Privacy policy

1. About This Privacy Policy

Whisky-Online Ltd ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, store and protect your personal data when you:

• Visit our websites;
• Create an account;
• Purchase products from us;
• Sell items to us;
• Contact us;
• Subscribe to our marketing communications; or
• Otherwise interact with our business.

Please read this Privacy Policy carefully to understand how we use your personal information and your rights under applicable data protection laws.

2. Who We Are

Whisky-Online Ltd is the data controller responsible for your personal data.

Registered Office:
Unit 15 Cropper Close
Whitehills Business Park
Blackpool
FY4 5PU
United Kingdom

Company Number: 05974614

Telephone: +44 (0)1253 620376

Email: info@whisky-online.com

3. The Personal Data We Collect

Depending on how you interact with us, we may collect:

Identity Data

• Name
• Date of birth
• Username
• Copies of identification documents where required

Contact Data

• Billing address
• Delivery address
• Email address
• Telephone number

Financial Data

• Payment information
• Transaction records

We do not store full payment card details. Payments are processed securely by our payment service providers.

Transaction Data

• Products purchased
• Orders placed
• Delivery information
• Returns and refunds
  

Technical Data

• IP address
• Browser type and version
• Device information
• Time zone settings
• Operating system

Usage Data

• Information about how you use our website
• Pages viewed
• Search history on our website
• Website interaction data

Marketing Data

• Marketing preferences
• Subscription status
• Email engagement data

4. How We Collect Personal Data

We collect personal data when:

• You create an account;
• Place an order;
• Subscribe to our newsletter;
• Contact us by email, telephone or post;
• Request a valuation;
• Consign items for sale;
  
• Browse our website;
• Interact with our marketing communications.

We also collect information automatically through cookies and similar technologies. Please see our Cookie Policy for further information.

5. How We Use Your Personal Data

We use your personal data to:

Fulfil Contracts

• Process orders
• Deliver products
• Process payments
• Manage customer accounts
• Provide customer support
  

Comply With Legal Obligations

• Verify age where required
• Prevent fraud
• Comply with tax and accounting obligations
• Comply with regulatory requirements

Pursue Legitimate Business Interests

• Improve our websites and services
• Analyse website performance
• Protect our business against fraud and misuse
• Maintain records of transactions
• Respond to customer enquiries

Marketing

Where permitted by law, we may send you information about products, services, offers and events that may be of interest to you.

You may unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us.

6. Shopify

Our online store is hosted by Shopify.

When you visit our website or make a purchase, certain personal information may be processed by Shopify to provide ecommerce functionality, payment processing, fraud prevention, website analytics and related services.

Shopify may process information in countries outside the United Kingdom. Shopify's processing activities are subject to appropriate safeguards designed to protect personal data.

For more information, please refer to Shopify's Privacy Policy.

7. Klaviyo

We use Klaviyo to manage email marketing communications and customer engagement.

If you subscribe to our marketing emails, information such as your email address, purchase history, website interactions and email engagement may be processed through Klaviyo to help us personalise communications and improve our marketing activities.

You may unsubscribe from marketing emails at any time.

8. Sharing Your Personal Data

We may share your personal data with:

• Delivery and logistics providers;
• Payment processors;
• Shopify;
• Klaviyo;
• IT and website service providers;
• Professional advisers;
• Insurers;
• Auditors;
• Regulatory authorities;
• Law enforcement agencies where required by law.

We do not sell your personal data.

9. International Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements;
• UK Addendum to the EU Standard Contractual Clauses;
• Adequacy Regulations approved by the UK Government; or
• Other lawful transfer mechanisms.

10. Data Security

We have implemented appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.

Access to personal data is restricted to those who require it for legitimate business purposes.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

In particular:

• Customer transaction records are generally retained for at least six years for tax and accounting purposes.
• Marketing records are retained until consent is withdrawn or the data is no longer required.
• Account information may be retained while your account remains active and for a reasonable period afterwards.

We may retain information longer where required by law or for the establishment, exercise or defence of legal claims.

12. Your Rights

Under UK data protection law, you may have the right to:

• Access your personal data;
• Correct inaccurate personal data;
• Request deletion of personal data;
• Restrict processing;
• Object to processing;
• Request data portability;
• Withdraw consent where processing is based on consent.

To exercise your rights, please contact us at info@whisky-online.com.

We may require proof of identity before responding to requests.

13. Complaints

If you have concerns regarding our use of your personal data, please contact us first so that we can attempt to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, regulatory guidance, technology or our business practices.

The latest version will always be available on our website.