Privacy policy.

Ifwines Ltd, trading as SHELF9, is the controller of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). We are registered with the Information Commissioner’s Office, reference ZB180760. Registered office: 20-22 Wenlock Road, London, N1 7GU. For anything about your data, email hello@shelf9.uk.

• When you order or open an account: your name, email, delivery and billing addresses, phone number, and what you bought.
• When you pay: Stripe handles your card details. We see only the payment outcome and the last four digits.
• When you write to us: your message and our reply.
• When you browse: anonymous, aggregated page statistics (see Cookies below).

• To take, deliver and support your order, and run your account. This is needed to perform our contract with you.
• To keep tax and accounting records, and to meet the law on selling alcohol. This is a legal obligation.
• To prevent fraud and keep the site working and secure. These are our legitimate interests.

We send emails about your orders and account only. We do not send marketing without asking you first, and we never sell your data.

Only what each needs to do its job:

• Our fulfilment partner packs and dispatches your order (name, address, phone, items).
• DHL Express delivers it (name, address, phone, email for delivery updates).
• Stripe processes your payment.
• Hetzner hosts our shop database, in Germany.
• Vercel hosts the website.
• Resend sends our order and account emails.

Some of these providers are based in the United States. Where data leaves the UK, it is protected by the UK–US data bridge or by the UK’s standard contractual clauses.

Order records: six years, as HMRC requires. Your account: until you ask us to delete it. Emails with us: up to two years after the matter is closed.

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Email hello@shelf9.uk and we will reply within one month. Records we must keep by law are kept until that duty ends.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

We use only what the site needs to work, so we do not ask for consent:

• Keeping you signed in, and your basket.
• Remembering that you confirmed you are 18 or over, and your region.
• Your taste profile and liked wines, stored only in your own browser.
• Stripe sets cookies at checkout to prevent payment fraud.

We count page visits with Vercel Web Analytics, which uses no cookies and does not identify or follow you. We use no advertising or tracking cookies.

If we change this policy, we will update the date at the top of this page.