Draft · Version 7 October 2026
Privacy Policy
This policy explains how The Limoux Collection (TLC), operated by Whitmarsh Imports Ltd, collects and uses personal information through limouxcollection.com and its magazine, trade, advertising, gallery, event and enquiry services. Whitmarsh Imports Ltd is the controller for the processing described here, except where an independent provider is identified. This policy covers readers, contributors, attendees and individuals acting for businesses. It does not provide consent to marketing or tracking.
1 Who we are and how to contact us
Controller: Whitmarsh Imports Ltd, trading as The Limoux Collection. Registered in England and Wales, company number 12734672. Registered office and correspondence address: 52 Rupert Street, London W1D 6DS, United Kingdom. Email: admin@whitmarshimports.com. UK telephone: +44 7498 627201. French telephone: +33 6 70 56 39 38. VAT: GB 489 4457 29. AWRS: XFAW00000121985. EORI: GB097766152000. The regulatory identifiers describe our business; they do not authorise unrestricted collection or use of your data. Contact the email above for privacy questions or requests.
2 How we collect information
You provide information when completing enquiries, registering or signing in, applying for trade access, subscribing to communications where offered, submitting editorial material or gallery content, supplying advert artwork, requesting or booking events, or contacting us. Where a private preview is enabled, access records include the supplied email address, first and latest visit times, and visit count. These records help administer and secure preview access. We also receive relevant information from payment providers, organisers, suppliers and fulfilment partners for a service you request, and from public business sources for trade verification.
3 Information we use
Identity and contact information may include your name, email, phone, organisation, role, account identifier and billing or delivery address. Trade compliance information may include business registration, VAT, AWRS or licensing details where relevant. Account and transaction information includes account status, access permissions, enquiry and booking references, payment status, amounts, invoices and communications. Contribution information includes submitted text, photographs, videos, captions, credits and advert artwork. Event information may include participant display name, French proficiency, goals, table assignment and optional sharing preferences. Technical information may include IP address, browser or device details, session and security logs. We collect only information needed for the relevant function. Do not send full payment-card details or identity documents through general enquiries. Stripe processes card information; TLC receives payment references and status rather than storing full card numbers or security codes.
4 Sensitive information and children
Optional dietary, allergy or accessibility information can reveal health or religious information. Provide only what is necessary for the event. Where such information is processed, we require a lawful basis and an additional special-category condition, normally your explicit consent, and restrict disclosure to those arranging the requested accommodation. You may withdraw consent; we will explain any effect on an accommodation request. Do not include sensitive information in a public profile or gallery. TLC services involving wine are intended for adults; we do not knowingly collect children’s information for those services. If we become aware of inappropriate collection, we will assess and address it.
5 Purposes and lawful bases
| Purpose | Data | Lawful basis |
|---|---|---|
| Accounts and personal bookings | Identity, contact, account and transaction information | Contract or steps you request before a personal contract; legitimate interests for administration of organisational accounts. |
| Trade enquiries and business verification | Identity, contact, organisation and compliance information | Legitimate interests in handling business requests and checking eligibility; legal obligation where a particular check is required. |
| Payments invoices and accounting | Billing, transaction and payment references | Contract for your purchase; legitimate interests for organisational purchases and debt recovery; applicable legal obligations for records. |
| Enquiries complaints and service messages | Contact details and correspondence | Contract where relevant; legitimate interests in responding and maintaining records; legal obligations for rights requests. |
| Gallery editorial and advert submissions | Contribution, identity and contact information | Contract where applicable; legitimate interests in publishing material submitted for the agreed purpose; consent where required. |
| Event administration and language-level seating | Booking, level, goals and table information | Contract to deliver the event, or legitimate interests for an organisational booking; no use as a general marketing profile. |
| Optional participant sharing | Display name and agreed profile information | Consent, separate from booking. Other participants see only what you choose to share. |
| Sensitive event requirements | Necessary dietary, allergy or accessibility information | Relevant Article 6 basis plus an Article 9 condition, normally explicit consent. |
| Security and access administration | Session, technical, account and preview access records | Legitimate interests in protecting services, preventing misuse and administering permitted access; legal obligation where relevant. |
| Newsletters and promotional messages | Contact details and communication preferences | Consent where required; otherwise legitimate interests only when applicable marketing law permits. |
| Optional analytics or advertising tracking if introduced | Technical and usage information | Consent where required before nonessential storage or tracking; any applicable exemption must be assessed and explained. |
A contract with your employer is not automatically a contract with you personally. Where we rely on legitimate interests, we assess necessity and balance those interests against your rights. If required information is not supplied, we may be unable to provide the requested account, booking, invoice or compliance check. Optional consent is not a condition of unrelated services. We do not use solely automated decisions producing legal or similarly significant effects; course table suggestions remain subject to organiser confirmation.
6 Marketing cookies and advertising
You can unsubscribe from marketing at any time using the message link or admin@whitmarshimports.com. Service messages such as booking confirmations are separate from marketing. We do not sell your personal information. The site’s current cookie controls cover essential preferences and functionality, including account or preview sessions, age confirmation and enquiry features; acknowledgement is not consent to optional tracking. Showing a contextual banner does not require sharing identifiable reader data with the advertiser. Nonessential analytics, advertising cookies or personalised tracking must not be enabled without the required prior choice and an updated notice. External videos are loaded only when you choose to activate them and the external provider’s policy then applies. Consult in the footer for the available controls.
7 Who receives information
We share only necessary information with hosting, database and authentication providers supporting the site, Stripe for payments, email delivery providers for service communications, and authorised staff or contractors administering enquiries, accounts, content and events. Where a requested service involves a producer, restaurant, instructor, freight, customs, warehouse or delivery provider, we disclose the information necessary for that role. We may also disclose relevant records to accountants, legal advisers, auditors, regulators or authorities where justified or required by law, or in a properly safeguarded business transfer. We do not give advertisers a general right to receive identifiable reader data. Providers processing on our instructions must have appropriate contractual and security safeguards. Stripe and some organisers or fulfilment providers may act as independent controllers for their own processing; their policies apply to that processing.
8 Public contributions and event privacy
Content submitted for public publication can be viewed by visitors and copied or shared outside our control. Do not publish another person’s private information without authority. Explain this notice to people whose details you legitimately provide. We moderate publication but cannot promise to retrieve every third-party copy. Event contact details, payment details, private proficiency notes and dietary or health information are not public. Optional participant lists show only consented display details to authorised participants. A booking QR code points to the booking page; it does not itself authorise access to someone else’s private course pack. Photographs showing identifiable people require appropriate permissions and a lawful publication basis.
9 International storage and transfers
Site, payment and communications providers may process information in the UK, EEA or other countries. We assess the actual destinations and providers rather than assume every service stores data in France or the UK. Where a restricted transfer occurs, the applicable UK GDPR or EU GDPR safeguards must be in place: relevant adequacy arrangements where available, EU Standard Contractual Clauses for EU transfers, the UK IDTA or UK Addendum for UK transfers, and any required transfer assessment and additional measures, or another lawful mechanism. Ask admin@whitmarshimports.com for relevant destination and safeguard information, including copies where available subject to legitimate redactions.
10 Security
We use proportionate technical and organisational measures and limit access according to role and business need. No internet service can guarantee absolute security. Keep account credentials and booking information secure and report suspected misuse promptly. Providers processing on our instructions are subject to appropriate confidentiality obligations. We investigate suspected breaches and notify affected people and regulators when legally required.
11 How long we retain information
We retain information only while needed for the purpose and applicable legal requirements. Account data is retained while the account is active and for a justified period after closure for unresolved transactions, security or legal claims. Ordinary enquiries are normally reviewed for deletion or anonymisation within three years of the last substantive contact; unresolved matters may need longer. Marketing prospect records are normally kept no longer than three years from collection or the last contact initiated by the prospect, or until earlier withdrawal, subject to a minimal suppression record so we honour opt-outs. Event dietary and sensitive accommodation details should be deleted when no longer needed after the event unless a justified incident or legal obligation requires restricted retention. Booking and payment records may need longer for accounting or claims. UK accounting records are generally retained for six years where applicable; French accounting records may require ten years where French obligations apply. Security and preview logs are retained only for a proportionate operational period and longer only for a documented incident or legal need. Published contributions can remain in an editorial archive with appropriate rights and safeguards. Backups are overwritten through their retention cycle. These criteria do not mean every type of personal data is kept for six or ten years. You may request information about the period applicable to your records.
12 Your rights and complaints
Subject to applicable conditions, you can request access, correction, erasure, restriction or portability of your information, object to processing based on legitimate interests, and withdraw consent. You have an unconditional right to object to direct marketing. Withdrawal does not affect prior lawful processing. Contact admin@whitmarshimports.com; provide enough information to locate your records and verify identity proportionately. Requests are normally answered within one month; where the law permits an extension, we explain it within that period. You may complain directly to the UK Information Commissioner’s Office at https://ico.org.uk/ or, where applicable, the French CNIL at https://www.cnil.fr/ and another competent EEA supervisory authority, including where you live or work. Contacting us first can help resolve the issue but is not a condition of your right to complain.
13 Third-party links and policy changes
Links, social sharing, external videos and independent provider sites have their own privacy notices. We are responsible for our own disclosures and integration choices, but do not control another provider’s independent processing. We may update this notice when services or processing change, display the updated date and provide direct notice where appropriate. New processing must have its own lawful basis; publication of an updated notice does not obtain consent. Contact: admin@whitmarshimports.com, Whitmarsh Imports Ltd, 52 Rupert Street, London W1D 6DS, United Kingdom.