Privacy Policy
Last updated: 7 October 2026
Who we are
Carmelita Limited (“Carmelita”, “we”, “us”) is the controller of the personal data described in this policy.
Carmelita Limited
71-75 Shelton Street, London, WC2H 9JQ, United Kingdom
Registered in England & Wales, company number 7460877 · VAT number 110 2540 82
info@carmelitawine.com
What we collect
When you buy from us: your name, delivery and billing addresses, email address, telephone number, order history, and the age confirmation you give us at checkout. We do not see or store your full card details — payment is handled by Shopify Payments and, where you choose it, Shop Pay, PayPal or Apple Pay.
When you contact us: whatever you put in the message, plus your name and email address.
When you subscribe to our emails: your name and email address, and which messages you open or click.
When you browse: your IP address, device and browser type, the pages you visit and how you reached us. This comes from cookies — see our Cookie Policy.
Age verification: where a check is made at checkout or on delivery, we record that it happened and its result. We do not retain images of identity documents.
Why we use it, and our lawful basis
| What for | Lawful basis |
|---|---|
| Taking, fulfilling and delivering your order | Performance of a contract |
| Verifying you are 18 or over | Legal obligation (Licensing Act 2003) |
| Handling enquiries, returns and complaints | Performance of a contract, and our legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Sending marketing emails you have asked for | Consent, or legitimate interests where you are an existing customer buying similar goods |
| Preventing fraud and securing the site | Legitimate interests |
| Understanding how the site is used | Consent, via cookies |
You can withdraw consent at any time — unsubscribe from any email, or write to us. Withdrawing consent does not affect anything done beforehand.
Who we share it with
Shopify Inc., which hosts the store and processes payments. Our carriers, who need your name, address and phone number to deliver, and who are required to carry out an age check on handover. Our bonded warehouse, which holds stock and prepares shipments. Our accountants and professional advisers, where necessary. Law enforcement, HMRC or a licensing authority, where we are legally required to.
We do not sell your personal data, and we do not share it with anyone for their own marketing.
Some of these providers operate outside the UK. Where personal data is transferred abroad we rely on UK adequacy regulations or on the International Data Transfer Agreement, so your data keeps equivalent protection.
How long we keep it
| Order and transaction records | Six years after the end of the financial year they relate to, because tax law requires it. Deleted after that. |
|---|---|
| Age verification records | None. We never see or hold them — the age check happens on the doorstep and any record of it belongs to the carrier, not to us. |
| Marketing contacts | Until you unsubscribe. We then keep your email address on a suppression list so that we do not contact you again by mistake. |
| Enquiries that do not become orders | Two years. |
Your rights
You have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent. There is no charge and we will respond within one month. Email info@carmelitawine.com.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/concerns or 0303 123 1113. We would rather you came to us first.
Children
This site is not intended for anyone under 18 and we do not knowingly collect data from children. We are legally prohibited from selling alcohol to anyone under 18.
Changes
We will post any changes here and update the date above.