Privacy statement
Last updated 22 September 2026
Pieter Claesz, c. 1625 · Art Institute of Chicago
This statement describes how SRA Reserve handles information in connection with the website srareserve.com. SRA Reserve is a planned United Kingdom company and is part of The Works Holdings.
What this site is
This is an informational website on which a catalogue of wine is displayed with indicative market prices. It has no user accounts, no login and no payment facility. No sale is made or concluded on this site and no order can be placed through it; wines carry an enquiry action only.
What we collect through the site
When you use the enquiry form, or click through to email us directly, we record that you made contact: your name and message if you gave them, the page you were on, and a basic technical log (your IP address) so we can reply and keep a record of the enquiry. If you click a direct email link before writing to us, we log that the click happened (which enquiry type, which page) even if you do not go on to send an email, this lets us follow up if your message never arrives, and is never shared outside The Works Group.
Visitor statistics. We count how this site is used with a counter that we run ourselves, on our own server in the European Union. No analytics company receives anything. When you open a page it records the page; the site or search engine that sent you (the page address without anything after a question mark) and any campaign tag in the link; your country and approximate city, worked out on our server from your network address, which we do not store; the type of browser and device; how long the page stayed open and how far down you scrolled; and where on the page you clicked (a position and the kind of element, such as a link or a button). It never records what you type, anything in a form, or the words on the page. It sets no cookies. It keeps a random number in your browser tab while the tab is open; it is gone when you close the tab. To tell one visit from another within a single day it uses a code made from your network address and a secret that we change every day and then destroy, so we cannot recognise you from one day to the next or turn the code back into an address. We use the figures to see which pages help visitors and to fix the ones that do not. We do not sell them and do not share them. If your browser sends a Do Not Track signal, the counter does not run. The individual records are deleted after 90 days; only totals are kept. Because we cannot link the figures to you, we may not be able to find your records if you ask; you can still write to [email protected] about this notice.
We also run a simple visit counter (page views and time on page) so we can see which pages are being read. It does not use cookies; it stores a random, non-identifying id in your browser so a return visit is not double-counted, and it respects your browser's Do Not Track setting. It does not build an advertising profile and nothing is sold or shared with a third-party advertiser.
When you contact us
The enquiry form on the contact page composes a message in your own email client; it is sent by you, from your own address, and only when you choose to send it. When you write to us, we receive whatever you choose to include, typically your name, your contact details and your enquiry.
We use that information only to reply to you and, if you have asked to register interest, to contact you about the matter you registered for. We do not sell contact details and we do not add you to marketing lists you have not asked for. If you want your correspondence deleted, ask and we will delete it.
Chat. If you use the chat on this site you are talking to an AI assistant, not a person. What you type is sent to Anthropic, which provides the AI, outside the UAE, and we keep the conversation so a person can follow up. Please do not share passwords or payment details.
Hosting
We host this site ourselves, on a Hetzner server in Helsinki, Finland, with Cloudflare at the edge, which processes standard technical data (such as IP addresses in server logs) as necessary to deliver web pages securely. We do not use that data to identify visitors. Our servers keep a security log of each request (your IP address, country, browser type, the page requested and the page you came from) for 7 days, then delete it. Helsinki is outside the UAE: by using the chat or sending a form you consent to your data being processed there, and you can withdraw consent at any time by email. We keep chat conversations, and any message you leave through the chat, for 90 days and then delete them.
External links
The site links to external websites, including palvineyards.com, theworksholdings.com and drinkaware.co.uk. Those sites have their own privacy practices, which we do not control.
Your rights
If you are in the United Kingdom or the European Union, you have rights over personal data we hold about you, including access, correction and erasure. To exercise them, write to [email protected].
Changes
If this statement changes, the new version will be published on this page with a new date.