Privacy Policy

You can browse without accepting Google Analytics. This policy explains the catalogue, technical records, optional measurement, correspondence and your privacy choices.

Who is responsible

New World Gaming Ireland Limited is the owner of WineDeals.com.au and the controller responsible for personal information we process for this website. Direct privacy requests or complaints to the contact below and mark your message “Privacy”.

As an Irish operator, our processing is subject to applicable Irish and EU data-protection requirements. The Australian Privacy Act 1988 and Australian Privacy Principles also apply to the extent our activities fall within their scope; the OAIC explains the Australian framework. We do not use this qualification to limit rights you otherwise have.

Information collected and how it reaches us

• Website requests: IP address, request time, requested URL, browser and device information, referrer if supplied, and security or error information may be processed by our hosting and delivery services when your browser requests a page or asset.
• Optional analytics: if you accept, Google Analytics 4 processes identifiers stored in cookies, page visits, session and interaction information, browser/device characteristics and approximate geographic information. We receive analytics reports rather than a name supplied by you.
• Correspondence: if you email or write to us, we receive your contact details, message, attachments and other information you choose to provide. We may receive relevant correspondence from a person authorised to act for you.
• Site preferences: first-party cookies remember your analytics choice, 18+ acknowledgement and optional delivery postcode. They do not contain your name or email address.
• Retailer referrals: when you use a retailer link, we record the listing, retailer, time and referring page path. The referral record does not include your IP address, an account identifier or the referring page's query string.
• Administration: authorised staff accounts use an email address, password hash and session cookie. Login rate limits use a hashed request identifier.

There is no checkout, payment facility or identity-verification upload. New subscriber sign-ups, saved-wine accounts, email alerts and AI chat are disabled at launch. Existing pre-launch subscriber records and their consent evidence are preserved privately; they are not used to send marketing while email is disabled. Please avoid sending unnecessary sensitive information in correspondence.

Purposes and legal bases

• Delivering and protecting the site: technical processing supports our legitimate interests in providing a functioning, secure service, troubleshooting errors and preventing abuse, balanced against visitors' rights.
• Measuring use: optional Google Analytics operates on consent. Refusing or withdrawing consent does not prevent access to the website.
• Remembering a privacy choice: the preference cookie allows us to honour your request and avoid repeatedly asking. It supports our legitimate interest in respecting choices and relevant legal obligations.
• Handling enquiries and complaints: we use correspondence for our legitimate interest in responding and resolving issues, or to meet a legal obligation when a statutory request or requirement applies.
• Legal compliance and claims: relevant records may be processed to comply with law or establish, exercise or defend a legal claim.

You do not have to contact us or accept analytics to browse. Without information needed to identify a complaint or verify a rights request, we may be unable to resolve it, and we will explain what is needed. We do not turn an enquiry into consent to receive marketing.

Google Analytics and your control

Our measurement ID is G-VGE64HX3F3. The Google tag is loaded only after you accept analytics, and only on winedeals.com.au and its www host. Before acceptance, or after rejection, our implementation does not load the Google tag or send cookieless analytics pings.

The tag is configured with advertising storage and advertising personalisation denied, Google signals disabled, and analytics-cookie expiry limited to 180 days without extension on each visit. It sends a page address without its query string or fragment and a referring-site origin rather than the full referring URL. We do not deliberately send names, email addresses, message content or payment details to Analytics.

These controls do not make analytics anonymous. Google receives network requests and cookie/device information; Google says Analytics does not log or store IP addresses, as described in its privacy controls. See the Google Privacy Policy for Google's handling of information.

Use in this page or the footer to accept, reject or withdraw consent. Withdrawal stops future measurement on this browser and removes accessible first-party Analytics cookies, but does not automatically delete data previously lawfully processed. Contact us to request deletion where applicable.

Recipients and service providers

• Cloudflare: provides hosting, content delivery, traffic protection and related technical processing. Its role and practices are described in the Cloudflare privacy policy.
• Google: provides Analytics only when you opt in. Its Google Privacy Policy explains the information it receives and related controls.
• Fontshare and its delivery network: provide the website fonts. Font requests transmit IP address and normal browser-request information to those services whether or not analytics is accepted.
• Correspondence and support providers: our email and IT providers may handle communications needed to answer your enquiry. Professional advisers or authorities may receive information where necessary for a legal matter, obligation or lawful request.

We do not sell personal information collected through this website. We do not load affiliate-network tracking scripts or remarketing pixels. Retailer images are requested from the retailer's image host, which receives normal browser-request information. Following a retailer link takes you to that retailer's website, where its own privacy and cookie policies apply.

Overseas handling and safeguards

The operator is in Ireland, so correspondence and administration may involve Ireland. Hosting and optional analytics also involve international providers, including processing in the United States and the European Economic Area; Cloudflare describes these principal storage regions in its Cloudflare privacy policy, while Google describes its worldwide servers in the Google Privacy Policy.

Font and communications providers may also handle information outside Australia. The precise location depends on network routing, service configuration and support access; information is not guaranteed to remain in Australia. Contact us for the providers, countries and safeguards relevant to your information.

Where required, international transfers must use an appropriate legal mechanism, such as an applicable adequacy decision or standard contractual clauses with any necessary supplementary safeguards. Australian cross-border disclosure obligations apply where the Australian Privacy Principles bind us; see the Australian Privacy Principles. Browsing or accepting analytics is not a blanket waiver of overseas-transfer protections.

Retention and security

The analytics-choice cookie lasts up to 180 days from your choice; changing the choice starts a new period. Our Google tag sets Analytics-cookie expiry to 180 days and does not refresh that expiry on each visit. Your browser may shorten either period.

Cookie lifetime is not the same as retention of reports on Google's servers. Google Analytics uses property-level settings for user and event data, while aggregated reports can be treated differently; Google's data-retention documentation explains this distinction. Ask us for the setting and records relevant to a request; we do not represent the 180-day cookie limit as a server-side deletion guarantee.

We retain correspondence only as long as needed to answer it, resolve related follow-up, satisfy legal obligations or handle legal claims. Technical-record retention depends on the hosting/security service and whether a record is needed for an incident or legal requirement. We assess necessity by the purpose, sensitivity, applicable legal periods and whether the purpose can be met with less information.

We use HTTPS and hosting security controls and take reasonable steps to protect information against misuse, loss and unauthorised access. No system is risk-free. Where a breach triggers a legal notification obligation, we will notify the relevant authority and affected people as required.

Access, correction and other rights

You may ask to access or correct personal information we hold about you. Depending on the applicable law and circumstances, you may also request erasure, restriction, portability or object to processing based on legitimate interests; consent can be withdrawn without affecting earlier lawful processing. The Irish Data Protection Commission explains these rights.

Send requests to winedeals@gamingmedia.com. We may ask for proportionate proof of identity or authority, not unnecessary identity documents. We will respond within applicable legal deadlines, explain any permitted refusal or extension, and normally handle requests without a fee; any legally permitted charge would be explained beforehand.

Privacy complaints

Tell us what happened, when, the relevant page or correspondence, and the outcome you want. We aim to acknowledge complaints within five business days and respond within 30 days, without extending any shorter legal deadline.

If Australian privacy law applies and you are dissatisfied or we have not responded within 30 days, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC), following its process. You may also complain to the Irish Data Protection Commission or another competent supervisory authority; contacting us first does not remove that right.

Children, decisions, other sites and updates

The site is for adults aged 18 and over, and we do not knowingly solicit children's personal information. Contact us if a child has supplied information so we can investigate and address it. The site does not make solely automated decisions with legal or similarly significant effects about visitors.

External sites have their own privacy practices, which are not controlled by this notice. We will update this policy when our practices change and give further notice or obtain fresh consent where required. The current version's date appears at the top of this page.