Privacy policy

Privacy Policy

Last updated: 14 June 2026

Philosophy of Wine (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains what personal data we collect about you, how we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and Luxembourg data protection law. It applies to our website at philosophyofwine.com, our online shop, and the wine courses, masterclasses, tastings and events we provide.

1. Who we are (data controller)

The data controller responsible for your personal data is:

Philosophy of Wine, operated by Jessica van der Schee
Registered address: 44 rue de l’Industrie, L-8069 Strassen, Luxembourg
Business permit (autorisation d’établissement) No.: 10168887
VAT number: LU35967223
Contact for privacy matters: Jess@philosophyofwine.com (please put “Data Protection” in the subject line)

2. The personal data we collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

Identity data — your name and, where you register for a WSET course or exam, your date of birth.
Contact data — email address, telephone number and billing/delivery address.
Account data — login details and preferences if you create an account in our shop.
Order and transaction data — products and courses purchased, order history, and payment confirmation details. We do not store your full card details; payments are processed securely by our payment provider.
Course and exam data — information needed to register you with WSET, administer your exam, and arrange any reasonable adjustments, including identity verification at the exam.
Marketing data — your preferences for receiving marketing from us and your communication preferences.
Technical and usage data — IP address, browser and device information, and how you use our website, collected through cookies and similar technologies (see our Cookie Policy).
Communications data — the content of messages you send us by email or through our forms.

A student must be at least 16 years old (the minimum legal drinking age in Luxembourg). We do not knowingly collect data from anyone under 16.

3. How we collect your data

Directly from you — when you book a course, place an order, create an account, sign up to our newsletter, or contact us.
Automatically — through cookies and similar technologies when you use our website.
From third parties — for example our payment provider (confirmation that a payment succeeded) or analytics providers.

4. Why we use your data and our legal bases

We only use your personal data where the law allows us to. The table below sets out the main purposes and the legal basis we rely on under Article 6 GDPR.

Purpose	Legal basis
To provide your courses, masterclasses and events, and to process and deliver your orders	Performance of a contract with you
To register you with WSET, administer your exam, issue certificates and arrange reasonable adjustments	Performance of a contract; compliance with a legal/regulatory obligation
To manage payments, accounting, tax and other statutory records	Compliance with a legal obligation
To send you marketing emails and newsletters about our courses and products	Your consent (which you can withdraw at any time)
To operate, secure and improve our website, prevent fraud, and understand how our site is used	Our legitimate interests (running and protecting our business)
To place non-essential cookies and analytics	Your consent
To respond to your enquiries and provide customer support	Performance of a contract and/or our legitimate interests

5. Who we share your data with

We do not sell your personal data. We share it only with trusted parties who help us run our business, and only as necessary. These include:

WSET (Wine & Spirit Education Trust) — to register you for exams, grade exams, issue certificates and validate future enrolments. WSET handles your data under its own Data Protection Policy.
Our e-commerce and website platforms — Shopify (online shop and checkout) and Squarespace (brand website).
Our payment provider — Shopify Payments (powered by Stripe), to process payments securely.
Our email and marketing platform — Klaviyo, to manage newsletters and communications (where you have consented).
Analytics providers — Google Analytics, to understand website usage.
Delivery and logistics partners — couriers, where physical goods are shipped to you.
Professional advisers and authorities — our accountants and, where required by law, tax authorities, regulators or other public bodies.

6. International transfers

Some of our service providers are located outside the European Economic Area (for example in the United Kingdom or the United States). Where we transfer your data outside the EEA, we ensure an appropriate safeguard is in place — such as an EU adequacy decision, the European Commission’s Standard Contractual Clauses, or a data protection agreement with the awarding body (for example, our data protection agreement with WSET) — so that your data remains protected.

7. Cookies

Our website uses cookies and similar technologies to make the site work, to remember your preferences, and (with your consent) for analytics and marketing. You can manage your preferences through our cookie banner and your browser settings. For more detail, please see our separate Cookie Policy.

8. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out above:

Order, payment, accounting and tax records: retained for the period required by Luxembourg law (generally up to 10 years).
WSET course and exam records: retained for at least three years after the date of the course, as required by WSET.
Marketing data: until you unsubscribe or withdraw your consent.
Account data: for as long as your account is active, and a reasonable period afterwards.

When we no longer need your data, we securely delete or anonymise it.

9. Your rights

Under the GDPR, you have the following rights in relation to your personal data:

Access — to request a copy of the personal data we hold about you.
Rectification — to have inaccurate or incomplete data corrected.
Erasure — to ask us to delete your data in certain circumstances.
Restriction — to ask us to limit how we use your data in certain circumstances.
Data portability — to receive certain data in a structured, machine-readable format.
Objection — to object to processing based on our legitimate interests, and to object to direct marketing at any time.
Withdraw consent — where we rely on your consent, you can withdraw it at any time without affecting processing carried out before withdrawal.

To exercise any of these rights, please contact us at Jess@philosophyofwine.com. We will respond within one month.

You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD) — www.cnpd.public.lu — if you believe we have not handled your data properly. We would, however, appreciate the chance to address your concerns first.

10. How we protect your data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. Payments are processed through secure, PCI-compliant providers, and access to personal data is limited to those who need it.

11. Links to other websites

Our website may contain links to third-party websites (for example WSET). This Privacy Policy does not apply to those sites, and we are not responsible for their privacy practices. Please review their privacy policies before providing any personal data.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review it periodically.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at Jess@philosophyofwine.com with “Data Protection” in the subject line.