Titsey Brewing Co is committed to protecting and respecting your privacy.
This policy applies to our customers, website visitors, consumers, distributors, our suppliers (and potential suppliers), personnel of such suppliers and contractors.
• the data identifying you that we collect;
• how we use this data;
• the legal basis upon which we process it;
• how it is stored.
The Policy is comprised of the following sections:
Section 1: Data collection
Section 2: Use of data
Section 3: Cookies
Section 4: Retention of personal data
Section 5: Your rights
Section 6: Marketing
Section 7: Transfers of data
Section 8: Security
Section 9: Third party websites
Section 11: Further questions or making a complaint
- Data collection
You may give us your data in a number of ways, including making a purchase from our online shop, signing up to receive emails from the brewery, following us on social media, entering a competition either online or at an event or by applying for a job at the brewery.
The personal data which you give us may include:
(a) Your name;
(b) Address (Billing and delivery)
(c) E-mail address;
(d) Your telephone number;
(e) Account information;
(f) Your date of birth;
(g) Data provided when you correspond with us
If you are a visitor to our website, it may also include:
(a) Your behaviour on our website (for example, the pages that you click on);
(b) Payment Details;
(c) Order history
- Use of data
We collect, use and store the personal data listed above for the following reasons:
(a) to allow you to access and use our website;
(b) to provide you with the information and services that you request from us;
(c) to ensure the security of our services, our website;
(d) to store information about your preferences, and to allow us to customise our website according to your individual interests;
(e) to recognise you when you return to our website;
(f) to enable you to participate in our competitions and promotions;
(g) to process orders which you place for goods or services from us; and
(h) for improvement and maintenance of our website and preparing reports or compiling statistics in order to improve our goods and services. Such details will be anonymised as far as is reasonably possible and you will not be identifiable from the data collected.
(i) to carry out statistical analysis and market research; and
(j) if you have consented or, otherwise, if it is in our legitimate interests, for business development and marketing purposes, to contact you (including by email or post) with information about our products and services which either you request, or which we feel will be of interest to you (including newsletters), but only where you have consented to this.
(k) For internal corporate reporting, business administration, ensuring adequate insurance coverage for our business, ensuring the security of company facilities, research and development, and to identify and implement business efficiencies.
(l) To comply with any procedures, laws and regulations which apply to us – this may include where we reasonably consider it is in our legitimate interests or the legitimate interests of others to comply, as well as where we are legally required to do so.
(m) If we use your photograph or video footage from an event, to amplify the event to a broader audience and for internal presentation purposes, where it is in our legitimate interests for marketing and business development purposes or where we have your consent.
- Retention of personal data
We keep your personal data for no longer than necessary for the purposes for which the personal data is processed. The length of time we retain personal data for depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights. All data will be reviewed on a regular basis and removed from our records if considered no longer relevant for our purposes.
We are reliant on a number of third party providers in order to provide our products and services. Where this is the case we will remain in control of the data and we will ensure that the third parties comply with high security standards for the protection of your personal data:
- You have made an online purchase – Whether you have bought beer or merchandise through the website, your information (including contact details, Billing and Delivery Address, email address and phone number) is stored online with our e-commerce provider WooCommerce. Banking details are securely processed using PayPaland are not accessible to any members of staff.
- You have agreed to receive marketing information and offers from Titsey Brewing Co – Your name and email address is all that is required to receive our emails. Those details are sent securely to Mailchimp, a web programme which stores and monitors subscribers information. We then work with our marketing agency, The Market Place, to put together newsletters, offer emails and also to monitor individuals responses to newsletters so we can make our messages more focussed on customer needs.
- You follow or have interacted with us on any of our social media platforms (Facebook, Twitter, Instagram) – A record will exist on our online accounts if you have messaged Titsey Brewing Co on any channel and may be used to target future promotions to you.
- Your rights
You have certain rights in relation to your personal data. You have the right to request that we:
(a) Right of Access. You have the right at any time to ask us for a copy of the data that we hold about you and how it is used.
(b) Right of Correction or Completion. If the data that we have collected is inaccurate you have the right to update it.
(c) Right of Erasure. In certain circumstances, you have the right to request that Information we hold about you is erased. This usually applies if the data is no longer necessary for the purpose that it was collected for, or you withdraw your consent for its processing and request its erasure.
(d) Right to Object to or Restrict Processing. If you wish to challenge our need to process your data on legitimate interest grounds or if you wish to withdraw your consent.
(e) Right of Data Portability. You have a right to request that we transfer your data to another data processor.
We will consider all such requests and provide our response within a reasonable period (and in any event any time period required by applicable law). Please note, however, that certain personal data may be exempt from such requests in certain circumstances. If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.
If you would like further information in relation to these or would like to exercise any of them, please contact us by email at firstname.lastname@example.org at any time.
(a) We may collect and use your personal data for undertaking marketing by email, telephone and post.
(b) We may send you certain marketing communications (including electronic marketing communications to existing customers) if it is in our legitimate interests to do so for marketing and business development purposes.
We will however always obtain your consent to direct marketing communications where we are required to do so by law.
If you wish to stop receiving marketing communications, you can simply click ‘unsubscribe’ on any communications you have received.
- Transfer of Data
- Titsey Brewing Co is committed to protecting personal data from loss, misuse, disclosure, alteration, unauthorised access, unavailability and destruction and takes all reasonable precautions to safeguard the confidentiality of personal data, including through use of appropriate organisational and technical measures. Organisational and technical measures include physical access controls to our premises, staff training, and locking physical files in filing cabinets, the use of encryption, passwords for access to our systems and use of anti-virus software.
(b) In the course of provision of your personal data to us, your personal data may be transferred over the internet. Although we make every effort to protect the personal data which you provide to us, the transmission of information over the internet is not completely secure. As such, you acknowledge and accept that we cannot guarantee the security of your personal data transmitted to our website and that any such transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to prevent unauthorised access to it.
(c) Where we have given you (or where you have chosen) a password which enables you to access your online account, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
- Further questions or making a complaint
If you have any queries or complaints about our collection, use or storage of your personal data, or if you wish to exercise any of your rights in relation to your personal data, please contact email@example.com. We will investigate and attempt to resolve any such complaint or dispute regarding the use or disclosure of your personal data
You may also make a complaint to the data protection authority, the Information Commissioner’s Office (ICO) whose contact details are as follows:
Information Commissioner’s Office
If you are unsure which data protection authority to contact, please contact firstname.lastname@example.org who will advise you.