Last updated: 12 October 2026
1. Who we are
The website www.getwine.co.za and the Getwine mobile app are run by Van Riebeeck Drankgroep CC t/a GETWINE (Reg. no 1990/003629/23) (“Getwine”, “we”, “us”).
Getwine is the responsible party for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).
- Information Officer: Ad Wegner, ad@getwine.co.za
- General enquiries: info@getwine.co.za
- Address: 57 Harrington Street, Cape Town, 8001, South Africa
This policy explains what personal information we collect, why, who we share it with, how long we keep it and what rights you have. It covers the website, the Getwine mobile app, our newsletters, telephone sales and the Wine Club. Everything here applies to the app as well; section 11 sets out what is specific to the app.
We sell alcohol, so the website and the app are for adults only. We do not knowingly collect information from anyone under 18.
2. What we collect
2.1 Information you give us
| Information | When |
|---|---|
| Name, email address, password | When you create an account |
| Date of birth | When you register or complete your preferences, to confirm you are 18 or older |
| Billing and delivery addresses, phone numbers, company name and VAT number (optional) | When you order |
| Orders, coupon and voucher codes, order notes, gift messages | When you order |
| Wine Club details: tier, payment day, wine choices, delivery address | When you join the Wine Club |
| Wine preferences: styles and varietals you like, language, province, how often you want to hear from us | When you complete your wine preferences |
| Favourites, saved mixed cases and personalised label designs | When you save them |
| Names and email addresses of friends | When you refer a friend. Please only give us someone’s details if they are happy for you to do so. |
| Reviews and ratings | When you review a wine on the website or in the app, or rate a delivered wine in My Cellar. Reviews are public and are shown with your first name and the first letter of your surname. |
| Messages, chat conversations and call notes | When you contact us or we speak to you by phone. We do not record calls. |
| Newsletter subscription | When you subscribe |
| My cellar: the wines you have at home, the number of bottles, the bottles you have opened, a drink-by year and your own notes | When you use My cellar in the app. Your notes are private; a rating you give a delivered wine is published as your review. |
2.2 Information we collect automatically
- Technical information: IP address, browser and device type, pages viewed, the page you came from, and dates and times. We use it to keep the site secure and working and to understand how it is used.
- Cookies and similar technologies: see section 7.
2.3 Information from others
- Payment providers tell us whether a payment succeeded and give us a reference number. They do not give us your card number.
- Couriers tell us the delivery status of your order.
- Someone who refers you or sends you a gift gives us your name and email or delivery address.
2.4 Payment information
We never see or store your full card number. Payments are processed on the secure systems of Peach Payments, Ozow and Payflex. If you join the Wine Club, Peach Payments stores your card securely and gives us a token that lets us charge your monthly box. The token is of no use to anyone else and can be removed at any time.
3. Why we use it and what allows us to
| Purpose | Legal ground under POPIA |
|---|---|
| Creating and managing your account | Carrying out our contract with you |
| Taking, delivering and invoicing orders; handling returns and refunds | Carrying out our contract with you |
| Running your Wine Club membership and charging the monthly fee | Carrying out our contract with you |
| Confirming that you are 18 or older | Legal obligation (liquor laws) |
| Keeping tax and transaction records | Legal obligation |
| Answering questions and complaints | Carrying out our contract; our legitimate interest in good service |
| Recommending wines based on your preferences and past orders | Our legitimate interest in showing you relevant products. You can object at any time. |
| Preventing fraud and keeping the site secure | Our legitimate interest and yours |
| Measuring and improving the website and the app | Our legitimate interest |
| Email newsletters, promotional offers and web push notifications | Your consent, or, for existing customers, our legitimate interest in telling you about similar products, always with an opt-out |
| Advertising on other platforms, and measuring it (see sections 7 and 11) | Your consent |
| Telephone sales | Your consent, or an existing customer relationship. Tell us at any time if you do not want to be called. |
We do not make decisions about you by automated means that have legal or similarly significant effects.
4. Who we share it with
We do not sell your personal information. We share it with the following, and only as far as each needs it:
| Recipient | What for |
|---|---|
| Peach Payments, Ozow, Payflex | Processing payments. If you choose Payflex, your agreement to pay in instalments is with Payflex. |
| DawnWing (courier) | Delivery (name, address, phone number) |
| Google (Analytics, Tag Manager, Firebase) | Measuring how the site and the app are used; delivering app notifications |
| Meta (Facebook Pixel on the website, Meta SDK in the app) | Measuring and showing our advertising on Facebook and Instagram. Meta is a responsible party in its own right for what it does with this information. |
| Apple and Google (app stores) | Distributing the app and delivering its notifications |
| Webpushr | Browser push notifications, if you allow them |
| Amazon SES | Sending newsletters and order emails. Some emails are sent directly from our own systems. |
| PureChat | Live chat |
| Optimole | Delivering images quickly |
| Wordfence | Website security |
| Xneelo, Microsoft Azure, Amazon Web Services and IONOS | Hosting the website, databases and supporting services |
| Our web and app developers and IT support | Building and maintaining the website and the app |
| Professional advisers, auditors, a buyer of the business | Where needed, under a duty of confidentiality |
| Authorities | Where the law or a court order requires it |
Each service provider may use your information only to provide its service to us.
Transfers outside South Africa
Some providers store or process information outside South Africa, mainly in the United States and the European Union. We only transfer personal information where the recipient is bound by law or contract to protect it to a standard similar to POPIA, where the transfer is needed to carry out our contract with you, or where you have consented.
5. How long we keep it
| Information | Kept for |
|---|---|
| Account details, preferences, favourites | Until you close your account |
| Orders and invoices | Until you ask us to delete them, but for at least five years after the order, as tax law requires |
| Wine Club membership and payment records | Until you ask us to delete them, but for at least five years after each payment, as tax law requires |
| Card tokens | Until you leave the Wine Club or remove the card |
| Marketing preferences | Until you unsubscribe. We then keep your address on a do-not-contact list so we do not email you again. |
| Enquiries and chat conversations | Until you ask us to delete them |
| Server and security logs | Five years |
| App sign-in tokens | Up to 365 days after last use, or until you log out or change your password |
| App notification tokens | Until you log out, turn notifications off or uninstall the app |
| App usage analytics | Up to 14 months |
| Records of the terms and policy versions you accepted in the app | While your account is open, and five years after |
| My Cellar | Until you remove a wine from it or close your account |
| Reviews | Until you delete the review or ask us to remove it |
After that we delete the information or make it anonymous.
6. How we protect it
The website is served over an encrypted connection. Passwords are stored in hashed form. Payments are handled by providers certified to the card industry’s security standard. Access to customer information is limited to staff and service providers who need it, and the site is protected by a firewall and monitored for attacks.
No system is perfectly secure. If a security compromise affects your personal information we will tell you and the Information Regulator as soon as reasonably possible, as POPIA requires.
7. Cookies and tracking
Cookies are small files a website stores in your browser.
| Kind | What they do | Examples |
|---|---|---|
| Essential | Keep you logged in, remember your cart, protect against attacks | WordPress, WooCommerce, Wordfence |
| Analytics | Tell us which pages are visited and where visitors come from | Google Analytics, Google Tag Manager |
| Advertising | Let us measure our adverts and show them to people who have visited the site | Facebook Pixel |
| Functional | Live chat, push notifications | PureChat, Webpushr |
You can block or delete cookies in your browser settings. Essential cookies are needed for the cart and checkout to work. You can opt out of Google Analytics with Google’s browser add-on and manage advertising preferences in your Facebook and Google account settings.
8. Marketing
We send marketing messages only if you asked for them, or if you are a customer and we are telling you about products similar to those you bought. Every marketing email has an unsubscribe link. You can also change how often you hear from us under My Account > Wine Preferences, turn off browser notifications in your browser, or email info@getwine.co.za.
Messages about an order or your account (confirmations, delivery updates, payment problems, changes to these terms) are not marketing and are sent regardless.
9. Your rights
Under POPIA you may:
- ask whether we hold personal information about you and ask for a copy;
- ask us to correct or delete information that is inaccurate, out of date, excessive or unlawfully obtained;
- object to our using your information on the ground of legitimate interest;
- object to direct marketing at any time;
- withdraw consent you have given;
- ask us to delete your account, by emailing our Information Officer at ad@getwine.co.za.
You can see and change most of your information under My Account. For anything else email our Information Officer at ad@getwine.co.za. We may need to confirm your identity first. We will respond within 7 days.
Requests for access to records can also be made under the Promotion of Access to Information Act 2 of 2000. Our PAIA manual is available at https://www.getwine.co.za/wp-content/uploads/2016/09/Section51Manual.pdf.
If you are not satisfied with how we have dealt with your request you may complain to the Information Regulator of South Africa: https://inforegulator.org.za, POPIAComplaints@inforegulator.org.za.
10. Links to other sites
The website links to other sites, such as our payment providers and social media. Their privacy policies apply once you are there.
11. The Getwine mobile app
The app is another way to use your Getwine account: the same account, cart, orders and Wine Club membership as the website. Everything above applies to it. This section covers what is different.
11.1 What the app collects in addition
| Information | Why |
|---|---|
| App version, build number and platform (Android or iOS), sent with every request | To keep the app working, fix faults and tell you when an update is required |
| A random identifier for your installation of the app | To tell your devices apart, so you can sign out of one |
| A sign-in token kept in your phone’s secure storage, and a record of the devices signed in to your account | To keep you signed in |
| Your acceptance of the terms and of this policy, with the version and the date | To keep a record of what you accepted and when |
| Usage information through Google Analytics for Firebase: screens viewed, products viewed, items added to cart, checkout steps, purchases, device model, operating system version, language, approximate region derived from your IP address, notifications you open (the kind of notification and, for a promotion, which one), and an app instance identifier | To understand how the app is used and improve it |
| Advert measurement through the Meta (Facebook) SDK: that the app was installed and opened, purchases and their value, and, on Android, your device’s advertising identifier. On iPhone the app does not ask to track you and does not share the advertising identifier; installs are counted through Apple’s own privacy-preserving attribution. | To measure whether our adverts on Facebook and Instagram lead to installs and orders |
| A notification token, only if you allow notifications | To send order updates, Wine Club updates and, if you opt in, specials |
| My cellar: the wines from your completed orders, added automatically (starting with the three months before you first open it), and any wines you add yourself, with bottle counts, drink-by years and your notes | To let you keep track of the wine you have at home |
11.2 What the app does not collect
- Card details. Payment happens on our payment partners’ secure pages, opened in a browser window inside the app. Your card number never passes through or is stored in the app.
- Location. The app does not ask for or use your device’s precise location.
- Camera, contacts, photos, microphone. The app does not access them.
- Third-party adverts. The app shows no advertising from other companies. On Android your advertising identifier is used only to measure our own adverts; on iPhone it is not used at all.
11.3 Your choices in the app
- View and change your details and addresses under Account.
- Turn notifications on or off.
- Turn usage analytics off under Account > Privacy.
- Turn advert measurement off under Account > Privacy. On Android you can also reset or delete your advertising identifier under Settings > Privacy > Ads.
- Remove wines from My cellar, and change or delete your reviews.
- Log out of this device.
- Delete your account under Account > Account details > Delete account. We remove your profile, addresses and sign-in tokens, and keep order and invoice records for the period the law requires. An active Wine Club membership must be cancelled first so that no further payment is taken. You can also ask us to delete your account by email, as set out in section 9.
12. Changes to this policy
We will post any changes on this page with a new date at the top. If a change is significant we will tell account holders by email before it takes effect. In the app, we show the new version the next time you open it and ask you to acknowledge it.
13. Contact
Getwine, 57 Harrington Street, Cape Town, 8001, South Africa
info@getwine.co.za