Privacy Policy

1. Who we are

Avenleigh Barrel Co (“we”, “us”) is the controller of personal data collected through this site. Registered details and data-protection contact: [to be confirmed].

2. Information we collect

When you make an enquiry we may collect: name, email, telephone, country of residence, preferred contact method, cask interest, intended route, experience and any message you provide.

We also collect limited technical data (such as basic analytics) as described in our Cookie Policy.

3. How we use your information

To respond to your enquiry and discuss current availability and terms; to provide the services you request; to comply with legal and record-keeping obligations; and, where you consent, to send you cask releases and updates.

4. Lawful basis

We rely on your consent (for marketing), the performance of a contract or steps taken at your request (to handle enquiries and acquisitions), and our legitimate interests and legal obligations. [Confirm bases with adviser under UK GDPR.]

5. Marketing

We only send marketing where you have opted in. You can withdraw consent at any time using the unsubscribe link or by contacting us.

6. Sharing your data

We do not sell your data. We may share it with trusted service providers (for example, warehousing, professional advisers or IT providers) under appropriate agreements, and where required by law.

7. Retention

We keep personal data only as long as necessary for the purposes above and to meet legal obligations, after which it is securely deleted. [Confirm retention periods.]

8. Your rights

Subject to law, you may request access to, correction or deletion of your data, object to or restrict processing, and request data portability. To exercise these rights, contact us.

9. International transfers

Where data is transferred outside the UK/EEA, we use appropriate safeguards. [Confirm mechanisms if applicable.]

10. Security

We use appropriate technical and organisational measures to protect your data. Sensitive details in provenance documents should be redacted where possible.

11. Complaints

You have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would ask that you contact us first so we can help.

12. Contact

For any privacy matter, including data requests, please contact us. Data-protection contact/DPO: [to be confirmed].

Last updated: [date]. Questions: contact us.