Introduction
The Whisky Dispatch ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use and safeguard information when you visit this website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
The data controller responsible for the personal data collected through this website is The Whisky Dispatch Editorial Team, London, United Kingdom. Enquiries relating to data protection may be sent via our Contact page.
Personal Data We Collect
We collect only the personal data strictly necessary to operate this website:
- Contact form data: the name, email address, subject and message you submit when writing to us.
- Cookies and similar technologies (see our Cookie Policy).
- Aggregated analytics data (only where you have consented).
Lawful Basis for Processing
We process personal data on the following lawful bases under Article 6 of the UK GDPR:
- Consent (Article 6(1)(a)) — for optional cookies and analytics.
- Legitimate interests (Article 6(1)(f)) — for the operation and security of the website.
- Contract or pre-contractual steps (Article 6(1)(b)) — where you contact us with an enquiry.
Purposes of Processing
Personal data is processed to respond to enquiries submitted through the contact form, to operate and secure the website, and — where you have consented — to understand how visitors use the portal so that we may improve it.
Third-Party Processors
We may use analytics providers such as Google Analytics to understand aggregated site usage, only where you have granted consent. Any such providers act as data processors on our behalf and process personal data only in accordance with our instructions and applicable law.
Your Rights Under the UK GDPR
You have the following rights under Articles 15 to 21 of the UK GDPR:
- Right of access (Article 15) — to obtain a copy of your personal data.
- Right to rectification (Article 16) — to have inaccurate data corrected.
- Right to erasure (Article 17) — to have your personal data deleted in certain circumstances.
- Right to restriction of processing (Article 18).
- Right to data portability (Article 20).
- Right to object (Article 21) — including to processing based on legitimate interests.
You may exercise any of these rights by contacting us. We will respond within one month.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the United Kingdom's independent authority set up to uphold information rights. Their website is ico.org.uk.
Data Retention
Contact form submissions are retained for no longer than twelve months from the date of the last correspondence, unless a longer period is required by law. Analytics data is retained in accordance with the retention settings of the provider used and never for longer than twenty-six months.
Contact for Data Protection Enquiries
All questions relating to this Privacy Policy or to your personal data may be addressed to the editorial team through our Contact page.