Privacy Policy
Last updated October 2026
GlenWood Vineyards Proprietary Limited (registration number 2000/018794/07), trading as GlenWood Vineyards, Robertsvlei Road, Franschhoek, 7690 (“GlenWood”, “we”, “us”) is the responsible party for the personal information described here. This policy explains what we collect through this website, our online shop, the GlenWood Wine Club and our Sakura Sushi bookings, why we collect it, and your rights.
We process personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). Where the EU or UK General Data Protection Regulation applies to you, you also have the rights it gives you.
What we collect
| When | What | Why |
|---|---|---|
| You buy wine or a gift voucher | Name, email, phone, billing and delivery address, order history. Card details go straight to our payment provider, Paystack; we never see or store them. | To take payment, deliver your order and keep tax records. |
| You join the Wine Club | As above, plus your club tier, membership dates and saved payment method (held by the payment provider). | To run your membership, charge club releases and send club information. |
| You create an account | Name, email, password (stored encrypted), addresses, orders. | So you can see orders and manage your details. |
| You book a table or experience | Name, email, phone, party size, date, any dietary needs you tell us. | To hold and manage your booking. |
| You sign up for our newsletter | Email address and name. | To send news and offers, with your consent. |
| You contact us | Your name, contact details and message. | To reply to you. |
| You browse the website | Pages viewed, device and browser type, approximate location, how you arrived — only if you accept analytics cookies. | To understand how the website is used and improve it. |
We do not sell alcohol to anyone under 18, and we do not knowingly collect information from children.
Legal basis
We process your information because it is needed to carry out an order, booking or membership you asked for; because you consented (newsletter, analytics cookies); to meet legal duties such as tax records; or for our legitimate interest in running and improving our business, where that does not override your rights.
Who we share it with
We share personal information only with service providers that help us run the business, under agreements that require them to protect it and use it only for us:
- Commerce7 — our online shop, customer accounts, Wine Club and newsletter sign-up.
- Paystack — card payments at checkout. Paystack processes your card details under its own security and privacy terms; we never see or store them.
- Dineplan — Sakura Sushi and experience bookings.
- Courier companies — delivery of orders.
- Google — website analytics (Google Analytics, through Google Tag Manager), only if you accept analytics cookies.
- Our email and website hosting providers.
We may also disclose information where the law requires it, or to protect our rights, property or safety.
Our distributors and stockists outside South Africa are separate businesses. If you buy from them, you deal with them directly under their own privacy policies; we do not share your information with them.
Transfers outside South Africa
Some of our service providers, including Commerce7 and Google, store data outside South Africa, for example in the United States or the European Union. We only use providers that protect personal information to a standard comparable to POPIA, as section 72 of POPIA requires.
How long we keep it
We keep order and tax records for at least five years, as South African tax law requires. We keep account and Wine Club information while your account or membership is active, and for a reasonable period after. Newsletter details are kept until you unsubscribe. Booking details are kept for up to two years after your visit, so we can recognise returning guests and deal with any queries, and are then deleted.
Cookies
Cookies are small files a website stores in your browser.
- Essential cookies keep your cart, account login and checkout working. They are always on, because the shop cannot work without them.
- Analytics cookies (Google Analytics) tell us which pages are visited and how people find us. They are off unless you accept them in the cookie banner.
- We do not use advertising cookies.
You can change your choice at any time: cookie settings. You can also block or delete cookies in your browser settings.
Marketing
We send newsletters and offers only if you signed up or are a customer who has not opted out. Every email has an unsubscribe link, or email info@glenwoodvineyards.co.za. You will still receive messages about your orders, bookings and membership.
Your rights
You can ask us to tell you what personal information we hold about you, correct or delete it, stop using it for marketing, or object to how we use it. Where the GDPR applies, you can also ask us to restrict processing or give you a copy in a portable format. Email info@glenwoodvineyards.co.za; we will confirm your identity before acting and reply within a reasonable time, normally 30 days.
Security
We take reasonable technical and organisational steps to protect personal information against loss, misuse and unauthorised access. The website is served over HTTPS, and card payments are handled by Paystack, not by us.
Information Officer and complaints
You can contact our Information Officer about anything in this policy at info@glenwoodvineyards.co.za, on +27 (0)21 876 2044, or by post to PO Box 204, Franschhoek, 7690, South Africa.
If you are not satisfied with how we handle a concern, you can complain to the Information Regulator (South Africa): inforegulator.org.za, POPIAComplaints@inforegulator.org.za, 010 023 5200. If you are in the UK or EU, you can also complain to your local data protection authority.
Changes to this policy
We may update this policy. The date at the top shows when it last changed; we will tell customers by email about significant changes.