How long we retain your information
We will retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Disclosures of your information
We may need to share your information with various third parties which provide services to us or act on our behalf in connection with the operation of our business. In particular, your information may be disclosed to the following categories of third parties:
Other entities in our corporate group.
Professional advisers (including legal advisers and financial advisers), auditors, insurers, bankers, and financial organisations.
Other third party service providers which provide services to us in connection with the operation of our business, including but not limited to: IT and system administration services and other technical services; website development services; data storage services; digital marketing and email deployment services; distillery experience booking services; customer fulfilment services; logistics, distribution and delivery services; data analytics services; fraud prevention and credit reference services; and payment processing and receipt processing services.
Trade associates and business partners.
Third parties with whom we may enter into negotiations in respect of a commercial agreement, e.g. joint business venture.
Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets.
HM Revenue & Customs or any other public authority or regulatory authority in circumstances where we are required to disclose personal information by law.
We require all third-party service providers to respect the security of your personal information and to treat it in accordance with the law. We do not permit our third-party service providers to use your information for their own purposes and only permit them to process your information for specified purposes and in accordance with our instructions.
Your legal rights in relation your information
Under the GDPR, you have a number of legal rights in relation to the personal information which we hold about you. We respect your legal rights in relation to your information and aim to uphold your rights in everything we do. Your legal rights under the GDPR include the following:
Subject access right – You can ask us to provide you with a copy of the personal information which we hold about you and a description of how we use your information.
Right to rectification – If you believe any information we hold about you may be inaccurate or incomplete, you can require us to rectify these inaccuracies.
Right to erasure / Right to be forgotten – You can require us to erase your information in certain circumstances. However, please note that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Right to data portability – Where we process your information using automated means of processing on the basis of your consent or for the purposes of performing a contract with you, you can request that we supply such information to another party in a machine-readable format.
Right to restriction of processing – You can require us to restrict or suspend our processing of your information in certain limited circumstances.
Right to object to processing – Where we process your information on the lawful basis that such processing is necessary for the purposes of our legitimate interests, you have the right to object to us processing your information in certain circumstances.
Right to object to processing for direct marketing purposes – You have the right to object at any time to the processing of your information for direct marketing purposes. If you object to us processing your information for direct marketing purposes, we will no longer process your information for such purposes.
Right to withdraw consent – If we process your information on the basis of your consent, you have the right to withdraw your consent at any time to the processing of your information. However, please note that this will not affect the lawfulness of any processing of your information carried out before you withdraw your consent.
How to contact us
Please get in touch if you have any questions about how we use your information, or you wish to contact us about your legal rights or if you have any complaints or feedback about our use of your information. Please contact us at any time by sending an email to us.
If you wish to submit a complaint or express any concerns about our use of your information, please contact us in the first instance. We will do our best to resolve your complaint or address your concerns to your satisfaction. However, if you feel that we have not resolved your complaint or addressed your concerns, please note that you have right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues.
Please note that we may update this privacy notice at any time. Any changes to this privacy notice will be posted on our website, and where appropriate, notified to you by email.
