This policy is effective from June 2020.
Grapepedia Ltd is an online platform facilitator (hereinafter “Grapepedia”, “we”, “or”, “us”), providing a platform that enables registered users (hereinafter “User”) to buy, rate and review wine ratings and wine information (hereinafter the “Services”) via the website or mobile application. It also enables Users to follow other Users to see their ongoing reviews and connect with contacts from social media etc.
Our address is Oak Mill, Topcliffe Lane, Leeds LS27 0HL, company registration number is 13235407.
Grapepedia Ltd is the Data controller of processing personal data concerning Users.
Purpose and legal basis
We process your personal data in order for us to manage our user relation with you, including managing your account and provide you with access to use our Platform, we collect and use information about you. The processing of your personal data is performed on the legal basis of:
We process your ratings of wine to provide you with the opportunity to allow other users to follow your ratings, we process your personal data the legal basis of:
We process your personal data to facilitate your purchase of wine via the Platform on the legal basis of:
We also process your personal data to deliver and improve the Platform, and manage our business, to improve our offerings, develop new features and updates, develop personalization services and other types of service, including but not limited to develop and implement algorithms and machine learning. This processing is on the basis of:
We also use your personal data to display to you personalized marketing message on our Platform, to inform you about new features and updates on the Platform, and let you know about our policies and Terms and Conditions.
The processing of personal data is performed based on:
If you withdraw your consent to receive personalized marketing message, will we still display marketing message to you on the Platform, but they will be of a generic nature and therefore less relevant to you.
Categories of personal data
We mainly collect the personal data that you submit to us, including your contact information, reviews and purchase history. But we also collect information in several ways from different parts of the Platform, as further detailed below, including but not limited to the way you use the Platform and if applied tracking information about your whereabouts on the Internet and technical information about your devices and location.
When signing up:
Please note that your username will be public at all times, unless you have changed the visibility to “No one” under your profile settings.
When using the Platform:
When purchasing wine from the Platform:
A cookie is a small text file stored on your computer, tablet, mobile or similar, for the purpose of recognizing your device if you visit our website again (such as login, language, font size and other settings). This makes it possible to customize the Website to your browser. A cookie may contain text, numbers or e.g. a date, but generally there are no personal data in a cookie. It is not a program and thus cannot contain a virus.
When you visit our website, we collect information about you that allows us to identify your device. The information is used to customize and improve our content on the website and to get statistical information (not personal information), so we can provide you with the best possible experience. If you choose not to accept cookies at all you may not be able to use all the functions of our website.
You can modify your browser, so cookies are not stored on your computer, tablet, mobile etc. Be aware, however, that without cookies, you may not be able to use all the functions of our website.
Grapepedia may use suppliers located outside the UK/EU/EEA to process data on behalf of Grapepedia according to standard data protection clauses adopted by the United Kingdom Commission and to Grapepedia’s performance of the contract with you.
Sharing of data
Personal data about our users is an essential part of our business. We only share your personal data as described below apart from when we share it with a third-party vendor.
We share your reviews with other Users if you have consented to us sharing your reviews with other users.
We may share personal data regarding you if we are obligated to do so by law.
Your rights as a user
As provided by the General Data Protection Regulation, you have the right to:
When we receive a request to access, rectify, erase or port data, we may ask you for additional information in order to confirm your identity and ensure data security.
You have the right to complain regarding the processing of personal data concerning you to the supervisory authority, which in United Kingdom is the Information Commisioner’s Office.
Data retention and account deletion
We store your personal data for as long as your account is active.
We may also store some of your personal data to comply with our legal obligations.
You may add or update certain information to your account. When you update information, however, we often maintain a copy of the unrevised information in systems back-ups for a period of time until our backup is updated with the latest version.
You may request deactivation of your account by following the instructions at the Platform. If you deactivate your account, we do not delete your information but holds it for you until such time as you either activates your account again or delete it.
When you delete your account, we delete the data attached to your account including your username. The username will be deleted from all reviews, and the reviews will be anonymized for future viewing.
Please note that some information may remain in our records after your account has been deleted, and that we may only be able to delete this information later when updating our backups.
User accounts including personal data are protected by a password for your privacy and security. You should ensure no unauthorized access to your account and personal data by choosing and protecting your password appropriately, and by signing off when finishing accessing your account. When signing in via third-party application provider your password is solely managed by such third-party.
We do our best to ensure that user accounts are kept private. However, various instances such as unauthorized entry/use, hardware or software failure, and other factors, may compromise the security of the personal data.
The Platform is intended for use by adults of legal drinking age in the jurisdiction in which you reside. If we receive notice or reasonably believe that someone under the legal drinking age has provided us with personal information, we will promptly delete the account and all personal information that has been provided to us.
Questions or concerns
We will try our best to reply to your questions and resolve your concerns.