Last updated 3 October 2026.

Elizabeth & Wine would like to inform users of https://www.elizabethandwine.com about the ways and manners in which we process the data we obtain from our users, in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Data controller

Elizabeth & Wine, London, is the data controller. Elizabeth & Wine can be contacted at elizabeth@elizabethandwine.com.

2. Personal data collected

Elizabeth & Wine processes personal data obtained from its users. This data may include:

First name, last name, company, email address, phone number and message submitted through the contact form
Personal data and contact details provided when making an enquiry or booking
Data provided when requesting information or assistance
Whether you have chosen to join the mailing list
Cookie choices, and usage data collected by Google Analytics 4 and Microsoft Clarity after consent has been given
An automated classification and one-line summary produced from some enquiry information

Elizabeth & Wine does not ask you to provide health data or other special categories of data. Please do not include special-category data in the message field. If you choose to provide it, it may be processed as part of dealing with your enquiry.

The above categories of data are processed only to the extent necessary for the purposes described in section 4.

3. Processing of personal data

Personal data is processed with appropriate security measures to ensure its safety and confidentiality. Contact-form submissions are stored as files on a server in Germany and can be read in the site's content management system by Elizabeth & Wine and its web developer. Enquiries are also sent to the business through Google's Gmail service.

When it is no longer necessary to process personal data for the purpose it was collected, or at the end of the applicable retention period in section 10, Elizabeth & Wine will delete or anonymise it and remove identifiers where appropriate.

4. Purposes of the processing

Elizabeth & Wine uses personal data for the following purposes:

To discuss the requirements of an event or enquiry via email, Instagram messaging, WhatsApp or over the telephone where you choose to use those channels
To receive, store, manage and respond to enquiries and bookings, including through the contact form, email and the content management system
To sort enquiries as a genuine enquiry, sales pitch, job application or spam, and to produce a one-line summary for the business using the OpenAI API
To comply with legal and regulatory obligations
Where consent is given, to send newsletters and marketing communications and to evaluate user satisfaction
Where consent is given, to measure visits and how the website is used through Google Analytics 4 and Microsoft Clarity, including session recordings
To remember cookie choices and provide the site's interactive features

The AI classification and summary are automated processing used to assist with sorting and handling enquiries. They are not used to make a decision producing legal effects or similarly significant effects about you.

Personal data may be shared with processors and other recipients described in section 6 where this is necessary for these purposes.

5. Legal basis for the processing

Processing to respond to an enquiry or take steps towards an event booking is based on the need to take steps at your request before entering into a contract, where that applies. Other processing needed to handle and respond to enquiries is based on Elizabeth & Wine's legitimate interests in operating the business and responding to potential and existing customers.

Processing for legal and regulatory purposes is required by applicable law. Processing for the AI classification and summary is based on Elizabeth & Wine's legitimate interests in sorting enquiries efficiently and preparing them for a response, subject to those interests being balanced against your rights.

Processing for marketing purposes is based on your consent and is not mandatory. The mailing-list tick box is optional and is not needed to send an enquiry. Joining the newsletter, through the tick box or the signup form, is confirmed by an email before any newsletter is sent, and every newsletter has an unsubscribe link. Without marketing consent, Elizabeth & Wine will not send marketing communications where consent is required by PECR.

Checking each enquiry automatically for spam and unsolicited sales pitches, so that they are deleted rather than stored, is based on Elizabeth & Wine's legitimate interests in protecting its inbox and the people who write to it.

Processing for Google Analytics 4 and Microsoft Clarity is based on your consent. These tools are not loaded until you accept the analytics cookies. Consent can be withdrawn at any time through Cookie settings. The cookie used to remember your choice and the enhanced functional cookie are used to operate requested website functions and are not used for advertising.

You may use the website without submitting the contact form. If you choose to submit an enquiry, the information you provide is used to deal with it. If sufficient information is not provided, Elizabeth & Wine may not be able to respond or take the requested steps.

6. Communication of personal data

Where necessary, personal data may be communicated to the following recipients or categories of recipients:

Elizabeth & Wine and its web developer, who can read enquiries in the content management system
Hetzner Online GmbH, which provides the server hosting the website, contact-form files and content management system
Google, which provides the Gmail service used to receive enquiries and Google Analytics 4, which is loaded only after analytics consent
OpenAI, which receives the name, company, email address and message from an enquiry through its API to sort the enquiry and produce a one-line summary
Microsoft, which provides Microsoft Clarity and receives usage data for session recordings only after analytics consent
TypeSafe, which receives the name, company and message from an enquiry through its API to check whether it is spam, an unsolicited sales pitch or a test
Mailgun (part of Sinch), which sends the newsletter and its confirmation emails from its EU region and receives subscribers' email addresses and names for that purpose

These providers process personal data on behalf of Elizabeth & Wine for the relevant services. Under OpenAI's API terms, API data is not used to train models by default.

7. Overseas transfer of personal data

Contact-form files and the website's content management system are hosted by Hetzner Online GmbH in Falkenstein, Germany. Germany is in the European Economic Area and the UK adequacy regulations apply to transfers to the EEA.

Enquiry information is transferred to OpenAI in the United States through its API. Google and Microsoft may also process data in the United States, including data collected through Gmail, Google Analytics 4 and Microsoft Clarity. These transfers rely on the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses in the form of the International Data Transfer Agreement or Addendum, as each provider offers.

8. Data of subjects under 18

The services offered by Elizabeth & Wine cannot be enjoyed by persons under 18.

9. Your rights

In relation to your personal data, you can, usually at no charge and subject to the conditions and exemptions in the UK GDPR:

Ask whether your personal data is being processed and, if so, access it
Know its origin, the purposes and manner in which it is processed
Ask for it to be updated, corrected or completed
Ask for it to be erased where the legal conditions for erasure apply
Ask for processing to be restricted where the legal conditions for restriction apply
Object to processing based on legitimate interests for reasons relating to your particular situation
Object, fully or partially, to processing for direct marketing purposes
Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
Ask for portability of personal data where the right applies
Ask for information about automated decision-making, including the automated classification and summary described in section 4
Make a complaint to the Information Commissioner's Office, without affecting any other legal rights

Exercise any of these rights by emailing elizabeth@elizabethandwine.com. You can withdraw analytics consent at any time through Cookie settings.

10. Retention periods

Personal data is retained for no longer than necessary for the purpose it was collected:

Data collected for Contractual Purposes, including relevant contact-form, email, content management system and AI classification or summary data, is retained for the duration of the event booking and for 1 year after
Data from an enquiry that does not result in a booking is retained only for as long as necessary to deal with the enquiry and any resulting business need
Data collected for Legal Purposes is retained in line with the specific limitation periods defined by law
Data collected for Marketing Purposes is retained for the duration of the mailing-list subscription and for 2 years after it ends
The cookie named ew_consent, which records your cookie choice, is retained for 180 days
Analytics data is retained only for as long as it is needed for website measurement and improvement, subject to the retention settings applied to Google Analytics 4 and Microsoft Clarity

Once these periods have expired, personal data is deleted, anonymised or aggregated where appropriate.

11. Updates

This document is effective from the date it was last updated. Elizabeth & Wine may change or add to this policy, including as a result of changes to the UK GDPR or PECR. Updates will be notified in advance where practical, and the current version is always available on this page.

12. Cookies and analytics

This site does not use advertising cookies. It does not load Google Analytics 4 or Microsoft Clarity, or measure analytics usage, until you accept the cookie banner. The first time you visit, a banner asks whether we may use analytics cookies. Your answer is kept in one cookie, ew_consent, for 180 days, and you can change it at any time from Cookie settings at the foot of every page.

If you accept, two tools load:

Google Analytics 4, which measures visits and actions taken on the site. It sets cookies whose names begin with _ga.
Microsoft Clarity, which records how pages are used, including clicks, scrolling and session recordings, so that problems with the site can be found and fixed. It sets cookies whose names begin with _clck and _clsk.

If you reject, or do not answer, neither tool is loaded and analytics usage data is not collected. The site does not use advertising cookies or advertising features.

The site also sets a functional cookie called enhanced, which records whether your browser can run the site's interactive features. It is not used for analytics or advertising.

Questions or complaints about how your data is collected and processed: email elizabeth@elizabethandwine.com.

Privacy policy: how your data is used.