bottled at source in shropshire

Privacy Policy

Wenlock Spring Water Ltd
Wolverton, Church Stretton, Shropshire. SY6 6RR

 


 

Introduction

Wenlock Spring Water Ltd is committed to protecting your privacy and complying with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use and protect your information when you use our website at www.wenlockspring.co.uk.

 


 

Personal information we collect

We collect personal data only when you submit the contact form on our website. The information collected is limited to:

  • Your name
  • Your email address
  • Your message

We do not collect personal data through any other means on this website.

 


 

Lawful basis for processing

We process your contact form data on the basis of legitimate interests – specifically, to respond to your enquiry. We have assessed that this processing is necessary and that your interests and rights do not override ours in this context.

 


 

How we use your information

We use the information submitted through our contact form solely to respond to your enquiry. We will not use it for marketing purposes, pass it to third parties, or retain it beyond the period necessary to handle your enquiry, unless we have a legal obligation to do so.

 


 

Disclosure of your personal data

We will not sell or pass your personal information to third parties unless we are legally required to do so – for example, to comply with a court order or other regulatory obligation.

 


 

How long we keep your information

We retain contact form submissions for up to six months from the date your enquiry is resolved. After this period your data will be deleted. You have the right to request removal of your data at any time (see Your rights below).

 


 

International data transfers

Our website uses Google Analytics, which may transfer data to Google servers located in the United States. Google participates in the EU–US Data Privacy Framework and maintains appropriate safeguards for international data transfers. For more information visit policies.google.com/privacy.

 


 

Cookies

Our website uses cookies to ensure basic functionality and, with your consent, to understand how visitors interact with the site. You can manage your cookie preferences at any time using the cookie control panel, accessible via the icon in the bottom right of the screen.

Essential cookies are set automatically and are necessary for the website to function. Tracking cookies are only set after you have given your consent.

 

Manageable CMS

Cookie Purpose Expiry
Cookie control preference Records whether you have accepted or declined non-essential cookies 90 days
Session cookie Maintains your session while you browse the site End of session

 

Google Analytics

These cookies are only set with your consent. They collect anonymous information about how visitors use the website – including the number of visitors, their origin, and the pages they view – to help us improve the site over time.

Cookie Purpose Expiry
_ga Distinguishes users 2 years
_gid Distinguishes users 24 hours
_gat Throttles request rate 1 minute

For more information about Google's approach to privacy, visit google.com/analytics/learn/privacy.html.

 

Vimeo

Pages containing embedded Vimeo videos may set cookies from Vimeo when you interact with the video player. We do not control these cookies. Please refer to Vimeo's privacy policy at vimeo.com/privacy for further information.

 


 

Managing cookies

You can update your cookie preferences at any time using the cookie icon in the bottom right of the screen. You can also configure your browser to block or delete cookies – consult your browser's help section for instructions. Note that disabling certain cookies may affect how the website functions.

 


 

Information security

Our website is served over HTTPS using industry-standard TLS encryption. Your data is stored on servers hosted and maintained in-house, operating from UK-based, renewable-powered data centres.

We do not store payment details. Passwords and sensitive data are stored encrypted where applicable.

Please be aware that email communication over the internet is not inherently secure. We cannot accept responsibility for unauthorised access or loss of personal information beyond our control.

 


 

Your rights

Under UK GDPR you have the following rights in relation to your personal data:

  • Right of access – you can request a copy of the personal data we hold about you.
  • Right to rectification – you can ask us to correct inaccurate or incomplete data.
  • Right to erasure – you can ask us to delete your personal data where there is no good reason for us to continue holding it.
  • Right to restrict processing – you can ask us to limit how we use your data in certain circumstances.
  • Right to object – you can object to processing based on legitimate interests.
  • Right to data portability – where applicable, you can ask us to provide your data in a structured, machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer:

Bruce Orme
bruce@wenlockspring.co.uk
Wenlock Spring Water Ltd, Wolverton, Church Stretton, Shropshire. SY6 6RR

We will not charge for any rights request. We may take reasonable steps to verify your identity before responding.

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

 


 

Changes to this policy

We reserve the right to update this policy at any time in response to changes in legislation or our practices. Please check this page periodically to stay informed.

Last reviewed: May 2025