Privacy Policy

Last updated: 27 April 2026

This Privacy Policy explains how Drop Kensington (“we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal data when you visit our website, sign up to our newsletter, or interact with our services.

Drop Kensington is operated by DOM'S WINES LIMITED, Company Number 13497725, with its registered office at 37 Earls Court Road, London, England, W8 6ED.

1. Who We Are

We are DOM'S WINES LIMITED, trading as Drop Kensington.

We act as the data controller for the personal data we collect from you. This means we are responsible for deciding how and why your personal data is used.

We may also use trusted third-party service providers (data processors) to help us operate our website, manage communications, and deliver services.

2. Information We Collect

We collect and process the following categories of personal data:

2.1 Information you provide directly

We collect personal data that you voluntarily provide to us, including:

  • Full name

  • Email address

  • Any information submitted through our newsletter sign-up form

  • Any information submitted through our contact form (such as your message, enquiry details, and any additional information you choose to include)

2.2 Newsletter sign-up data

When you subscribe to our newsletter, your email address and any optional details you provide are collected and securely transferred to our email marketing provider (Mailchimp) for storage and communication purposes.

2.3 Contact form data

When you submit an enquiry via our contact form, the information you provide is collected via Squarespace and sent to us so that we can respond to your enquiry. This data is used solely for customer service and communication purposes.

2.4 Automatically collected data

When you browse our website, we may automatically collect technical information including:

  • IP address

  • Browser type and version

  • Device information (such as operating system and device type)

  • Pages visited and browsing behaviour

  • Referring URLs

  • Approximate geographic location (based on IP address)

2.5 Cookies and tracking technologies

We use cookies and similar technologies to:

  • Enable core website functionality

  • Improve user experience

  • Analyse website traffic and performance

  • Understand how visitors interact with our website

You can manage or disable cookies through your browser settings at any time.

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Newsletter communications

If you sign up to our newsletter, we will use your email address to:

  • Send you marketing emails, updates, and promotional content

  • Share news, events, or offers related to Drop Kensington

  • Manage your subscription preferences (including unsubscribe requests)

You may opt out at any time by unsubscribing via the link in our emails.

3.2 Responding to enquiries

If you contact us via our contact form, we will use your information solely to:

  • Respond to your enquiry

  • Provide requested information or assistance

  • Follow up where necessary in relation to your message

3.3 Website operation and improvement

We use collected data to:

  • Operate and maintain our website

  • Improve website performance and usability

  • Monitor technical issues and prevent misuse

3.4 Legal and compliance purposes

We may process your data where necessary to:

  • Comply with applicable legal obligations

  • Prevent fraud or misuse of our services

  • Establish or defend legal claims

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

  • Consent – for sending marketing emails via our newsletter

  • Contract / pre-contractual steps – for responding to enquiries and providing requested information

  • Legitimate interests – for improving our services, website functionality, and communications

  • Legal obligation – where we are required to comply with applicable law

5. How We Store and Process Your Data

We use secure third-party service providers to store and process personal data:

5.1 Mailchimp (Newsletter Management)

We use Mailchimp to manage our email marketing and newsletter distribution. When you sign up to our newsletter, your data is transferred to Mailchimp, which stores your email address and associated subscription preferences.

Mailchimp may process data outside the UK/EEA. Where this occurs, appropriate safeguards (such as Standard Contractual Clauses) are used to ensure your data remains protected.

5.2 Squarespace (Website Hosting & Forms)

Our website is hosted on Squarespace, which also processes data submitted through our contact forms.

When you submit a contact form, your information is securely transmitted via Squarespace and delivered to us so we can respond to your enquiry.

Squarespace may also collect technical data for security, analytics, and website performance purposes.

6. How We Share Your Information

We do not sell your personal data.

We may share your data with trusted third parties only where necessary:

  • Mailchimp – for email newsletter distribution

  • Squarespace – for website hosting and contact form processing

  • IT, analytics, or service providers that support our website operations

  • Legal or regulatory authorities where required by law

All third-party providers are required to process your data securely and in compliance with applicable data protection laws.

7. Data Retention

We only retain personal data for as long as necessary for the purposes for which it was collected:

  • Newsletter data is retained until you unsubscribe or request deletion

  • Contact form enquiries are retained only as long as needed to handle and respond to your request

  • Technical and analytics data may be retained for a limited period for security and performance monitoring

When data is no longer required, it is securely deleted or anonymised.

8. Your Data Protection Rights

Under UK data protection law, you have the following rights:

  • The right to access your personal data

  • The right to request correction of inaccurate data

  • The right to request deletion of your data

  • The right to object to processing

  • The right to restrict processing

  • The right to withdraw consent at any time (e.g. unsubscribe from marketing emails)

  • The right to data portability (where applicable)

9. Data Security

We take appropriate technical and organisational security measures to protect your personal data, including:

  • Secure servers and encrypted data transmission where possible

  • Access controls to limit who can view personal data

  • Use of reputable third-party providers with strong security standards

  • Regular monitoring for security vulnerabilities

Despite these measures, no system can be completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

10. International Data Transfers

Some of our service providers (including Mailchimp) may store or process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO)

  • Adequacy decisions where applicable

These measures ensure your data is treated with a level of protection equivalent to UK standards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service providers.

Any updates will be posted on this page with a revised “Last updated” date.

End of Privacy Policy