Online Store Privacy Policy

1.Introduction

Protection of personal data is very important to us.  This Notice explains how and for what purposes we collect, use, retain, disclose, and safeguard the personal data you provide to us via the website where this Notice appears.This Notice may change from time to time. You are advised to review this Notice periodically.If you have any questions, feel free to get in touch via the method set out in the "Contact us" section below.

2. Who are we?

We are Loch Lomond Distillers Limited ("Loch Lomond Distillers"), the owner of Forrit Drinks, and Mail Marketing (UK) Limited ("MMUK"), which operates the Web Shop at the Forrit Drinks website where this Notice is available. When you browse at www.forritdrinks.com, Loch Lomond Distillers may collect personal data about you and when you browse and shop on the Forrit Drinks online store (the "Web Shop"), MMUK may collect personal data about you. 

3. What personal data do we collect about you and how do we collect it?

We may collect and generate personal data about you in accordance with this Notice. This includes: When you visit the Web Shop or fill in forms on the Web Shop: details of your visits to the Web Shop and the resources that you access, including the device and browser you use, your network connection, your Internet Protocol (IP) address, traffic data, location data, weblog statistics and other communication data; personal details that you provide by filling in forms on the Web Shop, such as when you register to receive information such as a newsletter or contact us via the contact us page, including your name, email address, phone number, postal and billing address, date of birth and location data (including country and nearest city); certain payment information, including the location of payments made by credit/debit card. When you contact us or we contact you or you take part in competitions, surveys or reviews about our products: information that you provide about yourself anytime you contact us about our products (for example, your name, date of birth, contact details and transaction information relating to any purchase of our products), including by phone, email, post, through social media or via a third party seller or distributor of our products; details of emails and other communications we send to you that you open, including any links that you click on in those communications; your feedback and contributions to surveys or reviews; and information that you provide by filling in forms on the Web Shop, such as when you register to receive information such as a newsletter or contact us via the contact us page including your name, email, telephone number, postal and billing address, date of birth; and location data (including country and nearest city).We may combine information we have about you from various sources, including the data that you have provided to us.

4. How do we use your personal data?

Loch Lomond Distillers use your personal data for the following purposes: to promote and market products and services if you have indicated that you would like to receive marketing from us, to send you newsletters and other marketing materials including details of special offers, promotions, events, distillery tours, festivals and product launches; to process and keep records of payments you make in relation to the products on the Web Shop; to run competitions in accordance with the relevant terms and conditions; to notify winning participants and arrange delivery of prizes; to notify competition participants who request details of winning entries of the name and geographical location of the prize winners; to provide customer services including the assessment and resolution of any complaints or enquiries made; to protect and support our business, personnel and customers, such as combatting fraud and underage purchase of alcohol products; and for compliance to comply with legal, regulatory and other requirements, such as verifying that you are of the correct age to access and shop at the Web Shop.Where you have given your consent to receive marketing from Loch Lomond Distillers, you have the right to withdraw that consent at any time by contacting us at lochlomondgroup@mailmarkuk.com. MMUK use your personal data for the following purposes:to service your needs including fulfilling orders of any products, including delivery of those products, and keep you updated on the status of your orders; to process and keep records of payments you make in relation to the products on the Web Shop; to run competitions in accordance with the relevant terms and conditions; to notify winning participants and arrange delivery of prizes; to notify competition participants who request details of winning entries of the name and geographical location of the prize winners; to provide customer services including the assessment and resolution of any complaints or enquiries made; to protect and support MMUK’s business, personnel and customers, such as combatting fraud and underage purchase of alcohol products; and for compliance to comply with legal, regulatory and other requirements, such as verifying that you are of the correct age to purchase and take delivery of the products available at the Web Shop.Where you have given your consent to receive marketing from MMUK, you have the right to withdraw that consent at any time by contacting us at lochlomondgroup@mailmarkuk.co.

5. On what basis do we use your personal data?

We use your personal data on the following basis: with your consent, where you have indicated that you would like to receive marketing; in order to fulfil a contract for the sale of products on the Web Shop; for the legitimate interests of the Loch Lomond Distillers and the legitimate interests of MMUK, being the purposes set out in the "How do we use your personal data?" section above; and to comply with legal and regulatory obligations.

6. Who do we share your personal data with?

We may share certain of your personal data with:members of the Loch Lomond Distillers group of companies; members of the MMUK group of companies; marketing agencies that provide services to Loch Lomond Distillers; Stripe Payments Europe Ltd. ("Stripe"), the third-party service provider used to process payment transactions for purchases made from the Web Shop, e.g. we share your name, postal and billing address, email address, phone number, and payment method information (such as credit or debit card number), purchase amount, date of purchase and payment method with Stripe to complete your transaction at the Web Shop for the purchase of products. You can find more information about how Stripe process and safeguard personal data in its Privacy Policy here: https://stripe.com/gb/privacy; delivery companies who provide delivery fulfilment services for products purchased from the Web Shop. We may also need to make your personal data available to other parties, such as: legal and regulatory authorities; accountants, auditors, lawyers and other outside professional advisors; third parties to whom we may choose to sell, transfer or merge parts of our business or assets or alternatively, we may seek to acquire other businesses or merge with them. If a change happens, then the new owners may use your personal data in the same way as set out in this privacy policy; companies that provide products and services to support the running of the Web Shop (such as IT systems, service and software suppliers and other third parties engaged to assist in operating the Web Shop). We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.Stripe processes, analyses, and manages personal data to: (a) process your payment when you purchase from the Web Shop; (b) mitigate fraud, financial loss, or other harm; and (c) analyse, develop and improve its products, systems, and tools. Stripe may provide your personal data to third-party service providers, including Payment Method Providers, Payment Method Acquirers, and their respective affiliates, as well as to Stripe’s affiliates, to allow Stripe to provide its payment processing services to you and other users.A "Payment Method Provider" means the provider of a payment method Stripe uses on the Web Shop, such as Visa and Mastercard. A "Payment Method Acquirer" is a financial institution (such as a bank) that is authorised by a Payment Method Provider to accept and route payments you make.When processing payment transactions, Stripe will be MMUK’s data processor and will process your personal data in accordance with its instructions (except that Stripe will be a data controller in relation to personal data where Stripe determines the purposes and manner in which the personal data is processed e.g. fraud prevention).

7. Transfers of your personal data outside your home country

Your personal data may be processed by us, our affiliated companies, and those other parties described above, outside the United Kingdom. Where the European Commission has not issued an adequacy decision in relation to the jurisdiction where your personal data is processed, we will ensure that there are adequate mechanisms in place to protect your personal data in accordance with applicable data protection and privacy law. We will do this through use of data transfer agreements implementing standard data protection clauses. You can find more information about data transfer agreements here and can receive further information about the data transfer agreements that concern your personal data by contacting us via the method set out in the "Contact us" section below.Stripe will provide some or all of its payment processing services from systems located within the United States or other countries outside of the United Kingdom. Accordingly, your personal data for payment transactions may be transferred, processed and stored outside of the United Kingdom and, may be subject to disclosure by Stripe as required by applicable laws.  Stripe will do this through use of data transfer agreements implementing standard data protection clauses. You can read Stripe’s Privacy Policy here: https://stripe.com/gb/privacy.

8. Protecting your personal data

We adopt a variety of internal information security measures to keep your personal data safe, including to protect it from unauthorised access, use, disclosure, alteration or distribution. In addition, our IT and product and delivery fulfilment providers have adopted high information security standards. Where we use a third-party service provider, that provider will be carefully selected.

9. How long will we keep your personal data?

We will always keep your personal data for the period required by law. We will also keep your personal data where we need to do so in connection with legal action or an investigation involving us. Otherwise, we will only keep your personal data for the period necessary to fulfil the purposes outlined above and in any event for no more than seven years thereafter.

10. Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is also used to track visitor use of the Web Shop and to compile statistical reports on website activity. We use cookies to collect personal information to enable us to reflect our users' interests and by noting who has seen which pages (including click through from emails), how frequently particular pages are visited and to enable us to determine the most popular areas of the Web Shop. We may use cookies to enrich your experience of using the Web Shop by allowing us to tailor what you see to what we have learned about your preferences during your visits to the Web Shop. Sometimes we may use services of third parties and they may use cookies on our behalf in order to provide their services. The below explains the cookies on the Web Shop:

Google Analytics _utma, _utmb, _utmc, _utmt, _utmz [NOTE: MMUK privacy notice also refers to _ga and _gat]

These cookies are used to track visitor usage and build up information for the Analytics service run by Google to better understand how visitors use and engage with the website. They allow us to run reports on how the website is accessed, what pages are visited and traffic sources. The information collected and stored in these cookies is non-personally identifiable.

To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout

Age restriction age_gate

This cookie is used to remember date-of-birth details for the website user. This cookie has a short time expiry to ensure that users returning to the site will be prompted to confirm their age.

Content management system exp_tracker, exp_last_activity, exp_last_visit, exp_csrf_token

These cookies are used to improve the user experience of the Websites by building up anonymous data profiles that enable us to understand user journeys and behaviour across the Websites.

Facebook fbm_, fbsr_

These cookies determine whether a user is logged into Facebook. This is only applicable to users who opt to authenticate their age via Facebook.

Cookieconsent_dismissed

A cookie set when our cookie disclaimer has been agreed to.

__cfduid

A cookie for the Cloudflare CDN.

———
For further information visit www.aboutcookies.org or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, some features of our Website may not function as a result.

11. Your rights

You may be entitled to:

• request the correction of your personal data;

• request the deletion of your personal data in certain circumstances, for example where your personal data is no longer required for the purposes set out in the "How do we use your personal data?" section above;

• request the restriction of the processing of your personal data in certain circumstances;

• object to the processing of your personal data. In this case, we will no longer process your personal data unless there are compelling legitimate grounds for doing so or where it is necessary in relation to a legal claim;

• ask about the processing of your personal data and to be provided with a copy of your personal data; and

• request receipt or transmission to another organisation, in a machine-readable form, of the personal data that you have provided through the Web Shop.

If you would like more information about your rights, to exercise these rights, or if you have any concerns about the processing of your personal data, please contact us via the method set out in the "Contact us" section below. If you choose to exercise your rights, we will respond in accordance with, and to the extent required by, our legal obligations.

If you believe that we have illegally processed your personal data, or if you have suffered as a result of unlawful processing of your personal data, you can present a claim to your local supervisory authority.

Where you are given the option to share your personal data with us, you can always choose not to do so. If you object to the processing of your personal data, we will respect that choice in accordance with its legal obligations. This could mean that we are unable to perform the actions necessary to achieve the purposes of processing described above.

12. Contact Us

If you have questions about the processing of your personal data, or need additional information, please contact us at lochlomondgroup@mailmarkuk.com

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

13. Data Controllers

Loch Lomond Distillers and MMUK are controllers of your personal data when you shop at the Web Shop.