Privacy Policy
As a company operating in the United Kingdom, we are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This privacy policy explains what information we may collect about you, how we collect, use, and store it and the steps we take to protect your personal information when you interact with our spirits brand. We also outline your rights in respect of your personal data.
We are committed to safeguarding your privacy and ensuring your personal data is handled responsibly and transparently.
Who We Are
Welsh Shepherd Spirits Limited is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at info@welshshepherdspirits.com.
Information We Collect
- Personal identification details, including your name, postal address, email address, age verification (required by law for alcohol purchases), and phone number.
- Payment information necessary to process your order. Payments are handled by a third-party payment processor (Square); we do not collect or store your full card details ourselves.
- Purchase history and preferences.
- Website usage data collected via cookies and analytic tools.
How We Use Your Information
- Process and fulfil your orders, including delivery and invoicing.
- Verify your age before completing an alcohol purchase, as required by law.
- Provide customer service.
- Improve our products and services.
- Send relevant marketing communications, where you have given your consent.
- Prevent fraud and maintain the security of our website.
We may also use anonymised data for analytical purposes to better understand customer trends.
Please note: Providing age verification information is a legal requirement. We are unable to process your order without it.
Sharing Your Information
We do not sell your personal information to third parties.
We may share your data with trusted third-party service providers who assist us with:
-
Payment processing (Square)
-
Order fulfilment
-
Website hosting (Wix)
-
Accounting (QuickBooks)
-
Marketing services where applicable
All partners are required to adhere to data protection laws and our privacy standards.
International Data Transfers
Some of our service providers may process or store personal data outside the UK or European Economic Area (EEA), including the United States.
Where this occurs, we ensure appropriate safeguards are in place, such as:
-
The UK International Data Transfer Agreement (IDTA)
-
UK Addendum to the Standard Contractual Clauses
-
The UK-US Data Bridge where applicable
These safeguards help ensure your personal information receives an equivelant level of protection under UK GDPR.
How Long We Keep Your Data
We only retain personal data for as long as necessary to fulfil the purposes it was collected or where required by law.
Generally:
Website usage data collected via cookies is retained according to the cookie durations set out in our Cookies Policy Below.
Marketing information and communications data are retained until you withdraw your consent, unsubscribe, or after a reasonable period of inactivity.
Website usage data collected via cookies is retained according to the cookie durations set out in our Cookies Policy Below.
- Order and transaction records are retained for 6 years to comply with HMRC record-keeping requirements.
- Age verification records are retained only for as long as necessary to demonstrate compliance with licensing requirements.
Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Contract - to process and fulfil your orders.
- Legal Obligation - to comply with licensing laws, age verification requirements and tax legislation.
- Consent - for marketing emails and newsletters (you can withdraw your consent at any time).
- Legitimate Interests - to improve our services, maintain website security and prevent fraud.
Automated Decision-Making
We do not currently use automated decision-making or profiling that produces legal or similarly significant effects on you.
Data Security
We employ industry standard security measures to protect your data from unauthorised access, alteration or disclosure. Our systems are regularly reviewed to maintain appropriate security and protection of your personal data.
Your Rights
- Access your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data (the right to be forgotten).
- Restrict or object to the processing of your data.
- Request the transfer of your data to another organisation.
- Withdraw consent at any time where processing relies on consent.
- Not be subject to automated decision-making.
Making a Complaint
Privacy Policy Amendments
Welsh Shepherd Spirits Limited
Company No: 8045923
Registered Office: Gwernaffel Farm, Knighton, POWYS. LD7 1SE.
ICO Registration Reference: C1977136