Privacy
We publish the paperwork on our wines, so it would be odd to be vague about yours. This page says what information we collect, what we use it for, who receives it, how it travels and how it is protected. No legal fog, no surprises.
Who we are
Broken Compass Wine is the data controller for this site. We are a family wine merchant trading from Unit 1 Betton Business Park, Racecourse Road, East Ayton, Scarborough, YO13 9HD, United Kingdom. To ask us anything about your data, email [email protected] or write to that address.
What we collect, and why
When you place an order we collect your name, email address, phone number, delivery address, any delivery notes you add, and your confirmation that you are 18 or over. We need these to take payment, deliver wine to the right door, send you a receipt and meet the law on selling alcohol. Order records are kept for six years because tax law requires it.
When you pay, your card details go directly from your browser to Stripe, our payment processor. They never touch our servers and we never see them. We receive back only what we need: confirmation the payment succeeded, the last four digits, and the billing name.
Your basket lives in a single signed cookie that this site sets itself. It holds the wines you have picked and nothing else. There are no advertising cookies, no analytics trackers and no third party marketing tags anywhere on this site.
If you ask to be told when checkout opens, we keep your email address and the wines you had in your basket, use them once to tell you, and nothing more. This is a note that you asked, not a mailing list. We never add you to marketing without you asking.
If you use Ask the sommelier, the dish you type is sent to Anthropic, the AI company, to generate the pairing. Type food, not personal details. We use your IP address only to stop the feature being flooded, and we do not keep the questions against your name.
Like every website, our infrastructure keeps short lived technical logs, including IP addresses, so we can keep the site secure and working.
Who receives your information
We share the minimum each job needs, always over encrypted connections, and we never sell your information to anyone.
- Stripe processes payments and sends card receipts. Stripe is independently certified to the highest card security standard, PCI DSS Level 1.
- Unleashed, our warehouse and inventory system, receives your order so the right bottles leave the right shelf.
- Parcel2Go and the courier they book receive your name, delivery address, email and phone number so your wine can be delivered and you can be reached about the delivery.
- Anthropic receives only the dish text you type into Ask the sommelier.
- Cloudflare and Railway run the network and the servers this site lives on, so traffic passes through them as it does for a large share of the web.
- Google serves the small regional map on each wine page. Loading a map may set Google cookies inside that frame, governed by Google's own privacy policy.
Some of these providers process data outside the UK. Where they do, the transfer is covered by recognised safeguards such as the UK extension to the EU and US Data Privacy Framework or standard contractual clauses.
How your information is protected
Every connection to this site is encrypted with TLS. Card details are handled entirely by Stripe. Order records are held on access controlled infrastructure, not on laptops or in inboxes. We collect little, share less, and keep things only as long as they are needed: order records for six years for tax, stock notification emails until we have told you and you have had a fair chance to buy, technical logs for days rather than months.
Your rights
Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct it, delete it, restrict what we do with it, or hand it over in a portable form, and you can object to any processing we justify on legitimate interests. Email [email protected] and we will respond within a month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can put it right.
Changes
If we change how we handle your information, this page changes the same day, with the date below updated. Last updated 20 August 2026.
You must be 18 or over to buy alcohol from this site.