Cookie Policy

Cookie Policy of Vino Tasting

vino-tasting.com | UK operator with the United States as its primary market

Prepared 1 October 2026

Publication status: complete the company details, links and verified technology register before publication. Confirm that the website implements the choices described below. The final implementation page is for your team and is not part of the customer policy.

1 About this policy

This Cookie Policy explains how Vino Tasting uses cookies and similar technologies on vino-tasting.com and how you can manage your choices. It applies to browsing, shopping, customer accounts and Wine Club services where available. Read it with our Privacy Policy at [PRIVACY POLICY LINK], which explains our wider use of personal data, international transfers and your rights.

Vino Tasting is operated by [FULL UK REGISTERED COMPANY NAME], company number [NUMBER], registered office [FULL ADDRESS]. We are responsible for the technologies we choose to use on our website. Privacy contact: [MONITORED EMAIL]. Cookie settings: [WORKING SETTINGS LINK]. US privacy choices: [WORKING LINK WHERE APPLICABLE].

2 Cookies and similar technologies

Cookies are small files placed on your browser or device. They can remember information between pages or visits. Session cookies generally last for a browsing session; persistent cookies remain until their expiry or deletion. Browser behaviour can affect how long they remain available.

Similar technologies include local storage, tracking pixels, identifiers and scripts that store or access information or transmit interactions. We use "cookies" as a shorthand in this policy, but our controls cover relevant similar technologies too. First-party cookies are associated with our website domain; third-party technologies involve another provider. Being first-party does not automatically make a cookie necessary or anonymous.

3 Categories and purposes

Strictly necessary technologies support the service you request, such as maintaining a shopping basket, secure account access, checkout protection and recording privacy choices. These remain active where required for that function. We do not classify advertising or optional measurement as necessary merely because it benefits our business.

Optional preferences can remember additional settings or customise your experience beyond what is essential. Optional analytics can measure visits, page use and shopping interactions. Optional advertising can measure campaigns or personalise adverts across services. Embedded videos or social features may introduce their own tracking. Only categories and providers actually listed in the verified register form part of our deployed service.

We use a consent-first approach for optional technologies across our markets. This is our chosen operating approach; it does not mean every jurisdiction requires consent for every form of analytics. Optional technologies remain off until you make the relevant choice.

Managing your choices

4 Giving refusing and withdrawing consent

Our banner lets you accept all optional cookies, reject all optional cookies, or manage them by purpose. Optional choices are not selected in advance. Continuing to browse, scrolling, making a purchase or closing the banner does not give consent. If you do not choose, only the necessary technologies operate.

You can change or withdraw consent at any time through Cookie Settings in the website footer at [LINK]. Rejecting optional cookies does not prevent normal browsing or purchasing, although a particular optional feature may remain unavailable. Necessary technologies cannot be switched off in the preference panel where they are essential to provide the requested service.

When you withdraw a choice, we stop the future optional activity governed by it and communicate the change to relevant providers. We remove or expire optional identifiers under our control where appropriate. Withdrawal does not retrospectively make earlier lawful processing unlawful, and deleting a cookie does not by itself erase data already received by a provider. You can make a separate personal-data request using our Privacy Policy contact.

We remember your choice for [VERIFIED PERIOD]. You may be asked again if that record expires, you clear browser data, use a different browser or device, or our purposes materially change. We do not treat an expired or missing consent record as permission to activate optional tracking.

5 United States privacy choices

Some advertising disclosures can constitute a "sale" of personal information or "sharing" for cross-context behavioural advertising under state law even when no payment is received. [INSERT VERIFIED POSITION: WHETHER WE SELL, SHARE OR USE INFORMATION FOR TARGETED ADVERTISING; IDENTIFY RELEVANT PROVIDERS AND CATEGORIES, OR STATE THAT THESE ACTIVITIES DO NOT OCCUR].

Where applicable, use [DO NOT SELL OR SHARE MY PERSONAL INFORMATION / YOUR PRIVACY CHOICES LINK] to opt out of these activities. A cookie preference and a sale-or-sharing opt-out serve different purposes. Rejecting optional advertising prevents its activation under our approach; your statutory opt-out also governs covered disclosures beyond cookies. You do not need to create an account to opt out.

We honour qualifying browser-based opt-out signals, including Global Privacy Control, where required by applicable law. [CONFIRM IMPLEMENTATION AND EXPLAIN HOW SIGNALS APPLY TO THE CURRENT BROWSER, DEVICE AND ANY KNOWN ACCOUNT]. A general "Accept all" cookie selection does not override a binding sale-or-sharing opt-out. We only seek or act on a later change where legally permitted.

Legacy browser "Do Not Track" settings are different from Global Privacy Control. [INSERT ACCURATE DESCRIPTION OF HOW THE WEBSITE RESPONDS TO LEGACY DO NOT TRACK SIGNALS]. Other US rights, verification arrangements and complaint or appeal routes are described in our Privacy Policy.

Providers retention and privacy

6 Information and third party services

Depending on the technology and your choices, information may include a cookie or device identifier, IP address, browser type, device settings, pages visited, referral source, interactions and consent status. Some identifiers can be linked to an account or purchase. The register identifies the actual information and purposes for each deployed tool; we do not describe identifiable or pseudonymous information as anonymous.

Providers may act on our instructions or, for specified activities, determine their own purposes. The register identifies each provider and links to its privacy information. We remain responsible for the tools we choose to embed and for obtaining any required choices before activation. Visiting an external website through a link is also subject to that website's own policy.

Optional third-party content stays inactive until the relevant consent is given where loading it would trigger optional tracking. Our consent-first approach also covers optional tracking pixels in marketing messages when used. [CONFIRM WHETHER EMAIL OPEN OR CLICK TRACKING IS ENABLED; INSERT ITS PURPOSE, PROVIDER, CHOICE MECHANISM AND RETENTION, OR DELETE THIS REFERENCE]. Signing up for a newsletter is not automatically consent to every tracking technology.

7 Cookie lifetimes and data retention

The register gives each cookie's expiry or other storage duration, including whether activity resets its lifetime. Retention of information collected by the cookie is shown separately or linked to the relevant Privacy Policy retention rule. A cookie's expiry is not the same as deletion of all associated server records.

We retain proportionate evidence of privacy choices to demonstrate and respect them for [VERIFIED RETENTION PERIOD]. We review the register when providers, features or purposes change. The register was last verified on [DATE OF ACTUAL AUDIT].

8 Browser controls

Your browser settings usually let you review, delete or block cookies and other site data. See your browser's help for its current controls. Blocking necessary technologies may affect sign-in, basket or checkout functions. Clearing site data may also remove your saved privacy choices, so you may need to choose again. Browser blocking alone may not stop all server-side disclosures; use our privacy controls as well.

9 Age checks and personal data

A cookie that remembers an age-screen choice is not proof that a buyer is legally old enough to purchase wine. Any such technology must have a defined, limited purpose and appear in the register. Age-verification records are not repurposed for advertising under our Privacy Policy. Required age checks remain separate from optional cookie consent.

For information on the legal bases for personal-data use, safeguards for overseas processing, access or deletion requests, and complaints, see our Privacy Policy at [LINK]. Contact [PRIVACY EMAIL] if you cannot use the settings or have questions about a technology listed here.

10 Changes to this policy

We update the effective date when this policy changes. We explain material changes and obtain a new choice where required before activating new optional purposes. Changes to this text alone do not authorise additional tracking.

Cookie and technology register

Complete this register from an audit of the production website before publishing it. No individual cookie or provider below is asserted to be installed. Publish one completed record for each actual technology and remove unused categories. A live, accessible register in the consent manager may be used if it contains all these details and is linked here: [REGISTER LINK].

Required details for each technology

Coverage to verify

Audit basket and login sessions, security and checkout, consent storage, age-screen memory, optional preferences, analytics and conversion events, advertising tags, embedded media, chat and support widgets, email tracking, and any equivalent server-side events. Include tools introduced by payment pages, tag managers and third-party integrations where relevant to this service.

A list containing only broad categories, or copied cookie names from another retailer, is not a verified register. Cookie durations must come from the deployed configuration and observed behaviour, checked against provider documentation.

Implementation notes and sources

For the website team and legal reviewer only. Remove this page from the published customer policy.

Suggested banner wording

We use necessary cookies to keep the Vino Tasting shop secure, manage your basket and remember your privacy choices. With your permission, we also use optional cookies for [INSERT ONLY ENABLED PURPOSES]. You can reject optional cookies and still shop. Change your choices at any time in Cookie Settings. Read our Cookie Policy and Privacy Policy.

Buttons: Accept all optional cookies | Reject all optional cookies | Manage preferences

Use equally prominent accept and reject controls, accessible on mobile and by keyboard. Show necessary functions separately; keep optional purpose switches off initially. Include provider identities and lifetimes in the detailed panel. Add a separate US privacy-choice route where required.

Checks before publication

Complete all bracketed fields and remove unused clauses. Align the company identity and links with the Privacy Policy. Audit actual requests and storage before consent, after rejection, after selective consent and after withdrawal, including checkout, accounts and embedded content. A banner that changes appearance without stopping tracking is insufficient.

Test qualifying Global Privacy Control signals and propagation to known accounts and downstream providers where required. Do not let a general cookie acceptance override a binding opt-out. Review advertising uploads and server-side events as well as browser cookies. Keep a dated record of tests, supplier roles and changes.

This draft adopts optional-cookie consent across markets. UK and European exemptions can exist for particular technologies, but do not assume a tool qualifies because it is labelled analytics, security or cookieless. Confirm the applicable rules and actual purposes before changing this approach. Have the completed policy and live configuration reviewed together.

Official guidance checked 1 October 2026

ICO storage and access guidance
https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-the-use-of-storage-and-access-technologies/

ICO consent in practice
https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-the-use-of-storage-and-access-technologies/how-do-we-manage-consent-in-practice/

CNIL cookie guidance and frequently asked questions
https://www.cnil.fr/fr/cookies-et-autres-traceurs/regles/cookies/FAQ

Garante cookie and tracking guidelines
https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9677876

California Attorney General Global Privacy Control
https://oag.ca.gov/privacy/ccpa/gpc

California Attorney General consumer privacy rights
https://oag.ca.gov/privacy/ccpa