to:

access your personal information;
request correction of inaccurate information;
request deletion of your personal information;
restrict the processing of your personal information;
object to certain types of processing;
request transfer of your personal information to another organisation; and
withdraw consent where processing is based on consent.

Your right to object to direct marketing

You have the right to object at any time to our use of your personal information for direct marketing. If you object or unsubscribe, we will stop using your information for this purpose.

You can unsubscribe using the link in any marketing email or contact us at enquiries@flintvineyard.com.

We may retain limited information on a suppression list to ensure that we continue to respect your preference.

To exercise any of these rights, please contact us using the details provided below.

We will respond to any request without undue delay and within one month of receiving it. If your request is complex, or if you have made a number of requests, we may extend this by up to two further months, and we will let you know if we do. Where we need to confirm your identity or ask you to clarify your request, the one month period does not begin until we have received what we need. We do not usually charge a fee, but we may charge a reasonable fee, or decline to act, if a request is manifestly unfounded or excessive.

17. Complaints

If you are unhappy with how we have used your personal information, you can make a data protection complaint by contacting us at enquiries@flintvineyard.com.

We will acknowledge your complaint within 30 days. We will investigate and respond without undue delay, keep you informed where appropriate and explain the outcome of our investigation.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator.

Website: Make a complaint | ICO
Telephone: 0303 123 1113

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, in how we use personal information, or in the law.

The date at the top of this policy shows when it was last updated, and the current version is always available on our website.

Where a change is significant, we will take reasonable steps to bring it to your attention, for example by notice on our website or by email where we hold your contact details and it is appropriate to contact you.

We recommend that you review this policy from time to time.

19. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact: