PRIVACY POLICY

HITCHCOCK WINE

South Africa & Nigeria | 2026

Contents

PRIVACY POLICY

B.1 Who We Are

B.2 What We Collect

B.3 Why We Collect It

B.4 Who We Share It With

B.5 Your Rights

B.6 Keeping Your Data Safe

B.7 How Long We Keep It

B.8 Cookies

B.9 Under 18’s

B.10 Get in Touch

Privacy Policy

Effective Date: 1 January 2026

B.1 Who We Are

Hitchcock Wine is a private fine wine merchant and concierge service, registered in South Africa and registered in Nigeria, operating across both South Africa and Nigeria.

We comply with the Protection of Personal Information Act (POPIA) in South Africa and the Nigeria Data Protection Act 2023 (NDPA). Fiona Hitchcock is our Information Officer and Data Controller.

B.2 What We Collect

We only collect information we actually need. Depending on how you interact with us, that may include:

Your name, email address, phone number, and delivery address.
Your job title or company, if relevant to a corporate gifting or membership enquiry.
Wine preferences, dietary requirements, and any other details you share with us to help us serve you better.
Payment details — processed securely through Paystack. We do not store your card information.
Website usage data (pages visited, device type, IP address) collected automatically.
Email engagement data — whether you opened an email or clicked a link.

B.3 Why We Collect It

We use your information to:

Process and deliver your orders, memberships, and event registrations.
Prepare the customs and NAFDAC documentation required for shipments to Nigeria.
Send you relevant communications — allocation announcements, event invitations, and Wine Club updates — where you’ve given us permission to do so.
Keep your preferences on record so your experience with us improves over time.
Meet our legal and tax obligations in South Africa and Nigeria.

We will only send you marketing emails if you’ve opted in, or if you’re an existing client and the communication is directly relevant to something you’ve purchased before. You can opt out at any time.

B.4 Who We Share It With

We do not sell, rent, or trade your personal information. We share it only where necessary:

With the platforms that help us run our business — MailerLite (email), HubSpot (CRM), Commerce7 (orders and Wine Club), Paystack (payments), Xero (accounting), Make (automation), and Squarespace (website). Each handles your data under their own privacy standards.
With South African and Nigerian customs authorities, NAFDAC, and tax authorities (SARS and FIRS) as legally required for import and export.
With logistics and air-freight partners, to the extent needed to deliver your order.
With legal advisors or regulators if we’re required to by law.

B.5 Your Rights

Under both POPIA and the NDPA, you have the right to:

Access your data	Ask us what information we hold about you.
Correct your data	Ask us to fix anything that’s inaccurate or out of date.
Delete your data	Ask us to remove your information in certain circumstances.
Object to marketing	Opt out of marketing emails at any time — use the unsubscribe link or contact us directly.
Withdraw consent	Where we rely on your consent to process data, you can withdraw it at any time.
Lodge a complaint	If you’re unhappy with how we’ve handled your data, you can complain to the Information Regulator (South Africa) or the NDPC (Nigeria).

To exercise any of these rights, email us at fiona@hitchcockwine.com. We’ll respond within 30 days.

B.6 Keeping Your Data Safe

We take reasonable steps to protect your information:

Our website uses SSL encryption.
Access to client data is restricted to authorised team members only.
Payments are processed via Paystack, which is PCI-DSS compliant.

No system is completely secure. If a breach occurs, we’ll notify the relevant regulators and affected clients as required by law.

B.7 How Long We Keep It

As a guide we keep your information for:

Order and transaction records: at least 5 years (tax requirements).
Wine Club membership records: for the duration of your membership, plus 3 years.
Marketing consent records: until you withdraw consent, plus 3 years.
Event attendance records: 2 years.
Website analytics: up to 24 months.

When we no longer need your data, we delete or anonymise it securely.

B.8 Cookies

Our site uses necessary cookies (always active) and optional analytics/marketing cookies (you choose). You can change your preferences anytime in your browser or our cookie settings.

B.9 Under 18s

Hitchcock Wine sells alcohol. By engaging with us — through our website, email, or in person — you confirm that you are 18 years of age or older.

We do not knowingly collect personal information from anyone under 18. If we discover we have done so, we will delete it immediately.

B.10 Get in Touch

If you have a question about this policy, or want to exercise any of your rights, please contact us:

Hitchcock Wine — Privacy Enquiries
Fiona Hitchcock — Information Officer Email: fiona@hitchcockwine.com
Tel: +27 82 780 8887
Monday to Thursday, 09:00 – 17:00 SAST
Friday, 09:00 – 12:00 SAST

If you’re not satisfied with our response, you have the right to contact the relevant authority:

South Africa — Information Regulator: www.inforegulator.org.za | inforeg@justice.gov.za
Nigeria — Data Protection Commission (NDPC): www.ndpc.gov.ng | info@ndpc.gov.ng

We may update this policy from time to time. If we make material changes, we’ll let you know by email or via a notice on our website.

— End of Document —

HITCHCOCK WINE – South Africa | Nigeria – 2026

Website Edition