1. Introduction
Our Privacy Policy provides information about the information which we collect and how we manage it. For the purposes of this policy ‘we’, ‘us’ and ‘our’ refers only to Edinburgh Whisky Blog and the Data Controller within the company. If you have any concerns about how your data is managed or stored, please email edinburghwhisky@gmail.com.
2. Who is responsible for your data
To facilitate the delivery of our products and services Edinburgh Whisky Blog is responsible for customer data. We can be contacted via email at edinburghwhisky@gmail.com.
3. Personal data we collect about you
We collect personal data for a variety of purposes as outlined within section 3. You will provide much of this data to us directly by completing online forms or by communicating with us but we also gather some data via the digital interactions that you have with us.
a) Name and contact details (email address, telephone number, your city and country):
- When you buy products from our website (http://www.edinburghwhiskyblog.com).
- When you choose to receive marketing communication.
- When you provide us with feedback or submit an enquiry.
b) Interests – When you choose to provide it for marketing personalisation.
c) Dietary and special needs requirements – When you choose to provide it when booking an event.
d) Information about other guests on your booking – When you provide them on behalf of others as part of making an event booking.
e) The correspondence that you have with us (e.g. emails, letters, calls) – When you contact us or we contact you.
f) Your location – When you make a booking.
g) Information about how you use our websites including IP address and Google Analytics – When you browse our website.
Special category personal data:
The GDPR definition of sensitive personal data includes data relating to health and religious beliefs. As a result of you telling us that you have an allergy or a specific dietary requirement you may reveal medical conditions or religious beliefs. Sensitive data will only be processed in order to deliver the products and/or services that you purchase from us.
4. How and why we use your personal data
We use your personal data to provide the following services:
a) To deliver your event bookings. When you book with us we will use your information to confirm your booking and any payments you have made and to send a follow up email for your feedback.
b) To deliver products that you purchase. When you buy from our online store, we will use your information to deliver your purchases, confirm your order and payments you have made and to send a follow up email for your feedback.
c) To keep you informed of our products, services, offers and promotions. We may send you marketing communications about our products and services unless you have indicated that you don’t want to receive these. We will monitor opens / clicks and offer redemption on marketing emails to assess engagement.
d) To personalise and improve your customer experience. We may use your personal data in order to tailor our services to your needs and preferences and to provide you with a personalised customer experience.
e) To optimise the performance of our website. We may also collect information on how you use our website including the pages that you visit and the search criteria that you perform in order to optimise the performance of the website and personalise content that you see.
f) To meet our legal obligations. We are required to keep certain records for legal reasons – for example invoices that we issue. We will keep and use this data in line with our legal requirements.
g) For market research and to deliver business insight to help us ensure that our products and services remain relevant.
5. Sharing your personal data
We are reliant on a number of 3rd party providers in order to provide our products and services. Where this is the case we will remain in control of the data and we will ensure that the 3rd parties comply with high security standards for the protection of your personal data and the data will only be for our purposes. Our 3rd party providers include:
Website hosting company: DHosting (www.dhosting.pl).
Legal authorities and legal advisors.
We will also share your name and address details with our delivery partners in order to transport the product that you have ordered.
6. The legal basis for processing your data
We rely on the following reasons for using your data:
a) Compliance with a legal obligation and/or regulatory authority.
b) Performance of a contract, in order to deliver the service that we have agreed to provide you with (such as an event booking).
c) Legitimate Interest, in order to improve customer experience and develop our products and services.
d) Consent, where you have specifically consented to us using the data.
7. Retention and security of your data
We will only retain your personal data for as long as is necessary. This duration will depend on the type of data and the reason for processing it.
For example:
We will view consent to receive marketing communication as revoked if the marketing communication hasn’t been engaged with (opened or clicked) within 13 months.
We will ensure that we use appropriate technical and organisational security measures in order to ensure that your data remains secure. These measures include internal policies and staff training, and appropriate contracts with 3rd party suppliers.
8. Your rights
You have certain rights in relation to the personal information we hold about you. Some of these rights only apply in certain circumstances. In order to exercise these rights please contact us using the contact details below. Please note that we will require proof of identity as part of this request and most rights are subject to limitations and exceptions. We will provide reasons if we are unable to comply with any request for the exercise of your rights.
a) Right of access. You have the right at any time to ask us for a copy of the data that we hold about you and how it is used.
b) Right of correction or completion. If the data that we have collected is inaccurate you have the right to update it.
c) Right of erasure. In certain circumstances, you have the right to request that Information we hold about you is erased. This usually applies if the data is no longer necessary for the purpose that it was collected for, or you withdraw your consent for its processing and request its erasure.
d) Right to object to or restrict processing. If you wish to challenge our need to process your data on legitimate interest grounds or if you wish to withdraw your consent.
e) Right of data portability. You have a right to request that we transfer your data to another data processor.
9. Cookies
Like many other businesses we use cookies on our website. Cookies are small pieces of information that are stored on your computer or mobile device that record how you use the site. For more detailed information on how we use cookies, please review our Cookies Policy below.
10. Updates to our Privacy Policy
We may make changes to this Privacy Policy occasionally, and when we do we will publish the updated version on our website.
11. Contact information
If you have any questions about this policy or how your data is processed, please contact us via email at edinburghwhisky@gmail.com. You can unsubscribe from our marketing communication at any time by clicking the unsubscribe link at the bottom of any of our marketing communications. Alternatively you can email your wish to unsubscribe to edinburghwhisky@gmail.com.
Should you have any concerns about this policy or the way that we are processing data you have the Right to Lodge a Complaint with the Information Commissioner’s Office. Please look at www.ico.org.uk for more detail.
This policy was last updated on June 28th 2020.
Cookies Policy
Where services are delivered on the internet, this sometimes involves placing small amounts of information on e.g. your computer or mobile phone. Cookies are used to improve services for you through, such as analysing anonymised data to help us understand how people interact with our website services so we can make them better.
1. Opting out of cookies
We won’t use cookies to collect personally identifiable information about you. However, if you wish to restrict or block the cookies which are set by our website, or indeed any other website, you can do this through your browser settings. The ‘Help’ function within your browser should tell you how to do this. Alternatively, you may wish to visit the About Cookies website, which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your computer, as well as more general information about cookies.
2. Here is a list of the main cookies set by Edinburgh Whisky Blog and what each is used for:
a) Google Analytics
These cookies are used to carry out statistical analysis of page use, interactions and user paths. We use this to understand how our website is being used and to improve the user experience. User data is anonymous.
b) Social networking tools
On some pages, we feature embedded ‘share’ buttons or widgets that enable you to share content with friends through a number of popular social networking sites (e.g. Facebook, Twitter, Instagram etc). These sites may set cookies which can identify you personally when you are also logged in to their services. This means they may be collecting information about what you are doing all around the internet, including on the Edinburgh Whisky Blog website. We do not control these cookies and you should check the relevant third-party website to see how your information is used and how to opt out.
c) External web services
Sometimes, we embed photos and video content from websites such as YouTube. As a result, when you visit a page which features such content, you may be presented with cookies from these websites. As with the social networking tools above, we cannot prevent these sites or domains from collecting information on your use of this content. If you are not logged in to their services then they will not know who you are but may still gather anonymous usage information (e.g. number of views, plays, loads etc). We do not control these cookies and you should check the relevant third-party website for more information about them and how you can opt out.
To opt out of social networking tools or external web services collecting any data regarding your interaction on our website, please refer to their websites for further information.
