Privacy Policy

Last updated: 15 March 2026

1. Who We Are

CWFexpo ("we", "us", "our") operates the Cypriot Wine Festival & Business Expo held annually in London. Our registered office address is 197 Bowes Road, London N22 6UH. For any privacy enquiries please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

Identity Data: Full name, title, date of birth.

Contact Data: Email address, telephone number, postal address.

Transaction Data: Ticket purchases, exhibition bookings, payment references (we do not store card numbers).

Technical Data: IP address, browser type, device identifiers, pages visited, referring URL.

Marketing Data: Communication preferences, newsletter subscriptions, event interests.

Media Data: Photographs or video footage captured at our events.

3. How We Collect Your Data

Directly — when you purchase tickets, register as an exhibitor, subscribe to our newsletter, submit a contact form, or apply for trade/press accreditation.
Automatically — via cookies and similar technologies when you browse our website.
Third parties — from payment processors, social media platforms, and analytics providers.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) we rely on the following lawful bases:

Contract: To fulfil ticket orders, exhibitor agreements and sponsorship contracts.
Legitimate Interest: To market our events, improve our website, and ensure event security.
Consent: For email marketing communications — you may withdraw consent at any time.
Legal Obligation: Where required for tax, accounting or regulatory purposes.

5. How We Use Your Data

Process and manage ticket purchases and exhibitor registrations.

Send event updates, confirmations and post-event communications.

Send marketing emails where you have opted in.

Analyse website usage to improve user experience.

Manage trade and press accreditation applications.

Ensure safety and security at our events.

6. Data Sharing

We do not sell your personal data. We may share data with:

Payment processors (e.g., Stripe) to process transactions securely.

Email service providers for newsletter distribution.

Analytics providers (e.g., Google Analytics) for website performance.

Venue operators and security partners as required for event delivery.

Law enforcement or regulatory bodies where legally required.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described. Typically: transaction records for 6 years (legal obligation); marketing data until you unsubscribe; technical data for 26 months. Event photography may be retained indefinitely for archival and promotional purposes.

8. Your Rights

Under the UK GDPR you have the right to:

Access the personal data we hold about you.

Rectify inaccurate or incomplete data.

Request erasure (“right to be forgotten”).

Restrict or object to processing.

Data portability — receive your data in a structured format.

Withdraw consent at any time for marketing communications.

To exercise any right, email [email protected]. We will respond within 30 days.

9. International Transfers

Your data is primarily processed within the UK and EEA. Where data is transferred outside these regions (e.g., US-based processors), we ensure appropriate safeguards such as Standard Contractual Clauses are in place.

10. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

11. Complaints

If you are unhappy with how we handle your data, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to This Policy

We may update this policy from time to time. The "last updated" date above reflects the most recent revision. We encourage you to review this page periodically.