i) When attention is drawn to the benefit of a money back or replacement guarantee (however expressed) and no limit is placed in the advertisement upon the period during which such a guarantee is to be effective. In such a case the Member should be prepared to make a refund at any reasonable time, having regard to the nature of the product.

ii) When the customer expresses a wish to be reimbursed because of delay beyond 28 days (see 5(i) below) in the fulfilment of the order.

iii) When, for whatever reason, the product received by the customer does not conform to the Member's description, or the Member is in breach of any published terms of business. In such cases the customer will not be expected to bear the cost of return postage or carriage.

i) All mail order offers and customer recruitment advertising will indicate the period within which the Member undertakes to fulfil orders. This period should not be greater than 28 days, except obviously, when wines 'en primeur' are offered for delivery at a mutually agreed later date. The terms of such offers will be made clear to customers.

ii) If it becomes clear that an order cannot be fulfilled within the period stated in the offer, the Member will offer, with the customer's permission, a substitute of at least equal value, or offer a refund. If the customer then elects to wait, he/she should be given a firm date for despatch.

i) European Union transactions.

Members operating within the European Union operate under the Distance selling Directive (97/7/EU) as implemented in member states via regulations. This Directive gives customers the right to cancel any order within 7 days of physical delivery and receive a full refund of the original selling price including delivery charges.

In these cases the customer must inform the Member of the cancellation and return the goods to the Member untouched, in their original packaging and at their own expense.

Members transacting distance selling business within the EU will operate within this Directive and may, at their own discretion, extend these cancellation rights by, for example, extending the right beyond 7 days or by meeting some or all of the expense of returning the goods.

i) Members will take all reasonable steps to ensure that their lists are accurate and up-to-date, that they avoid duplication of mailings to the same name and address, and that prompt action is taken, upon customer request, to correct personal information.

ii) All Members should be able to identify those individuals on their mailing list who have objected to them regarding the use of their data. Members who make their lists available to third parties should be able to identify individuals who have objected to their personal information being used in such a way, or who have not been given an opportunity to object.

iii) Members who rent their lists to third parties will satisfy themselves that the use to which their list is put, and any literature used in the promotion, conforms to national and international data protection laws and codes of practice.

iv) Members holding databases and/or using rented-in lists will respond promptly to requests from individuals for suppression of any of their personal information.

v) Requests made by individuals to receive no further promotional mailings from a Member company will meet with immediate compliance.

vi) Members will maintain records which permit official requests from the appropriate data protection authority for the source of mailing lists to be identified, in order that such information can be supplied promptly on request.

vii) Personal information will at all times be held securely and safeguarded against unauthorised use, disclosure, alteration or destruction.

i) The Member or the data user (if they are different) should ensure that the general purpose for which personal information, including an individual's name and address is being supplied should be transparently clear at the time that such a request is made. The notification should also identify the data user of any significantly different use for which the personal information might be used, and any intended disclosure to other companies including those associated with or forming part of the same group, where such a relationship is either not obvious or not generally known.

ii) The extent to which an individual can be expected to recognise associations which exist, for example, between Member companies within the same group, should be considered carefully before personal information is used by the group as a whole.

iii) Members obtaining personal information through direct response advertisements and direct mail may use such information to make follow-up offers, except where specifically excluded by a subsequent suppression request.

iv) When it is proposed to use personal information for a purpose significantly different from that for which it was originally collected, the individuals should be informed by the Member and given an opportunity to object. A period of not less than thirty days should be allowed for such objections before personal information is used or disclosed for a purpose significantly different from that originally intended.

v) Members using and supplying lists are responsible for ensuring that the lists they use or make available do not include individuals who have objected to the use of their names.

vi) Members should take particular care in using sensitive personal data (including race, political opinions, religious and other beliefs, physical and mental health, specific salaries and investments, sexual orientation and criminal convictions) so as to avoid causing offence or harm to individuals. They should also, where appropriate, seek the prior permission of individuals to the use of sensitive personal data.

vii) Published personal information which falls within the public domain can be used without informing the individuals concerned in advance, provided that such information is not used if the individuals are listed on the Suppression File.

i) Notification of the death of an individual held on a Member's mailing list should be acted upon as soon as possible to stop all future mailings. The list user should also, in appropriate cases, promptly refer the notifier of the death to the appropriate mailing control service.

i) Members renting lists should use their best endeavours to ensure that the category of individuals is not inappropriate to the product or service on offer, particularly where there are specific criteria (e.g. age or income) which must be satisfied.

ii) In order to ensure that rented lists contain the latest corrections and suppressions, the interval between the date of supply of the list and the date of mailings should preferably be no longer than three months, but should not exceed six months unless suppressions and/or corrections have been incorporated.

iii) If individuals included on a list request the list user to refrain from further mailings, their names should be suppressed from that and, if possible, any subsequent lists rented-in.

iv) If individuals included on a rented list request corrections to inaccuracies in their personal data, the Member should inform the list owner within sixty days.

i) Members renting out their lists should ensure that prospective list users:

a) give an assurance to observe the requirements of the data protection codes, both in their general and specific rules.

b) satisfy them that the form and content of the intended mailing conforms with the general requirements of the principles.

c) either return the list to the supplier or incorporate suppressions and/or corrections, if the distribution of the mailing is delayed by more than six months.

d) pass back to them all requests for corrections to an individual's data within sixty days.

ii) Members and their list brokers should ensure that any consumer list offered for rental will not be used unless it is run against the Suppression File.

iii) Members should hold records to demonstrate compliance with the requirements of the principles with regard to list rental, and make these available, upon request, to the authorities controlling advertising and data protection standards in the countries with which they trade.

* advertisements in newspapers, magazines and other printed publications;

* advertisements on viewdata and Internet services; and to

* advertising material such as brochures and leaflets, whether these are mailed or delivered directly, or reach their public as inserts in newspapers or other publications, through distribution in shops or at exhibitions, or in other ways.

Advertisements should be socially responsible and should not encourage excessive drinking. In particular, they should not exploit the young, the immature, or those with mental or social incapacities.

i) Provide easy to use, secure, payment mechanisms, and will give clear information on the level of security such mechanisms afford.

ii) Ensure that a security policy for their systems has been developed and reviewed

iii) Identify an individual who is responsible for the security of the Company's systems. His/her responsibilities should include:

iv) Scheduled reviews of the security system

v) Ensuring that changes to the system (including maintenance and disposal of component parts of the software and hardware) are made in a secure manner

vi) Ensuring that security-critical changes recommended by the supplier of the system or any of its components are made in a secure and timely manner.

vii) Assure the integrity and confidentiality of transactions, and information about such transactions, whether stored in computers or in transit across networks and against both internal and external threats and abuse.

viii) Ensure that contracted third parties involved in the fulfillment of a transaction maintain an equivalent level of security in respect of transactions and information about such transactions.

ix) Ensure that any contracting third party operating part of the service, operates in accordance with the requirements of the code.