Privacy Policy
Last updated: 6 August 2026
This website sets no cookies. There is no advertising, no profiling and no tracking of you across other websites. We do count visits, using a privacy-first tool that works without storing anything on your device. There are no forms to fill in. The only personal data involved is the technical information every website receives in order to work at all, plus anything you choose to put in an email to us.
Who we are
Crouch Valley Vineyard is a grape grower based in South-East Essex, England. We grow grapes and supply them to winemakers; we do not make wine ourselves. For the purposes of UK data protection law we are the data controller for the personal data described in this policy.
You can reach us at contact@crouchvalleyvineyard.co.uk about anything in this policy.
What this website collects
This is a single static page. It has no accounts, no shopping basket, no newsletter sign-up and no contact form. We do not ask you for personal data, and there is nowhere on the site to submit any.
Four things nonetheless involve data, and we would rather set them out plainly than pretend otherwise.
1. Server logs
Our website host records standard technical information when a page is served — your IP address, the time of the request, the page requested, and your browser's user-agent string. This happens on every website on the internet and is necessary to deliver the page, keep the site available and protect it from abuse. We do not use these logs to build any profile of you, and we do not connect them to anything else.
Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR) — operating and securing our website.
2. Web fonts
The typefaces used on this site are loaded from Google Fonts. When your browser fetches them, your IP address is necessarily sent to Google in order for the files to be delivered. Google states that Google Fonts sets no cookies and does not use the requests for advertising. You can read Google's privacy policy and their Google Fonts privacy note.
Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR) — presenting the site as designed.
3. Visitor statistics
We use Cloudflare Web Analytics to see how many people visit the site and which pages they read. We chose it specifically because it works without cookies. It does not give you an identifier, does not store or read anything on your device, and cannot follow you to any other website.
Because it never identifies a returning visitor, it cannot tell us who you are, cannot count you as a unique person, and cannot build a profile. It counts page views, and treats a page view as a new visit when it did not come from another page on this site — worked out from information your browser already sends with every request. What we see is aggregate: totals, the sites that referred people to us, the country and browser a request came from, and page loading speed. Cloudflare receives your IP address in order to serve the request, and states that it does not use it to fingerprint or track individuals.
Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR) — understanding, in aggregate, whether our website is useful. Because nothing is stored on or read from your device, no consent is required under PECR.
4. Email you send us
If you email the address on this site, we receive whatever you put in that email — typically your name, your email address and the content of your message. We use it to reply to you and to keep a record of our correspondence. We do not add you to any mailing list and we do not use your address for marketing.
Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR) — responding to enquiries; or, where your enquiry is about supplying grapes or entering into an agreement, taking steps at your request prior to entering into a contract (Article 6(1)(b)).
Cookies and similar technologies
This site sets no cookies of any kind — not essential ones, not analytics, not advertising. It also does not use local storage, session storage or fingerprinting. Our visitor statistics are deliberately cookieless, which is why they appear here as a disclosure rather than as something you have to agree to.
Because nothing is stored on or read from your device, we are not required to ask for your consent under the Privacy and Electronic Communications Regulations, and you will not see a cookie banner here. That is deliberate.
If this ever changes — for example if we add analytics or an online shop — we will update this policy and, where the law requires it, ask for your consent before anything is placed on your device.
Who else is involved
We keep third parties to a minimum. The complete list is:
| Who | What they do | What they receive |
|---|---|---|
| Cloudflare (Pages) | Hosts and serves this website | Standard server log data, including IP address |
| Google (Google Fonts) | Serves the typefaces used on the site | IP address and browser information when fonts are fetched |
| Cloudflare (Web Analytics) | Counts visits, without cookies | IP address, referring page, country, browser and page timing |
| Cloudflare (Email Routing) | Receives email sent to our address and forwards it on | The contents of any email you send us |
| [MAILBOX PROVIDER — where your Cloudflare address forwards to, e.g. Gmail] | Stores and displays the email we receive | The contents of any email you send us |
We do not sell, rent or share personal data with anyone for marketing purposes. Ever.
Links to other websites
This site links to our winemaking partners, to press coverage about us, and to our social media profiles. Those websites are not under our control and this policy does not apply to them. We would encourage you to read the privacy policy of any site you visit from here.
How long we keep things
- Server logs — retained for a short period for security and diagnostics, then deleted.
- Email correspondence — kept for as long as needed to deal with your enquiry and to maintain a record of our dealings with you, and then deleted. Where correspondence relates to a commercial arrangement, we may keep it for as long as required for accounting and legal purposes.
Your rights
Under UK data protection law you have the right to:
- ask what personal data we hold about you, and get a copy of it;
- have inaccurate data corrected;
- ask us to delete data we hold about you;
- ask us to restrict how we use it;
- object to our processing where we rely on legitimate interests;
- ask us to transfer data to you or another organisation, where that right applies.
To exercise any of these, email contact@crouchvalleyvineyard.co.uk. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to put things right first.
Children
This site is not directed at children, and we do not knowingly collect personal data from anyone under 13. Our business is with the wine trade, and our communications are intended for adults.
Changes to this policy
If we change this policy we will update the date at the top of this page. If we ever start collecting personal data in a materially different way, we will say so clearly on the site rather than quietly amending this page.
Contact
Questions about this policy, or about how we handle personal data, can go to contact@crouchvalleyvineyard.co.uk.