Cart

No products in the cart.

privacy.

Privacy and Data Protection Policy

winelab.Africa is a division of H-Factor CC (Registration Number:1999/031809/23), a South African Closed Corporation with registered offices at 22 Wesley Street, Observatory, 7925, Cape Town.

Please read this Privacy and Data Protection policy carefully to understand how we collect, use and share your personal information. This policy explains why and how we collect, use, process and store your personal information. It also outlines your choices, your rights in relation to your personal information and the importance of protecting the personal information that you provide to us. For us, it is more than just making sure we comply with the relevant legislation; you trust us with your personal information, and we respect that trust.

The processing of personal data must be transparent and secure, in conformity with the Protection of Personal Information Act (POPI), the Promotion of Access to Information Act (PAIA), and the privacy legislation of the countries in which winelab.Africa operates.

winelab.Africa complies with its obligations by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure; by ensuring that appropriate technical measures are in place to protect personal data and by guaranteeing total transparency on how we manage your data.

The purposes for processing personal data, the types of personal data collected and the lawful basis for processing this data are set out below:

Why we collect your personal data

  • To process your registrations for any courses, assessments or events and to deliver those services to you
  • To send you information regarding the course or event on which you are registered (or have registered interest in)
  • To share your personal and contact details with WSET Global to enable you to access the online classroom and/or Global campus and to register you as a WSET student
  • To process sales of products you have purchased from us
  • To manage any account(s) for providing our online services where you have registered with us so that:
    • We can provide you with the relevant products and services

    • You can access relevant course materials

    • We can fulfil our services and communicate with you about them

    • To verify your identity

    • To carry out research to better understand your requirements on the relevant products and services
  • To personalise, report on and improve the services and products we provide to you, and to provide you with a best in class customer service experience
  • To send you marketing communications including information about our qualifications and upcoming events.

What personal data we collect


We may collect the following categories and types of information considered to be personally identifiable (if either applicable to a living natural person or juristic person):

  • Personal details: Name, surname, age, date of birth, gender, identity number, registration number, taxation and VAT numbers, registration to applicable liquor authorities, ownership information, disability status;
  • Contact details: Phone number, mobile number, postal address, business address, delivery address, email address;
  • Transactional information: Details of payments made to or received from you as an individual or juristic person, details of products and/or services purchased from us to supplied to us;
  • Technology Based information: Browser, device and domain names and information, Internet Protocol (IP) address, geographic locations including GPS coordinates, information collected through cookies, online services and applications requiring passwords and other access and login information features, operating systems and platforms;
  • Correspondence: Marketing preferences, information you provide to us for customer communications.
  • We do not collect the information of persons under 18.

How we collect your personal data

  • When you provide it to us directly. If you have any queries about how this information is provided and used, please email hello@winelab.africa
  • When our systems collect information or personal data indirectly. The most common type of information collected is in the form of cookies (cookies are small text files sent by your computer each time you visit our website) but can also include personal data transferred by the device you are using to access our website. The manufacturer of your device or the provider will have the details about what information your device shares.

When do we share your personal data?


  • With core service providers to enable our business to function. We rely on a set of external companies who are governed by contractual agreement to provide us with services that enable our business to run effectively.
  • With law enforcement agencies and regulators when required to do so by law
We are required to co-operate with regulators and law enforcement agencies.

What personal data do we share?


  • We need to process some of your personal data to fulfil your registration on any events or courses. We will share your payment details with our bank or clearing house so that we can process payment for your purchases or orders.
  • We will not generally share your personal information with third parties (other than service providers acting on our behalf) unless we have a lawful basis or requirement for doing so.

Data retention, how long do we hold your personal data?


  • We will not hold your personal data for longer than is necessary for the purposes described in this policy.

  • We will keep your personal data whilst your accounts remain active

  • We may keep categories of personal data, e.g. name, date of birth and address, after your accounts are closed to meet any legal or regulatory requirements.

Your rights

You have several rights under data protection law, these are summarised below however for further information on any of the below, please contact hello@winelab.africa

  • The right to be informed

    You have the right to total transparency on how we are using your personal data, we will endeavour to make this clear by ensuring that this document is regularly reviewed and updated.
  • Your right of access

    You have the right to know what information we hold about you and how it is processed.
  • The right to rectification

    If you think that the information we hold about you is inaccurate or incomplete, or if your contact details change, please ask us to amend it. We will process your request without delay.
  • The right to erasure

    You reserve the right to ask us to delete your personal data, however, this is not an absolute right. We can refuse to erase personal data which we need to keep in order to comply with legal obligations. When you ask us to delete your personal data, we assume that you no longer wish to hear from us again.
  • The right to transfer your personal data

    You have the right to move, copy or transfer your personal data from one organisation to another. If you do wish to transfer your personal data, we would be happy to help.
  • The right to object

    If you would like us to stop processing your personal data for marketing purposes, let us know.

We promise

  • That you control the personal data you provide to us

  • We will always inform you what personal data we are collecting from you, how we collect it, and how we will use it.

  • We will always use market leading technology and software to ensure that the personal data we have collected is secure. If we make use of third parties for services and this involves sharing your personal data, we will make sure they have the appropriate security measures

  • We will only send you marketing communications if you have given consent that we can do so, and we will always offer you a clear and simple means of amending your preferences whenever you wish
  • All data shared with WSET will be treated under WSET’s Privacy and Data Protection Policy

Policy Update

To the extent allowed by the law, this Privacy and Data Protection Policy may be amended and updated from time to time at our sole discretion, without notice, provided that if we do so, we will post the revised policy on our website and we will take reasonably practicable steps to inform you of the updated policy.

Accordingly, please check this policy for changes periodically. If you continue to engage with us, provide products or services to us or access or use our website and/or products and services after amendments are made to the policy and displayed on our website, you will be deemed to have accepted the updated Privacy and Data Protection Policy.