Privacy notice
Last updated: 9 October 2026
This notice explains how Maya Lavelle Vineyard, of Babina Luka, Babina Luka, N1 7GU (“we”, “us”) uses personal data when you visit this website, order, book or get in touch. We are the controller of that data.
What we collect
- Contact details — your name, email address and phone number when you order, book, enquire or create an account.
- Orders and bookings — what you ordered or booked, when, any notes you add, and a delivery or visit address where one is needed.
- Payments — taken by our payment provider. We receive confirmation of the payment and the last four digits of your card, never the full card number.
- Messages — what you write to us, including through the enquiry form and the chat assistant on this website.
- Visit statistics — the pages you view, the site that referred you and your type of device, linked to a random identifier stored in your browser (not your name). See our cookie policy.
Why we use it
- To provide what you asked for — taking and fulfilling your order or booking, and sending confirmations and receipts (performance of a contract).
- To meet legal obligations — such as keeping accounting and tax records.
- To run and improve our business — answering enquiries, keeping this website secure, preventing fraud and understanding how the site is used (our legitimate interests).
- Marketing — only if you opt in. You can withdraw at any time using the link in any message or by contacting us.
Who we share it with
We never sell your personal data. We share it only with:
- Summon, which runs this website and our ordering, booking and payment systems on our behalf, under contract and only on our instructions.
- Service providers that Summon uses for us — payment processing, email and text messages, hosting, and the AI service that powers the chat assistant.
- Delivery partners, when you choose delivery: your name, address, phone number and the order details they need.
- Authorities, where the law requires it.
Some of these providers process data outside your country. Where they do, the transfer is protected by safeguards approved under data protection law, such as standard contractual clauses.
How long we keep it
Only as long as we need it for the reasons above. Records we must keep for tax and accounting are kept for as long as those rules require — usually six years — and then deleted.