1. Who We Are (Data Controller)

Harley House Distillery Ltd respects your privacy and is committed to protecting your personal information.

This policy explains what information we collect, why we use it, who we may share it with, how long we keep it and your rights.

​

*Harley House Distillery Ltd* is the data controller responsible for your personal information.

• Harley House Distillery Ltd, 79 Sutton Road, Seaford, East Sussex, BN25 4QH

• ​

*Company Number:* 10871366

*Email:* [info@harleyhousedistillery.co.uk](mailto:info@harleyhousedistillery.co.uk)
*Telephone:* 01323 491998

We process personal information in accordance with applicable UK data-protection and privacy law, including the *UK GDPR, **Data Protection Act 2018, **Data (Use and Access) Act 2025* and, where applicable, the *Privacy and Electronic Communications Regulations 2003 (PECR)*.
 

2. Information We Collect and Why

We may collect and use personal information when you purchase from us, contact us, use our website or sign up for marketing.

• Orders and Delivery

We may collect:

• Your name;

• Billing and delivery address;

• Email address;

• Telephone number; and

• Details of your order.

We use this information to process and deliver your order, communicate with you, and manage cancellations, returns or refunds.

*Lawful basis:* performance of our contract with you.

​

3.  Payments

Payments are processed securely by payment providers made available through our website, such as Wix Payments, PayPal, or other approved payment services.

We do not normally store your full payment card details.

Payment providers may process information for payment authorisation, security, and fraud prevention.

*Lawful basis:* performance of our contract with you and, where applicable, compliance with legal obligations and our legitimate interests in preventing fraud.

​

4. Age Verification and Alcohol Sales

We may process information necessary to confirm that age requirements have been met when alcohol is purchased, collected or delivered.

We do not normally retain copies of identification unless this is necessary and lawful.

*Lawful basis:* compliance with legal obligations and our legitimate interests in complying with licensing requirements and preventing unlawful alcohol sales.
 

5. Enquiries and Trade Customers

If you contact us about products, trade accounts, events, corporate gifting, bespoke distilling or other services, we may collect:

* your name;
* business name;
* email address;
* telephone number; and
* details of your enquiry.

*Lawful basis:* our legitimate interests in responding to enquiries and operating our business, or taking steps at your request before entering into a contract.

​

6. Marketing

If you sign up for news, offers, or promotions, we may use your contact details for marketing.

We will only send electronic marketing where permitted by law.

This may be where:

* you have given us consent; or
* The existing-customer *soft opt-in* applies and all legal requirements are met.

Where we rely on the soft opt-in, we will only market our own similar products or services, and you will have been given an opportunity to opt out when your details were collected and in every subsequent marketing message.

You can unsubscribe at any time using the link in our marketing emails or by contacting us.

*Lawful basis:* consent or legitimate interests, as appropriate, together with compliance with PECR.

 

7. Website and Technical Information

When you use our website, we may collect technical information such as:

* IP address;
* browser and device information;
* pages visited;
* referral information; and
* website interaction data.

We may use this information for website operation, security, fraud prevention, performance and analytics.

The lawful basis depends on the purpose for which the information is used and whether consent is required.

 

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

• Strictly Necessary Cookies

Some cookies are essential for the operation of our website and online shop. These may include cookies used for:

* website security;
* shopping baskets;
* checkout;
* session management;
* load balancing; and
* recording privacy or cookie preferences.

​

Where a cookie or similar technology is strictly necessary to provide a service requested by you, consent is not required under PECR.

• Analytics, Advertising and Other Non-Essential Cookies

We may use analytics and other non-essential technologies, including services such as Google Analytics, to understand how visitors use our website and improve its performance.

Where consent is legally required, these technologies will *not be activated until you have given your consent* through our cookie banner or preference centre.

You can reject non-essential cookies and change or withdraw your preferences at any time through the cookie settings available on our website.

You may also control cookies through your browser settings.

​

9. Whom We Share Information With

We only share personal information where it is necessary and lawful.

Depending on the service used, this may include:

* *payment providers*, such as Wix Payments, PayPal, or other payment services made available through our website, to process and authenticate payments;
* *delivery and courier providers*, such as Royal Mail, APC, DPD, or other carriers used to fulfil your order;
* *website, hosting and ecommerce providers*, including Wix, to operate our website and online store;
* *analytics and website-performance providers*, such as Google Analytics, where you have consented to non-essential cookies;
* *email, marketing and IT service providers*, where used to operate our business or communicate with you;
* *professional advisers*, including accountants, legal advisers and insurers where necessary;
* *HMRC, regulators, law-enforcement bodies or other authorities* where disclosure is required by law.

We do not necessarily share your information with every provider listed above. The provider used will depend on the payment method, delivery service, website functionality, or other service relevant to your transaction.

We do *not sell or rent your personal information*.

Some organisations may process information on our behalf as data processors, while others may act as independent data controllers under their own legal responsibilities and privacy policies.

​

10. International Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where this results in a restricted international transfer, we will ensure that a lawful transfer mechanism is used where required.

This may include:

* UK adequacy regulations;
* the UK International Data Transfer Agreement;
* the UK Addendum to the EU Standard Contractual Clauses; or
* another legally approved safeguard or exemption.

​

Where required, we will also carry out or rely on appropriate transfer-risk assessments and additional safeguards.

You may contact us if you would like further information about the safeguards used for international transfers.

 

11. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal, accounting, tax, or regulatory requirements.

As a general guide:

*Order and transaction records:* normally retained for up to *6 years* where required for accounting, tax or legal purposes.

*Marketing information:* retained until you unsubscribe, withdraw consent or we determine that the information is no longer required.

*General enquiries:* normally retained for up to *24 months after the last relevant communication*, unless there is a legitimate reason to keep them longer.

We may retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.

​

12. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

* request access to your personal information;
* ask us to correct inaccurate or incomplete information;
* request deletion of your information;
* request restriction of processing;
* object to certain processing;
* request transfer of certain information to you or another organisation;
* withdraw consent where we rely on consent; and
* complain about how your information is being used.

You have an *absolute right to object to your personal information being used for direct marketing*.

These rights are subject to legal conditions and exemptions.

You will not normally be charged for exercising your rights.

To exercise a right, contact:

*[info@harleyhousedistillery.co.uk](mailto:info@harleyhousedistillery.co.uk)*

We may ask for information necessary to confirm your identity.

We will respond within the time limits required by data protection law.

​

13. Data Security

We take appropriate technical and organisational measures to protect personal information against:

* unauthorised access;
* accidental or unlawful loss;
* misuse;
* alteration; and
* unauthorised disclosure.

​

We also take reasonable steps to ensure that service providers handling personal information on our behalf provide appropriate safeguards.

​

14. Personal Data Breaches

If we become aware of a personal data breach, we will investigate it promptly.

Where required by law, we will notify the Information Commissioner's Office and affected individuals within the applicable legal time limits.

If you believe there has been a privacy or security issue involving your personal information, please contact us.

 

15. Data Protection Complaints

You have the right to complain to us if you believe we have not handled your personal information correctly.

You can make a data-protection complaint by emailing:

*[info@harleyhousedistillery.co.uk](mailto:info@harleyhousedistillery.co.uk)*

 

We will:

* acknowledge your complaint within *30 days*;
* take appropriate steps to investigate it without undue delay;
* keep you informed where appropriate; and
* Tell you the outcome without undue delay.

​

If you remain dissatisfied, you also have the right to complain to the *Information Commissioner's Office (ICO)*.

*Information Commissioner's Office*
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

*Telephone:* 0303 123 1113

Further information is available at *ico.org.uk*.

​

16. Changes to this Policy

We may update this Privacy & Cookies Policy from time to time to reflect changes to our business, services, technology or legal requirements.

 

The latest version will be published on our website with the date of the most recent update.

​

** Updated September 2026