ExquisVin Pte. Ltd. (“ExquisVin,” “we,” “us”) is committed to safeguarding your privacy and protecting your personal data. This Privacy Policy sets out how we collect, use, disclose, and protect personal data in connection with our website www.exquisvin.com (the “Website”) and our services, including vineyard ownership and leasing, estate wine and bespoke bottlings, barrel and amphora sales, estate experiences and travel, private events, and Fellowship membership (together, the “Services”).
01Compliance
This Privacy Policy is issued in compliance with the Personal Data Protection Act 2012 of Singapore (the “PDPA”). It explains the basis on which ExquisVin collects, uses, discloses, and protects personal data in connection with www.exquisvin.com and our related services. By accessing or using the Website or our services, you acknowledge that you have read and understood this Privacy Policy.
02Personal Data We Collect
We may collect the following categories of personal data:
- Identity and contact details (name, email address, telephone number, postal address, and age verification information where required)
- Enquiry and subscription data (information you submit through our website enquiry form and our annual release notice sign-up)
- Membership data (Fellowship membership details, preferences, and programme participation)
- Transaction and payment data (invoices, confirmations, and order history). We do not store full card details; payments are handled through authorised payment channels and processors.
- Device and usage data (IP address, browser type, cookies, and analytics data)
- Marketing and communication preferences.
03Purposes of Collection and Use
We collect and use personal data for the following purposes:
- To respond to enquiries submitted through our Website and to manage Fellowship memberships
- To facilitate vineyard ownership and leasing, estate wine, bespoke bottlings, barrel orders, estate experiences, and related Services
- To process payments and arrange storage, logistics, and deliveries
- To provide customer service and concierge support
- To conduct age and eligibility verification
- To send the annual release notice and other communications you have requested
- To improve Website functionality and user experience
- To comply with applicable laws and regulations
04Legal Basis Under the PDPA
We process personal data on the basis of:
- Consent provided by you
- Deemed consent (including by notification) where applicable
- Legitimate interests, balanced with safeguards to protect your rights
05Marketing, DNC and Unsubscribe
We comply with the Do-Not-Call (DNC) Registry and the Spam Control Act. Marketing communications are sent only in accordance with the law. You may opt out of marketing communications at any time by using the “unsubscribe” facility in our messages or by contacting us. We will honour your preferences and respect DNC Registry status.
06Cookies and Analytics
Our Website uses only the cookies and similar technologies necessary for it to function, and, where enabled, analytics that help us understand how the Website is used. We do not use cookies for advertising or cross-site tracking.
You may accept, refuse, or delete cookies at any time through your browser settings. Disabling certain cookies may affect how parts of the Website perform.
07Data Retention
We retain personal data only as long as necessary for the purposes collected:
- Transactional and accounting records: up to seven (7) years
- Marketing data: until consent is withdrawn
- Analytics and logs: typically 12 to 24 months
After expiry, data will be securely deleted or anonymised.
08Data Security
We implement reasonable administrative, technical, and physical safeguards, including:
- Transport Layer Security (TLS) encryption for data in transit
- Access controls and role-based permissions
- Secure vendor agreements (Data Processing Agreements)
- Regular security reviews and audits
09Cross-Border Data Transfers
Where personal data is transferred outside Singapore (e.g., cloud hosting, CRM platforms, analytics providers, payment processors), we ensure that such data continues to receive a standard of protection comparable to that under the PDPA. This is achieved through contractual undertakings and appropriate safeguards.
10Your Rights: Access, Correction and Withdrawal
You have the right to:
- Request access to personal data held about you
- Request correction of inaccuracies
- Withdraw consent to the continued use of your personal data (subject to the consequences of such withdrawal)
We aim to respond to all requests within thirty (30) days. Please direct such requests to our Data Protection Officer (details below).
11Data Breaches
In the event of a notifiable data breach, we will promptly notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with legal requirements.
12Minors and Age Restriction
Our services are intended strictly for individuals aged eighteen (18) years and above. We do not knowingly collect data from minors.
13Business Transfers
If ExquisVin undergoes a merger, acquisition, or sale, personal data may be transferred as part of the transaction, provided that the receiving party is bound to comparable protection obligations.
14Data Protection Officer (DPO)
Email: contact@exquisvin.com
Registered Address: Singapore 258203
15Changes to This Policy
We may revise this Privacy Policy from time to time. Updates will be published on this page with a new effective date. Continued use of our Website after such updates constitutes acceptance of the revised policy.