Last updated: March 2026
Who We Are
Mountfield Winery is a trading name of Mountfield Court, Robertsbridge, East Sussex TN32 5JP. We are the data controller responsible for your personal data.
If you have any questions about this policy or how we handle your data, please contact us at info@mountfieldwinery.com.
What Data We Collect
We may collect and process the following personal data:
- When you place an order: your name, email address, delivery address, phone number and payment details. Payment card information is processed securely by Stripe and is never stored on our systems.
- When you book an event: your name, email address and any dietary or accessibility requirements you provide.
- When you contact us: your name, email address and the contents of your message.
- When you visit our website: technical data such as your IP address, browser type and pages visited, collected through essential cookies.
Why We Collect It
We use your personal data for the following purposes:
- To process and fulfil your orders, including delivery and payment
- To manage event bookings and send confirmations
- To respond to your enquiries and provide customer support
- To comply with legal obligations (such as HMRC tax record requirements)
- To improve our website and services
Legal Basis
We process your data on the following legal grounds:
- Contract: processing necessary to fulfil your order or booking
- Legal obligation: where we are required to keep records (e.g. financial records for HMRC)
- Legitimate interest: to improve our services and respond to enquiries
- Consent: where you have opted in to receive marketing communications
How Long We Keep Your Data
- Order records: 6 years from the date of transaction (HMRC requirement)
- Event booking data: 12 months after the event
- Contact form submissions: 12 months from the date of enquiry
- Website analytics: 26 months
After these periods, your data is securely deleted.
Who We Share Your Data With
We do not sell your personal data. We may share your data with:
- Stripe: to process card payments securely
- Royal Mail or courier services: to deliver your orders
- Our website hosting provider: who stores data on secure UK/EU servers
- HMRC: where required by law for tax purposes
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Delete your personal data (where we are not legally required to keep it)
- Object to processing based on legitimate interest
- Data portability - receive your data in a structured, commonly used format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please email info@mountfieldwinery.com. We will respond within 30 days.
Cookies
Our website uses essential cookies to keep the site working (such as your shopping cart and cookie preferences). We also use optional cookies for analytics to understand how visitors use the site. You can manage your cookie preferences using the banner shown when you first visit.
Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date.
Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.