Privacy Policy
Last Updated: 28th July 2022.
This page sets out the details of Dunnet Bay Distillers Ltd’s Privacy Policy in relation to information collected about you.
Who We Are
In this Privacy Policy, references to “we”, “us” and “our” are to Dunnet Bay Distillers Ltd, and references to “our website” or “the website” are to www.stannergill.co.uk
Our registered address is:
Dunnet Bay Distillery,
Dunnet,
Thurso,
Caithness,
Scotland,
KW14 8XD.
Our Company Registration Number is: SC454474, Dunnet Bay Distillers Ltd.
We process personal data in line with our obligations under the current data protection law (“Data Protection Law”) in the United Kingdom which is applicable from 25th May 2018.
What Information Do We Collect About You?
We collect the personal data that you may volunteer as part of tour bookings, online purchases, Membership Schemes or donation forms, e-Newsletter sign-up, and visitor surveys.
Personal information we collect may include (but will not be limited to):
- Your name, title, gender, and date of birth.
- Postal address, e-mail address and telephone number.
- Family and spouse/partner details, relationships to other Donors and/or Members (“supporters”).
- Current interests and activities.
We will also collect and hold information about any contact you have with us as a customer, visitor, and Members and Supporters of Stannergill Whisky and Castletown Mill, and may consist of details of:
- Competitions.
- Contact preferences.
- Details of correspondence sent to you or received from you.
- Free Wi-Fi log-in.
- Purchases from our online shop.
- Tour bookings and event registration/attendance.
- Purchases from our online shop.
- Where relevant, selected media coverage.
- Any other information provided by yourself at the request of Dunnet Bay Distillers Ltd.
We also collect data that you may volunteer when you make an online purchase, and may include:
- Data recorded by our website which allows us to recognise you and your preferred settings, which saves you from re-entering information on return visits to the site. Such data is recorded locally on your computer using cookies (see our Cookies Policy). Most browsers can be programmed to reject, or warn you before downloading cookies, information regarding this may be found in your browser’s “Help” facility.
- Information to effectively process credit or debit card transactions, it may be necessary for the bank or card processing agency to verify your personal details for authorisation outside the United Kingdom or European Economic Area (“EEA”). Such information will not be transferred out of the United Kingdom/EEA for any other purpose.
- Your IP Address, which is a string of numbers unique to your computer, which is recorded by our web server when you request any page or component on the website. This information is used to monitor usage of our website.
Your preferences and use of e-mail updates recorded by e-mails we send you if you select to receive e-mail updates on products, services and offers.
When we ask you to provide your personal information, we will let you know why we are asking, and how we will use your data, by directing you towards this Privacy Policy.
What Do We Do With Your Information?
Depending on your relationship with Dunnet Bay Distillers Ltd, and the preferences you have indicated, data we hold may be used by us for the following purposes:
- In certain cases, we may use your e-mail address to send you information on our other products and services. We will usually rely on your consent when sending you this information, but we may occasionally rely on our legitimate interest (to keep you informed of our products and services) to send you such information where appropriate.
- To process your order, to provide after sales service (we may pass your details to another organisation to supply/deliver products or services you have purchased and/or to provide after-sales service), and to provide Member or Supporter services. This processing is necessary to fulfil the contract that you have with us.
- To send you promotional or marketing information by post, telephone, or electronic means.
Again, we will usually rely on your consent when sending you this information, but we may occasionally rely on our legitimate interest (to keep you informed of our products and services) to send you such information where appropriate. These types of communications can include:
- Data screening and cleansing, to check if we have accurate contact details for you (see the “How We Update, Screen & Analyse Your Information” section of this Privacy Policy). This processing is carried out based on our legitimate interest (e.g., to ensure we have accurate information about you).
- Information on our products and/or activities relating to Stannergill Whisky and Castletown Mill, such as exhibitions, special events, and/or retail offers.
- Information on our events, including occasional targeted invitations to consider attending an event at Castletown Mill, or to ask you to consider supporting us in other ways.
- News and updates about Stannergill Whisky and Castletown Mill, via marketing and/or supporter e-Newsletters.
- Other relevant communications based upon your relationship or supporter status with Stannergill Whisky, Castletown Mill and/or Dunnet Bay Distillers Ltd.
To send you surveys, and for market research purposes.
This processing is carried based on our legitimate interest (e.g., ensuring that our products and services are the best they can be, and ascertaining how we can improve them).
Tools may be used to monitor the effectiveness of our communications with you, including e-mail tracking, which records when an e-Newsletter from us is opened and/or how many links are clicked within the message. The data from this tracking is generally used in an aggregated and anonymised form. We rely on our legitimate interest when carrying out this processing (i.e., ensuring we communicate effectively with you).
We may also process your personal data where we are under a legal or regulatory obligation to do so, for example, where we are ordered by a supervisory authority or court to do so, or where we are specifically required to do so under Data Protection Law.
How We Update, Screen & Analyse Your Information?
We continuously review records of our supporters to ensure your data is as accurate as possible. We may consult alternative sources in order undertake these checks, such as:
- BT Operator Services Information System (OSIS).
- Royal Mail National Change of Address database (NCOA).
- Newspaper articles, publications, and company websites.
- Any other publicly available sources.
We may segment the information we hold about you in our database based on an engagement score. These scores are calculated using personal data, as well as how engaged with us you have previously been, and indicators of future engagement. Analysis of this helps us understand our supporters to ensure we are efficient and that only relevant communications are sent to you.
You can opt-out of your data being utilised for data cleaning or analysis (with the aims of targeting communications with you appropriately, or finding up to date contact information in the case of gone away mail) simply by contacting [email protected]
Who We Might Share Your Information With?
We do not disclose personal data to any third-parties or external organisations, other than data processors carrying out work on our behalf. Such data processors include our mailing houses (e.g., for the sending of event invites, or bulk e-mail distribution services), IT service providers (e.g., IT platform providers, web hosting providers, website management providers), credit/debit card issuers and payment services providers (in order to process your payments), governmental/regulatory and law enforcement bodies, and where necessary our professional advisors (e.g., lawyers and accountants, website management company and marketing consultants). Any such companies are acting as approved data processors for Dunnet Bay Distillers Ltd, and we retain full responsibility for your personal data. Data processors will act only on our instructions.
We may need to transfer your personal information to countries out with the United Kingdom or European Economic Area (EEA) where our services providers are based in a non-UK or non-EEA country. We will only transfer your personal data to a country outside of the United Kingdom or EEA where:
- Such countries provide for an adequate level of personal data protection.
- Where we have in place a valid data transfer agreement with the non-UK/non-EEA data recipient (such as the EU Commission Standard Contractual Clauses, or contractual clauses approved by the relevant authorities in the United Kingdom).
- Where we are otherwise permitted to make the transfer under Data Protection Law.
Currently, we may transfer your personal data outside the United Kingdom/EEA to our:
- Bulk mail distributor (Mailchimp), which is based in the United States of America.
- Online booking system provider.
- PayPal payment processing.
- Stripe payment processing.
- Web hosting provider.
We ensure that any transfers of personal data are made securely, in accordance with best practice, and in compliance with Data Protection Law. Your data will never be sold or passed to any third-party for any other purpose.
How We Keep Your Information Secure?We have implemented security procedures, rules, and technical measures to protect the personal data that we have under our control from:
- Improper use or disclosure.
- Unauthorised access.
- Unauthorised modification.
All our employees and data processors, who have access to, and are associated with the processing of personal data, are legally obliged to respect the confidentiality of our visitors’ and supporters’ personal data.
We will retain personal data for as long as necessary for the purpose for which that data was collected and to the extent permitted by applicable laws. When we no longer need to use personal data, we will remove it from our systems and records and/or take steps to anonymise it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject).
Website Security
Although we will do our best to protect your personal data, please recognise we cannot guarantee the complete security of your data transmitted to us electronically, any transmission is at your own risk.
All payment transactions on our website are performed using a secure server with 128-bit SSL encryption. Transactions are made on our behalf by PayPal and Stripe.
We do not store any financial information i.e., debit/credit card details on our website.
What Rights Do I Have In Relation To My Information?
You have the following rights in relation to your personal data:
- To obtain confirmation from us of whether your personal data is being processed.
- To request a copy of your personal data processed by us.
- To ask us (in certain circumstances) to correct, amend, or delete that information where it is inaccurate, is no longer required for the purpose for which it was processed or has been processed in violation of Data Protection Law.
- To obtain restriction of processing of your personal data in certain circumstances.
- To receive a copy of your personal data in a structured, commonly used, and machine-readable format, and have that data transferred to a chosen third-party in certain situations.
- To object to our processing of your personal data where the processing is carried out to achieve our legitimate interests (or those of a third-party).
If we rely on your consent (or explicit consent) as a legal ground for processing personal data, to withdraw that consent at any time. - If we determine that access to personal data cannot be provided in any instance or another right cannot be complied with, we will provide you with an explanation of why we have made that determination and a contact point for any further enquiries.
If you would like to exercise any of your rights, or you have any questions or complaints about the way in which we have processed your data, please contact our Data Protection Officer by post at Dunnet Bay Distillery, Dunnet, Thurso, Caithness, Scotland, KW14 8XD or by e-mail on [email protected]
If you are still unsatisfied with our response, or the way in which we have processed your data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) – Scotland. The ICO can be contacted using the following details:
The Information Commissioner’s Office – Scotland,
45, Melville Street,
Edinburgh,
Scotland,
EH3 7HL.
Telephone: 0303 123 1115
E-mail: [email protected]
Cookies
To make the Stannergill Whisky website easier to use and improve our service, we sometimes place small amounts of information on your computer. These are known as cookies, and they are used by most major websites. You can find out more about our Cookies Policy here.
Other Website
This Privacy Policy only covers this website. Any other websites which may be linked to by our website are subject to their own Privacy Policy.
Changes To Our Privacy Policy
We regularly review our Privacy Policy and may make changes from time to time. Any future changes to our Privacy Policy will be updated here and, where appropriate, e-mailed to you.
Our Privacy Policy was last updated on the date listed at the start of this document.
How To Contact Us
If you have any comments on our Privacy Policy, or a query about the information we hold about you, please e-mail us at [email protected] or call 01847 851287 or write to us at:
Dunnet Bay Distillery,
Dunnet,
Thurso,
Caithness,
Scotland,
KW14 8XD.
Our Company Registration Number is: SC454474, Dunnet Bay Distillers Ltd.
