Privacy policy
Winetrust
Last updated: 15 April 2026
Winetrust is operated by One Plus One Wine Pty Ltd (ABN 50 078 643 786) ("Winetrust", "we", "us", "our").
We are committed to protecting your privacy and handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This Privacy Policy explains how we collect, use, disclose, and store personal information when you access our website, place orders, or interact with our services.
1. Scope
This Privacy Policy applies to:
- The Winetrust website
- Orders placed through our online store
- Customer accounts, subscriptions, and loyalty programs
- Marketing and communications
By using our website or services, you consent to the practices described in this Policy.
2. Personal Information We Collect
We collect personal information that is reasonably necessary to operate our business.
a) Information You Provide
- Name
- Billing and shipping address
- Email address
- Phone number
- Age confirmation or date of birth (where required by law)
- Account login information
- Communications with customer support
b) Payment Information
Payment information is processed by third-party payment providers and is not stored by us. All online transactions are processed using industry-standard encryption (SSL/TLS) through our payment gateway. Your complete credit card number is not accessible to Winetrust or any outside party at any time.
c) Automatically Collected Information
- IP address
- Browser, device, and operating system information
- Pages viewed and interaction data
- Referral and traffic source data
- Cookies and similar tracking technologies
d) Transactional & Engagement Data
- Purchase history
- Subscription or loyalty participation
- Email and SMS engagement data
e) Delivery & Age Verification Data
- Name, date of birth, and identification type of the person who accepts a delivery (collected by our carrier partners for age verification and liquor licensing compliance)
- Proof of delivery records, including photographs, GPS coordinates, and timestamps
3. How We Use Personal Information
We use personal information to:
- Process and fulfil orders
- Verify legal drinking age
- Deliver products and services
- Provide customer support
- Manage subscriptions, loyalty programs, and promotions
- Send transactional communications
- Send marketing communications where permitted
- Improve website functionality and performance
- Detect fraud and misuse
- Comply with legal and regulatory obligations, including liquor licensing legislation
- Process self-exclusion requests (see Section 12)
4. Marketing Communications
We send marketing communications only where:
- You have provided consent,
- The communication relates to a previous purchase or enquiry, or
- It is otherwise permitted by applicable law.
Marketing communications may include:
- Promotional emails
- SMS messages (including offers, reminders, or loyalty updates)
Opt-Out
You may opt out of marketing communications at any time by:
- Using the unsubscribe link in marketing emails
- Replying STOP to marketing SMS messages
- Contacting us directly
Opting out of marketing communications does not affect essential transactional or service messages (such as order confirmations, delivery notifications, or account notices).
5. Cookies & Tracking Technologies
We use cookies and similar technologies to:
- Enable core website functionality
- Analyse traffic and usage
- Support advertising and remarketing campaigns
Third-party analytics and advertising providers may also place cookies on your device.
You can manage or disable cookies through your browser settings. Disabling cookies may affect site functionality.
6. Disclosure to Third Parties
We may disclose personal information to trusted third parties where reasonably necessary to operate our business, including:
- Shopify (ecommerce platform)
- Payment processors and gateways
- Delivery and logistics partners
- CRM and customer support platforms
- Email and SMS marketing providers
- Analytics and advertising providers
- IT, hosting, and security service providers
- Fraud prevention and risk assessment services
These third parties may only use personal information to perform services on our behalf and are required to handle it securely.
We do not disclose personal information to third parties for the purpose of allowing them to direct-market their products or services to you, unless you have expressly consented to that disclosure.
7. Overseas Disclosure
Some service providers may store or process personal information outside Australia, including in the United States.
We take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with Australian privacy standards.
8. Data Security
We implement reasonable technical and organisational safeguards to protect personal information against:
- Unauthorised access
- Misuse
- Loss
- Disclosure or alteration
All online transactions are processed using industry-standard SSL/TLS encryption. Payment details are handled entirely by PCI-DSS compliant third-party payment providers and are never stored on our systems.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Data Retention
We retain personal information only for as long as reasonably necessary to:
- Operate our business
- Meet legal, accounting, and regulatory requirements
- Resolve disputes
- Comply with liquor licensing record-keeping obligations
Information that is no longer required is securely deleted or anonymised.
10. Access & Correction
You may request access to, or correction of, your personal information by contacting us.
We will endeavour to respond to your request within 30 days. We may require verification of identity before responding.
There are some exceptions to access rights — for example, we cannot provide access to personal information about other people or commercially sensitive information. If we decline or partially decline a request, we will write to you to explain our decision and your options, including how to make a complaint.
11. Minors
Winetrust does not knowingly collect personal information from individuals under 18 years of age.
If we become aware that such information has been collected, it will be deleted.
12. Self-Exclusion
If you request self-exclusion from Winetrust (see our RSA Commitment page), we will:
- Suspend your account
- Remove you from all marketing communications
- Retain only the minimum information necessary to enforce the exclusion and comply with legal obligations
Self-exclusion data is treated confidentially and is not used for any marketing or commercial purpose.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be published on our website with a revised "Last updated" date.
14. Complaints
If you believe we have mishandled your personal information, please contact us so we can attempt to resolve the issue.
We will:
- Acknowledge your complaint within 30 days
- Investigate and provide a final response
- Work with you to resolve the matter
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Phone: 1300 363 992
- Email: enquiries@oaic.gov.au
- Website: www.oaic.gov.au
- Complaints form: oaic.gov.au/privacy/privacy-complaints
15. Contact
One Plus One Wine Pty Ltd
Trading as Winetrust
ABN: 50 078 643 786
Registered address: 1044A Dandenong Rd, Carnegie VIC 3163, Australia
Email: support@winetrust.com