Privacy policy

Last updated: 4 October 2026

This policy explains what personal information EDKA Wines collects, why, who we share it with and the rights you have. EDKA Wines is a trading name of Edka Ltd, registered in England & Wales (company number 10789722), registered office 13 Severn Road, Porthcawl, Wales, CF36 3LW. Edka Ltd is the data controller. ICO registration number: ZB358508.

Questions or requests: edka@edkawines.com.

What we collect

  • When you order: your name, email, phone, billing and delivery addresses, what you bought and your order history. Card payments are handled by Shopify Payments; we never see or store your full card number.
  • When you join the club: your membership status, start and renewal dates, and the member pricing you have received.
  • When you sign up for emails: your email address, when and where you signed up, and which emails you open and click.
  • When you browse our website: device and browser information, your IP address and the pages you visit, collected through cookies and similar technologies (see Cookies below).
  • When you contact us by email, chat or social media: what you send us.
  • When you enter our monthly bottle draw: your name, contact details and the entry, so we can run the draw and contact the winner.
  • Age: we sell alcohol, so by ordering you confirm that you are 18 or over. We do not knowingly collect information from anyone under 18.

Why we use it, and our legal basis

Purpose Legal basis (UK GDPR)
Take, pay for, deliver and support your orders and membership Contract
Keep accounting and tax records Legal obligation
Send marketing emails (Wines of the Week, offers, club news) Consent: unsubscribe at any time from the link in every email
Show our ads to people who have visited our site or bought from us, and measure whether they work Consent, given through the cookie banner
Understand how the site is used, fix problems and prevent fraud Legitimate interests
Run the monthly bottle draw and contact the winner Legitimate interests / the draw terms
Check that a price-promise claim is valid Contract

Who we share it with

We do not sell your personal information. We share it only with the service providers who run parts of the business for us, under contracts that require them to protect it:

  • Shopify: our online shop, checkout and Shopify Payments
  • Klaviyo: our marketing emails
  • Meta (Facebook and Instagram): advertising and measuring ads, through the Meta pixel and server-side events
  • Google: advertising and measuring ads (Google Ads)
  • TikTok: advertising and measuring ads
  • Microsoft: our business email (Microsoft 365) and anonymised site-usage analytics (Microsoft Clarity)
  • Judge.me: product reviews, if you choose to leave one
  • Our delivery couriers: your name, address and phone number, so they can deliver your order

We may also share information where the law requires it, or to protect our rights.

Advertising audiences

With your consent we may use our customer and subscriber email lists to create advertising audiences on Meta and Google. Emails are converted into a code (hashed) before they leave us, and those platforms use them only to show our ads to existing customers, or to leave existing customers out of ads meant for new people. You can opt out at any time by emailing us.

International transfers

Some of these providers process data outside the UK, mainly in the United States. Where they do, the transfer is protected by the UK's adequacy regulations (the UK Extension to the EU–US Data Privacy Framework) or by the UK International Data Transfer Agreement or Addendum.

How long we keep it

  • Orders and invoices: 6 years, as UK tax law requires
  • Membership records: while you are a member, then 6 years
  • Marketing consent and email activity: until you unsubscribe, then a suppression record so we never email you again
  • Draw entries: 12 months
  • Website analytics: as set by each tool, normally no more than 26 months

Cookies

Our site uses essential cookies to make the shop and checkout work. Analytics and advertising cookies are used only if you choose Accept in the cookie pop-up when you first visit; choose Decline and they stay off. You can change your choice at any time by clearing cookies in your browser, after which the pop-up will ask you again.

Your rights

You can ask to:

  • see the personal information we hold about you
  • correct it
  • delete it
  • restrict or object to how we use it, including any marketing
  • receive it in a portable format
  • withdraw your consent at any time

Email edka@edkawines.com and we will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Security

Your information is held on secure, access-controlled systems. Payments are processed by Shopify Payments, which meets PCI DSS standards.

Changes

If we update this policy, we will post the new version here with a new date.