Who is responsible for your data?
HONOM SASU, 13 Rue Tarillon, 38000 Grenoble, France, is the publisher and data controller for Vinabox. Email hello@vinabox.fr for privacy questions or to exercise your rights. This notice covers vinabox.co.uk.
Reading the website
Our host, o2switch in France, processes technical information needed to serve and secure the website. This can include your IP address, the requested page, access time, browser information and error records. We use it for our legitimate interests in providing a working website, investigating faults and preventing misuse.
You do not need an account to read Vinabox. This edition has no reader registration, public comments, newsletter sign-up, payment form or automated decision-making about readers. The age check records an acknowledgement that you are 18 or over; it does not ask for your date of birth or identity documents.
Contacting us
If you email us, we process your email address, name if supplied, message and any attachments to answer your enquiry or deal with a correction or complaint. Our legal basis is our legitimate interest in corresponding with readers and running an accountable publication. You may object on grounds relating to your circumstances. A request about your data may also require processing to meet our legal duties.
Your message is handled through the publisher's email service and by people authorised to deal with it. Send only the information needed for your enquiry. We do not pass the contents of emails to Google Analytics.
Google Analytics 4, only with consent
If you accept Statistics in the Complianz cookie controls, we use Google Analytics 4 to understand which pages readers use and improve the website. Google Ireland Limited processes analytics data on our behalf. Data can include pages viewed, interactions, approximate location, browser and device information, and cookie identifiers. We do not send names or email addresses to Analytics.
The legal basis is your consent. Analytics is blocked before you choose and after you refuse Statistics. Refusal leaves the guides available. You can withdraw consent at any time by opening the cookie controls and switching Statistics off; withdrawal does not affect processing that was lawful before it.
Merchant links
Merchant links use short addresses beginning with /go/. These redirect to the official destination and keep aggregate counts for each link. The counter does not create an advertising profile or set a tracking cookie. Ordinary server logs may still record the request. Once you reach another website, its own privacy notice applies.
How long we keep information
Google Analytics user and event data is kept for the retention period configured in the Analytics property. You can ask us for the current setting. Its browser cookies can last up to two years; cookie expiry and the retention of analytics data are separate settings.
We keep contact correspondence for as long as needed to answer the enquiry, complete any follow-up and deal with related complaints. Technical records are kept for operational and security needs, including investigating incidents. Information needed for an unresolved dispute or a legal obligation may be held for longer, with access restricted to that purpose. Backup copies are removed through the applicable backup rotation. We review information against these purposes rather than keeping it indefinitely for unrelated use.
Providers and international transfers
The website is hosted by o2switch in France. The publisher's authorised staff and service providers may access information where needed to operate the site or answer you. We may also disclose information where required by law or necessary to handle a legal claim.
Google may process analytics data outside the UK and European Economic Area, including in the United States. Google's published data-processing terms describe the applicable transfer safeguards, including adequacy frameworks where applicable and standard contractual clauses. You can contact us for information about the safeguards relevant to your data. Read Google's privacy policy and Google's data-processing terms.
Your rights and complaints
Depending on the applicable law and circumstances, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent. We may need proportionate information to confirm your identity. The EU GDPR applies to our processing as a French publisher, and UK data protection law applies where its territorial conditions are met.
You may raise a concern with the UK Information Commissioner's Office or, where appropriate, the CNIL in France. Contacting us first does not remove your right to complain.
For details of browser storage, see the cookie policy. This notice was updated on 20 October 2026.
For adults aged 18 and over. Our approach to responsible wine coverage.