Privacy policy

Privacy Policy

Last updated: 23 July 2026

This Privacy Policy explains how Rhucello collects, uses, stores and shares your personal information when you visit www.rhucello.co.uk, purchase from us, subscribe to our emails or otherwise contact us.

Rhucello is operated by RHUCELLO LIMITED, trading as Rhucello. For the purposes of UK data protection law, we are the data controller responsible for your personal information.

1. Information we collect

The personal information we collect depends on how you interact with us and may include:

Information you provide directly

  • Your name
  • Email address
  • Telephone number
  • Billing and delivery addresses
  • Order and purchase information
  • Account login information, where you create an account
  • Marketing preferences
  • Information included in enquiries, reviews, returns or other communications
  • Information needed to confirm that you are legally permitted to purchase age-restricted products

Payment details are processed securely by our payment providers. We receive payment confirmation and limited transaction information but do not ordinarily receive or store your full card details.

Information collected automatically

When you use our website, we and our service providers may collect:

  • Your IP address
  • Browser and device type
  • Pages viewed and links selected
  • Dates and times of visits
  • Referring website or advertising source
  • Shopping-basket and checkout activity
  • Cookie identifiers and similar technical information

Further information about this is provided in the Cookies and tracking technologies section below.

Information received from other organisations

We may receive information from organisations involved in providing our services, including:

  • Shopify
  • Payment providers
  • Delivery and fulfilment providers
  • Website analytics providers
  • Advertising platforms
  • Email and customer-communication providers
  • Fraud-prevention and security providers

2. How we use your information

We may use your personal information for the following purposes.

To process and fulfil orders

This includes:

  • Processing payments
  • Confirming and managing orders
  • Arranging delivery
  • Providing delivery updates
  • Processing returns, refunds and replacements
  • Responding to questions about an order

Our lawful basis is that this processing is necessary to enter into or perform our contract with you.

To provide customer service

We use your information to answer enquiries, resolve problems and provide information about our products and services.

Our lawful basis is our legitimate interest in providing effective customer service and maintaining good customer relationships.

To meet our legal responsibilities

We may process information to:

  • Maintain accounting and tax records
  • Comply with consumer-protection requirements
  • Meet licensing and age-restriction obligations
  • Respond to legally valid requests from public authorities
  • Establish, exercise or defend legal claims

Our lawful basis is compliance with a legal obligation or, where appropriate, our legitimate interests.

To keep our website and business secure

We may use information to detect and prevent fraud, misuse, security incidents and other unlawful activity.

Our lawful basis is our legitimate interest in protecting our customers, website and business.

To improve our website and services

We may use information to understand how customers use our website, assess website performance and improve our products, communications and customer experience.

Where this involves non-essential cookies or tracking technologies, we will request consent where required. In other circumstances, we may rely on our legitimate interests in managing and improving our business.

To send marketing communications

We may send you Rhucello news, product information, serving suggestions, offers and other marketing where:

  • You have asked or consented to receive it; or
  • We are permitted to contact you as an existing customer about similar products and gave you a clear opportunity to opt out.

You can unsubscribe at any time by selecting the unsubscribe link in an email or contacting us at info@rhucello.co.uk.

Unsubscribing from marketing will not stop essential messages about your account, purchases, deliveries or customer-service enquiries.

UK rules generally require consent for consumer email marketing, with a limited exception for existing customers where the required “soft opt-in” conditions have been met.

3. Cookies and tracking technologies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to work. These may be used to:

  • Remember items in your basket
  • Operate checkout
  • Keep the website secure
  • Remember privacy choices
  • Enable account features

We may also use optional technologies for:

  • Website analytics
  • Measuring advertising performance
  • Understanding customer activity
  • Personalising advertising
  • Improving our services

Where required, optional cookies and tracking technologies will not be used until you provide your consent. You can accept, reject or change your choices through our cookie banner or privacy settings.

You can also control cookies through your browser settings, although blocking necessary cookies may prevent some website functions from working correctly.

UK rules require customers to be told what tracking technologies do and generally require prior consent unless an exception applies. Advertising-related technologies are not exempt from the consent requirement.

4. How we share your information

We do not sell your personal information.

We may share information where necessary with organisations that help us operate the business, including:

  • Shopify, which provides our ecommerce platform and online-store services
  • Payment processors and financial-service providers
  • Couriers, delivery companies and fulfilment providers
  • Email, customer-service and communications providers
  • Website hosting, technical-support and security providers
  • Analytics and advertising providers, where enabled and permitted
  • Accountants, insurers, professional advisers and legal representatives
  • Government bodies, regulators, law-enforcement agencies or courts where disclosure is legally required
  • A purchaser, investor or adviser involved in a genuine sale, restructuring or transfer of the business

These organisations may process information only for the relevant service, under their own legal responsibilities or under arrangements requiring appropriate protection of your information.

Some services may provide their own privacy notices explaining how they use personal information.

5. International transfers

Some of our providers, including Shopify and certain technology, payment, analytics or advertising providers, may process personal information outside the United Kingdom.

Where information is transferred internationally, we take steps to ensure that an appropriate legal safeguard is used. This may include:

  • A UK adequacy regulation
  • The UK International Data Transfer Agreement
  • The UK Addendum to approved standard contractual clauses
  • Another legally recognised transfer mechanism

You can contact us for further information about safeguards relevant to your personal information.

6. How long we keep information

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

In general:

  • Order, transaction and accounting records may be retained for up to six years after the relevant financial period, or longer where legally required.
  • Customer-service and returns information is retained for as long as reasonably necessary to resolve the matter and protect the rights of the customer and the business.
  • Account information is retained while the account remains active and for a reasonable period afterwards.
  • Marketing information is retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to contact you.
  • We may retain limited suppression information after you unsubscribe so that we can respect your request not to receive further marketing.
  • Cookie and technical information is retained according to the purpose and lifespan of the relevant technology.

Data protection law does not prescribe one retention period for all information, but requires businesses to keep it no longer than necessary. Certain business and tax records may need to be retained for several years.

7. Keeping your information secure

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, alteration, loss, misuse or disclosure.

These measures may include controlled access, secure systems, encryption and appropriate security measures provided by Shopify and our other service providers.

No method of online transmission or electronic storage is completely secure. You should therefore avoid sending sensitive payment or identification information through ordinary email.

8. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Ask for access to the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete your information
  • Ask us to restrict how your information is used
  • Object to processing based on legitimate interests
  • Object at any time to the use of your information for direct marketing
  • Receive certain information in a portable format
  • Withdraw consent where processing is based on consent
  • Complain about how your personal information has been handled

These rights are not absolute and may not apply in every situation. For example, we may need to retain certain transaction information to comply with legal or tax obligations.

To exercise a right, contact info@rhucello.co.uk. We may ask for enough information to confirm your identity before completing a request.

We will not charge a fee in ordinary circumstances. We may charge a reasonable fee or refuse a request where permitted by law, such as where a request is clearly unfounded or excessive.

9. Marketing choices

You can stop receiving marketing emails at any time by:

We will act on unsubscribe requests as soon as reasonably possible.

You have an absolute right to object to the use of your personal information for direct marketing.

10. Children and age-restricted products

Rhucello sells alcoholic products and our services are not intended for children or anyone who is not legally permitted to purchase alcohol.

We do not knowingly collect personal information from children for the purpose of selling or marketing alcoholic products.

Where we become aware that personal information has been provided inappropriately by a child, we will take reasonable steps to delete it, subject to any legal requirement to retain it.

11. Links to other websites

Our website may contain links to social-media platforms, stockists or other third-party websites.

We do not control these websites and are not responsible for their privacy practices. You should read the relevant privacy notice before providing personal information to another organisation.

12. Complaints

Please contact us first if you have a concern about how we have used your personal information. We will try to investigate and resolve the matter.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator responsible for data protection. Complaint information is available through the ICO’s website.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to our website, services, suppliers or legal obligations.

The revised version will be published on this page and the date at the top will be updated.

14. Contact us

For questions about this Privacy Policy, to exercise a data-protection right or to make a complaint, contact:

Rhucello
Operated by: RHUCELLO LIMITED
69 Cumbrian Way
Wakefield
WF2 8JS
United Kingdom

Email: info@rhucello.co.uk

Rhucello is the data controller responsible for the personal information described in this policy.