Privacy Policy
Last updated: 6 June 2026
This Privacy Policy explains how vineyardtags.uk, trading as Vineyard & Orchard Digital ("we", "us", "our"), collects and uses personal data in compliance with the UK GDPR and the Data Protection Act 2018.
⚠️ Information required before publication: business address, contact email, ICO registration number (if registered).
1. Who We Are (Data Controller)
- Controller: Vineyard & Orchard Digital (vineyardtags.uk)
- Address: [INSERT BUSINESS ADDRESS]
- Email: james.mcfarlane@vineyardtags.uk
- ICO Registration: [INSERT ICO NUMBER IF APPLICABLE]
2. Data We Collect
- Contact forms & enquiries: name, email, phone, business name, message content.
- Client account data: billing details, project information, login credentials for systems we manage on your behalf.
- Technical data: IP address, browser type, device, pages visited, referring URL (only if you accept non-essential cookies).
- Marketing data: email address and preferences, where you have opted in.
3. Lawful Bases
- Contract: to deliver services you have requested or purchased.
- Legitimate interests: responding to enquiries, securing our website, fraud prevention.
- Consent: non-essential cookies, marketing emails.
- Legal obligation: tax, accounting, regulatory record-keeping.
4. Cookies & Analytics
We use essential cookies to operate the site, and (only with your consent) analytics cookies to understand site usage. If you reject non-essential cookies, no analytics or tracking data is collected. See our Cookie Policy.
5. Marketing Communications
We will only send marketing emails where you have provided clear opt-in consent, in line with PECR. You can unsubscribe at any time using the link in any marketing email, or by emailing us.
6. Sharing Your Data
We do not sell your data. We share it only with trusted processors who help us deliver our services, including:
- Hosting providers
- Domain registrars
- Email service providers
- Payment processors
- Analytics providers (only with consent)
- Accountants and professional advisers
- Regulators or law enforcement where legally required
7. International Transfers
Some of our processors are based outside the UK. Where personal data is transferred internationally, we rely on UK-approved safeguards such as adequacy regulations or Standard Contractual Clauses with the UK Addendum.
8. Data Retention
- Enquiry data: up to 24 months from last contact.
- Client records: 7 years after the end of the engagement (to meet HMRC requirements).
- Marketing data: until you withdraw consent.
- Analytics data: as per the provider's retention settings (typically 14 months).
9. Your Rights
Under UK GDPR you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure (where applicable)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise any right, email us at james.mcfarlane@vineyardtags.uk. We will respond within one month.
10. Security
We use reasonable technical and organisational measures to protect personal data. However, no system can be guaranteed 100% secure and we do not warrant absolute security.
11. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
12. Changes
We may update this policy from time to time. The "Last updated" date will reflect any changes.