ONLINE STORE PRIVACY NOTICE

1. INTRODUCTION

This Notice may change from time to time. You are advised to review this Notice periodically.

If you have any questions, feel free to get in touch via the method set out in the "Contact us" section of this Notice below.

2. WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU AND HOW DO WE COLLECT IT?

We may collect and generate personal data about you in accordance with this Notice. This includes:

When you visit the Web Shop or fill in forms on the Web Shop:

When you contact us or we contact you or you take part in competitions, surveys or reviews about our products:

We may combine information we have about you from various sources, including the data that you have provided to us.

3. HOW DO WE USE YOUR PERSONAL DATA?

Loch Lomond Group use your personal data for the following purposes:

Where you have given your consent to receive marketing from Loch Lomond Group, you have the right to withdraw that consent at any time by contacting us at ukcustomerservices@lochlomondgroup.com.

MMUK use your personal data for the following purposes:

4. ON WHAT BASIS DO WE USE YOUR PERSONAL DATA?

We use your personal data on the following basis:

5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We may share certain of your personal data with:

We may also need to make your personal data available to other parties, such as:

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. TRANSFERS OF YOUR PERSONAL DATA OUTSIDE OF YOUR HOME COUNTRY

Your personal data may be processed by us, our affiliated companies, and those other parties described above, outside the United Kingdom. Where the European Commission has not issued an adequacy decision in relation to the jurisdiction where your personal data is processed, we will ensure that there are adequate mechanisms in place to protect your personal data in accordance with applicable data protection and privacy law.

We will do this through use of data transfer agreements implementing standard data protection clauses or where we use providers based in the US, under the EU-US Privacy Shield program, which set out standards for how we process your personal data and requires them to provide similar protection to personal data. You can find more information about data transfer agreements here and can receive further information about the data transfer agreements that concern your personal data by contacting us via the method set out in the "Contact us" section of this notice below.

7. PROTECTING YOUR PERSONAL DATA

We adopt a variety of internal information security measures to keep your personal data safe, including to protect it from unauthorised access, use, disclosure, alteration or distribution. In addition, our IT and product and delivery fulfilment providers have adopted high information security standards. Where we use a third-party service provider, that provider will be carefully selected.

8. HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

We will always keep your personal data for the period required by law. We will also keep your personal data where we need to do so in connection with legal action or an investigation involving us. Otherwise, we will only keep your personal data for the period necessary to fulfil the purposes outlined above and in any event for no more than seven years thereafter.

9. COOKIES

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is also used to track visitor use of the Web Shop and to compile statistical reports on website activity.

We use cookies to collect personal information to enable us to reflect our users' interests and by noting who has seen which pages (including click through from emails), how frequently particular pages are visited and to enable us to determine the most popular areas of the Web Shop.

We may use cookies to enrich your experience of using the Web Shop by allowing us to tailor what you see to what we have learned about your preferences during your visits to the Web Shop. Sometimes we may use services of third parties and they may use cookies on our behalf in order to provide their services.

The table below explains the cookies on the Web Shop.

Cookie Name

Purpose and further information

Google Analytics _utma, _utmb, _utmc, _utmt, _utmz [NOTE: MMUK privacy notice also refers to _ga and _gat]

These cookies are used to track visitor usage and build up information for the Analytics service run by Google to better understand how visitors use and engage with the website. They allow us to run reports on how the website is accessed, what pages are visited and traffic sources. The information collected and stored in these cookies is non-personally identifiable.

To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout

Age restriction age_gate

This cookie is used to remember date-of-birth details for the website user. This cookie has a short time expiry to ensure that users returning to the site will be prompted to confirm their age.

Content management system exp_tracker, exp_last_activity, exp_last_visit, exp_csrf_token

These cookies are used to improve the user experience of the Websites by building up anonymous data profiles that enable us to understand user journeys and behaviour across the Websites.

Facebook fbm_, fbsr_

These cookies determine whether a user is logged into Facebook. This is only applicable to users who opt to authenticate their age via Facebook.

Cookieconsent_dismissed

A cookie set when our cookie disclaimer has been agreed to.

__cfduid

A cookie for the Cloudflare CDN.

 

For further information visit www.aboutcookies.org or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, some features of our Website may not function as a result.

10. YOUR RIGHTS

You may be entitled to:

If you would like more information about your rights, to exercise these rights, or if you have any concerns about the processing of your personal data, please contact us via the method set out in the "Contact us" section of this Notice below. If you choose to exercise your rights, we will respond in accordance with, and to the extent required by, our legal obligations.

If you believe that we have illegally processed your personal data, or if you have suffered as a result of unlawful processing of your personal data, you can present a claim to your local supervisory authority.

Where you are given the option to share your personal data with us, you can always choose not to do so. If you object to the processing of your personal data, we will respect that choice in accordance with its legal obligations. This could mean that we are unable to perform the actions necessary to achieve the purposes of processing described above.

11. CONTACT US

If you have questions about the processing of your personal data, or need additional information, please contact ukcustomerservices@lochlomondgroup.com

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

12. DATA CONTROLLERS

Loch Lomond Distillers Limited and Mail Marketing (UK) Limited are controllers of your personal data.

 

[27th March 2020]