Privacy Policy

GLASGOW DISTILLERY COMPANY LIMITED is the data controller for this store, customer support and membership programme. Contact:

GLASGOW DISTILLERY COMPANY LIMITED
8 Deanside Road, Glasgow, Scotland, G52 4JF, United Kingdom
support@glasgowdisttill.shop
+44 7701689203

For privacy questions, use the subject “Privacy request”.

We collect data you provide at checkout or in an enquiry: name, email, phone, shipping and billing address, country, order lines, gift-order details, support messages, consent choices and membership selections. We receive order status, payment reference, payment method type, refund and dispute status from our payment provider. We do not receive or store a complete card number or card security code.

Collection sources: information you give us directly through checkout, contact, support, gift-order and membership forms; information collected automatically from your browser, device, hosting and security logs; transaction results supplied by Stripe or PayPal; and tracking or delivery events supplied by delivery carriers. Your shipping address is collected directly from you during checkout and used for order fulfilment, delivery support, returns and related legal records.

We also receive limited technical data from your browser and hosting provider, including IP address, device and browser type, request time, security events, cookie choices and pages used. Carriers may return tracking and delivery-event data.

• Contract: to validate a cart, take payment, pack and deliver equipment, provide order tracking, process returns and administer membership.
• Legal obligation: to keep tax, accounting, fraud-prevention and consumer-rights records.
• Legitimate interests: to secure the store, prevent abuse, improve product care, answer support and understand aggregate store performance, balanced against your rights.
• Consent: for optional marketing or non-essential cookies, which you may withdraw.

For order fulfilment, we use the recipient name, shipping address, phone number, email address and purchased items to prepare, label, dispatch and track the parcel, provide delivery updates and handle returns.

Checkout contact and delivery details may be retained as an incomplete-order lead for up to 24 months where permitted. You may object or request deletion.

We share only what each processor needs: Vercel or equivalent hosting and security providers; Supabase for order, membership and enquiry records; Stripe and, where offered at checkout, PayPal for payment processing; Resend or another transactional email provider; analytics and consent providers where enabled; and postal or courier partners for labels, customs documents, tracking and delivery.

Stripe or PayPal collects payment credentials directly on its hosted or secured payment surface. Barwright does not access the complete card number. Delivery carriers receive the recipient name, address, phone where needed and parcel details. We may share data with advisers, regulators or law enforcement where legally required.

Worldwide delivery and cloud processing may transfer data outside the United Kingdom or European Economic Area. Where adequacy regulations do not apply, we use contractual safeguards such as the UK International Data Transfer Addendum or approved standard contractual clauses and assess relevant transfer risks.

Order, invoice, payment and tax records are normally retained for up to seven years. Support and incomplete-order lead data is retained for no more than 24 months. Delivery tracking is kept for the order and claims period. Membership data is retained while active and then for up to seven years where linked to financial records. Cookie and security logs use shorter periods appropriate to their purpose.

We delete or anonymise data when the period ends unless a dispute, fraud review or legal hold requires longer retention.

Depending on location, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; and ask us to explain a decision. California residents may request to know, correct or delete covered personal information and receive equal service for exercising rights. We verify requests before disclosing records.

Email support@glasgowdisttill.shop. UK users may complain to the Information Commissioner’s Office; EU users may contact their supervisory authority; California users may contact the California Privacy Protection Agency.

We do not sell personal information for money and do not share it for cross-context behavioural advertising. If our practices change, we will provide a clear “Do Not Sell or Share My Personal Information” mechanism before that use begins. You can reject non-essential analytics through cookie choices.

Strictly necessary cookies operate the cart, Admin session, checkout security and consent choice. Optional analytics is used only where enabled and permitted. The Cookie Policy lists purposes and controls. Cart contents may be stored in your browser; customer details and card data are not placed in a long-term browser cookie.

We use transport encryption, restricted server credentials, signed Admin cookies, payment-provider hosted entry, least-privilege access, webhook signature checks, logging and backups. No system is risk-free; we assess suspected incidents and notify affected people or regulators where law requires.

We do not use solely automated decisions that create legal or similarly significant effects. This is an adult household-equipment store. Children under 13 may not use it. People aged 13–17 need a parent or guardian’s consent and contact details. The store does not knowingly collect children’s data or sell age-restricted beverages.

Send privacy or complaint requests to support@glasgowdisttill.shop, call +44 7701689203, or write to GLASGOW DISTILLERY COMPANY LIMITED
8 Deanside Road, Glasgow, Scotland, G52 4JF, United Kingdom
support@glasgowdisttill.shop
+44 7701689203. Include the email or order reference needed to locate the record, but never send card details.